last executing test programs: 2.055242327s ago: executing program 3 (id=2768): r0 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x118, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x118}, 0x1, 0x0, 0x0, 0xc1}, 0x94ca238d0afdd51a) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="54000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r5], 0x54}, 0x1, 0xba01}, 0x810) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x3) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x60, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3e, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3c0d05bc"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x60}}, 0x0) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) (async, rerun: 32) getsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x8, &(0x7f0000000540), &(0x7f00000005c0)=0x4) (rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) 1.830229787s ago: executing program 4 (id=2769): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000002c0)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001a80)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001c80)={r3, &(0x7f0000001b80)='\x00', 0x400002, &(0x7f0000001bc0)={@align=0x7f, {0x5, 0x9a, 0xc000000, 0x401}}, 0x8001, &(0x7f0000001c00)={@_ha_fsid}, &(0x7f0000001c40)=0x6}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000001cc0)=0x8008, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)=ANY=[@ANYBLOB="400000231000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500200012800b0001006272696467650000100002800c0023000604000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002200)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000002280)=ANY=[@ANYBLOB="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"]) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800010000000000000000000a0000000400000004000b"], 0x1c}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, r3, 0xffffffff00000000}, 0x38) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000001d00)=[{{&(0x7f0000001d80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001e00)="c59a9693", 0x4}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ec0)="93", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000001f00)=@assoc_value={0x0}, &(0x7f0000001f40)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000001f80)={r10, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000001fc0)={r10, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, &(0x7f0000002080)=0x84) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001a00)={{r3, &(0x7f00000003c0)='\x00', 0x32002, &(0x7f0000000400)={@_ha_fsid={[0x7ff, 0x9]}, {0x0, 0x8, 0x800, 0x400}}, 0x9, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x1}, 0x5, &(0x7f0000001940)=[{0x2, 0xc, &(0x7f0000000580)='.\\\\(\x00', &(0x7f00000005c0)="f202e6841df2e435401a6a4a91cc7037934056888111b62aa63cc955bbb5aff15ec6ddee7fcecc583bbf894d3f013c986215d5609a5fb3ae7d1a23ed015790c313250e83c6f036e0b68275f625783a831f852eeffc66471bd7014065a0862ac640b0cd8237c763caa2f516cb21dcc355f69ce0127a9188a88d7d50bd852b44170b4eb935caa64e2be14248054bb519d044a30e40fa81f6513ce98615513739744109c742471e495053985a1d475df7f588df13614d71de09f485a9e8051ca539e2539658b0069e884c18cb5979431fa5a027088b13bf3210e382fbb5f0a1a9d37479c6aa25cf4dcfe60ea74e4f23f398ccaaf5b00f4f49e7030348573e7da7984e3c2f0623c15a748256b732405c4a7b664d8baf9484b1c747179b130e12f993bf0ddae6ce9761bc5a5811ef75dd3586f009b464bbfb680264c2481b712aaaef34b614b2aa6b706abdb83049236f4af7963ecce8b6aab8a365c4f795a8e5e8af2ea4b1f0924500e55976a1d3b77f1699aecfca210b295f1c259e341124276369b9b217ff3843fa29028bf730d06e858f54a1518922be02b478b7754e3fd9950cb09ffdd96ce9a05ffaaa7112610cbf0823422ba78a070c4a4b515882aafcf690273b13b39500fd7e5fdcff84d792e382a6b2130fed29e84495d938114c3edd25b0f8d7536b9d7bb9e012f3f941b7ae481e1e7694a90336c852f8a8dfce561d083c8a5a258b6cc6f2224f199faaeda95abb0ea43f672b166a2d90a83c3174db5c9098455da29ed2405684874d9d48ea5eb990c501af26965fdc0c9497cb635fae44fd67fa2356e3ee0c947bd0b2c4793ed0a4206e69e577a1f88bafb4c0ae433cf97dc3eadb9ae0f8bdd00f8962191d7bef852d3302486fa72123cb5d88677074608cbe49f0d7819bdcafec741360bfc67e8f13b15eecf278442579f987613298b462241879599fb836eead9ac7795cb591de8ff940b40578603a1012988cd3ffb9f0c4626feed1af40611c7a5f6e51ed2d074e8d441da98afcb09a85af1ca9eed160e7ddb53b55ca86dddf83c6660f21c8be39d1d561eeb8a2662745317a2cef51e661beb3f2538960ad15ef3dc54ca5e74feba8966975ba77cc371fbc4f268cae5167544506b46382f8ea2280501a7c849824581cd5afb6c3523a78ee471b5ed77f3bebd1fcf57d6d835ae4bbbffb2c583aad77496c3de6f255ecba4e595dc87b00aa442fc35afaf7afbef0100a29aa8a842c586e8c61281059e41e9b5bacdc88c96bfbca6305c9ff3312413abded617e14f0794559dae65d24ca5e9ebd50f47d9341bd1dce56af30746e9c68d158c8d7814adac232fc057d2e845580af288b5a43cf213f409a5fee010dc791ae2581cf8312d08bce0af64d757241a1c2d70b9f440786d13e47ab16f3e06bf335abfe9022ea0a9cb8efce81fb2c1e5c5b73bfc1c698a5bb75c0e96314788951f0834f327c8debc5bf3d9fdbb930c0eb345673e1fb0380a994e8d59776510fb29fd2cd3ec161547e2d4a493cba0a37615d75ca745bec8ff6978e8fc8b74c7b309d8f397d4e14e4ee08c448761563283ad8c838b6b36039e40f5f60360bf596a7f7b418d6203f1270462e878ba0ecef65ec66ba43cfe1cff641cdb7ac97a6816685b9656d4ecb1b2161c2e1d594cadea4996b325ee50e13cf2847e67bd9f57c2218fc21999d01aba3956f4e3bdf282f4aac0e52469a6b2674a32bbad58db7e66f9d2a18108777d26aaee7bb82ba5f962f0223860d8dcd02a70d69e6a63ae986a26189559ab2f66572c3b68bd18fed67cc25cd5f61b43a63633c7026bc2e95f398b911059e50c0d85ac0ed20247426111525f03c40f6dffcd9966e7d01f7338f2f3d21847b2f89479e521ee58531fc002b5b8ea32e269f178fd3f8d1271b3dd09d707f3e89ad2dc1f1e55031f5f0fc7df65c8de120de0cc7d7429225f58b05a0ee877eb088a15cf6a35acad62d6e2ab1e5ce84626a3d74841924aab18075c26d407f68eb536728fda4a5f7910ae71095c882e491e5a8399d1817de30653078859ea0c5c46d0c5d58800d0f3a3c679343d67fe0772144e1316ffd8f66fefad0393a745699d772f2dab2d6cb3b13baab52411c7ab3e27c8341366f77e7ee95fb99531c63a19afe06125c82f4c70b70988843f25506e9dc701333c973e7003f2c553925eea5e0ac8ffd966041ee54418416a2c1446b496e72ff18f420db22323cb7c03ba6bfc053c66bcbe48dbcf27439d4520648c0c982b65a86e5fe34d9669cf035d65a1ec518313bcf7fa179cc533a9a2c113041042153e837b2ceb3456e794e6e79acbf5eadcad28715e16dde254cf0d445fa5fab8b21058a8b2f614c7e7ddc51b89cc224cb92f3b2646ee76b8aac24cbb64adc463ff71f953335c0485662403258bc61dffa8d28a5dd5f5446c858b25e67d87b77cd454167df6d454631fd3b3b8b98b797605652779d841a07eae93525a12e9969b942e81b808e78d3ba3c12d7fb81e701ae97a5a2f9514d7bb974a033bf4fc187a912d63ba3696fa000edbba03f13efa4ea8714a8a318afc7296f77014878353f4cd204a0c11a177b0c27f4b3cdd955f3c040dcad00b0a39681c86bbae3c1b44c8d566e7934cb33f7dcfadb35db5ce373bfe7291e3c71cfc4c6ce68160335bbd3007c94783fa65ea86246d2543d16cf91c5f9aea924d2f2286b7f8e745eb6edb63daaa369f692e36512b47b2ef5c9768f35d2c058a970b592497fa838e05bcae9c3e222c6aa359503a95a4a944af4d38a7301e804e6642bb045d3599dc039dc40ebc1656a380254e04b684739dc18611dd4c4e89c31b59bb370e3e309bfed02f50ce57076224e048fc9582ab48d8c820192b7e78e1211985fe34f0594bb8c67903b4cafbd8129b67df33f1341f984bccee40192e44adea5d73444c33a81b73433861bf711380a16a99763a9eb58e14fa7312684da6bfd2ed1265e69102e80bcd27602764c25e79f39911b1c881d845cb253a0b2f06dfcd6a48f643ecd8be245bfe4d31bf29124710ff01b078e05a8166762fd12f4b92efb9f2d78e99399a95f3d04c412a2ca00f52464233fca1a1d76407da97588f7b385579ee7078276b693f8458f59a556de491b2e39b57e93ff21e21affb1a2682402e93d44865bc58bf9f5de5c389ad29aa99a299441d24a7f97890abd497a4ca5e17a2d3c3d8c343bc3ec3fd94e74cb920219304d359ca58212ce87ff98d4e509ba8f3cee23e0fe6ad2c2f8b14c1ac4d25aefc224825d501d6b611e63f28c1cd56f7ed6a69d7a1a75fb8913266872529024d6d56f7f4ed3384f9589d893949652110193cc884a1af14a08ea1a410569e3d0e80e3936649216826b691ca56f9d736259ad324fdcd7df0b05c429db5659dd9dd7914a057de17a863047f87cbe0b41eb9b7e671d4f063ae86339679dd40fd1a907c7212cb66dee9c207ee17213536d9677edcfdd238bcf6a0496eb22aa532aaa6251791ce2df5a2a52e06eae961725a210e9974fb8b44fd3215eaf77f148c7cd652f0f98c471941dbeef8c055d6dc5c21519b808a0893736d534ae273f0d2f0af32ea96a3356aacbf9bfff31f8e581254c99d98615f7706bd5b1aac6420a7a0c64e986836ed5d2f545c3e1b5337eef83a0c21bc243972c5d572383ce2a8f71b6bbe71de07a927b92cf4dfcc39a28ed4495bab9793e3cd52d5c7bfa4fb5e39ae2db5abd8116d69df3ddbfd1a954160142b43813cdf1f1f9a6beb719d9269954f05698c073486094adf006570e2634ffb5d11c5585873516ad0c4c3e09b4c922ea82fe2753753155e21a89be4108d13da3d06630315a372ac11322f52e97faf2a628920957fba7e782bda449dc90a62acf3ac78f47a8c4251a0e26fb613fba8835922bf1255461cbb6361e70a4311f4467fade19a3316dd1d22283022fcf5e63ea2638598223be0078b37fa9361ef29386a9da352be1e9e9a3108818a588d62e9c53854e571a15185286d5624c2e670d6349a86fe148f9cfc7d3a2fc7c88cd2889ac3504ee0cc22fb668156cfe1ad070ebe3f724aa14b65668d2a99c708e2d2b0775e3ef551fc04ea4b55b13cf34be9e2a1ec97d9e7f81a85feb8e0ceb6e2770f005d8bb701e0f5d5bc522a9a5f5fc09d2c7fc363b8ebd5c1dc1176fca60b658d68a419ba458bf85ab37e4dfd3a007da247d4e87716e677c5ecc34cbc3aaeba126b1099c95c470b9952a2fc764cc0b5d4b545be1e52fdbb3ed47e77f9f366e43026185cc0d28234b556106a3ba6c80a524b3fa49402b8f4a2ef09dbb44b302c94c2e1c0acf11200af15003f515823df4dad7f5167d0ef328040f9fa2538a489df5d823f7180b3b143c837f36aebcae783e86ead5070b69e839b0354d5495f634729359413453dc178db660a759e94e8f3da3653ea57744f805ea173cab0b4ada641a8c615700bf814f28d1db9555105277a04e69054c8f2c24555f2255d9afcb0313a54ceb745177ee23cd43406a5dab11b3209bfe084b6db47f49f0d43467b2c4b9e4ddb0ce09502c6bbdda0af34dfbed9043badae12eede126323395b73beab57e3bcf9d470b5a591e9ede20daac2e565fc4d78e86be17774d4309edfe20fbb4e415cf2a45c388a4f49ff5a6d33523151eb60b53433ed158a1a01058838f6b2722da4ebf72817164b7afdfc415f1a59ab25e4e65063be11d1345328d0f75e31d6de04d1124f575e6a9587c33fab418d7bc676aa0dd305522637fe0766945e30b6a77102a69d6201e5821d97e74d95d2f50acfd72a125af3911b89077b74d38b576fde7616378bcac84944e5a9e9ed1843f50b84341ea6291d84176636b84aca6fdeea5841b65e2b2fab7ac51bde61314ac838694e543194b901f49cc0d92e75746b80ea7c13701d5caeb470ba4a55396bbde8ff166257222d5082e69371e5470d08099da9b30d2a33d390168545665087ffbda4f1ff06b46e72b8a4c484b9d332e1a35f59de319dc99f6e9ffea07f2c2b01a505de7a1e14abb6369565c2c0bae56ba5b6313c8ea093c8174b05f5eb3e976a94cbd26eedf3e99837389b0b71756a44ef412d5c0d10c4ddbaafe986dc037784fc67cedd8e3bdce29f8b2a13eb6795d897593c42986b729063a4df70e699606b4b83bb9b30410bb14668c813e258b4b5b7c0e92ac17ff3d07ce12b4ac270fab8c7af5558c7ccc4b26e8d8a33b94a9a73769c37e5527e6100ff03211e4c33391d2f5b1ed039f93e7470c4147f259a66eedb7da71fcd0d0ab3879331a9cd08bbc845e86ecba3ceced079752567f096e221d3590b1e7749af4b09d83798a96f4bf3a86e66ac85427035f8fda171f5978adcbe74ea196df8e132b6bf4aaf35c5154ca193d400a9898258aca1e669cccaca78ecb1f6738cd4d07966e5ca3581a9cf211953d9201a9113b70162ceb49143124464794c98147fedc77a34d36de0d761b7bdd7ad0ed371e5056c8a81e9421a54d47790b40767cd75cc3cfcce8c553d53068ddb8d2958128583a5ebedc63368b7155732abc2b17bcc09ad87c7d27d8d8ea99c0824a74c92a456f94de8898ca94f0f99e9febcb722525c759e38dbc12501112d746f4d4788a65f1865977f4ef2eaba1fd5e880d22f7b5c1c6801ba421a9536b6059ff2136e2893bb0318053524689a4e6c1fea966c1813b6135f1270349bedb60777a14794ddc6a140908263193e364bfa14b4c7a4edfafb04dc12a3405fb3460cc91bae26fae5cf77887924aa2096271da7542e062846d966ec3b933888a367f3244da5aa3", 0x1000, 0x2a}, {0x3, 0x95, &(0x7f00000015c0)='GPL\x00', &(0x7f0000001600)="123c9150717a5deacad1153955b2b01157d2c09da560ad21c0373bc6192cf8f373a98f8ccbf180bc9ebdaaccebbd1c904cac34be129a199c69b03f33248834957e7c27deac96421c801706f06d2d4b48d042e3b6758b77ce88414f1d7afb2144356fda86a59c6f7b8ca2919f3f7d67e08bf6e263ddb6128d1ede0b1b4e48bf41306c05cf7af205162174e9574e65dea763fdd304993b4e7b75b2e76a14057185d0ab80279fdfcda2fa8a5ccc9d25edcc59c266d916aca4ebe06296ebf1f73f1ad1a2f2b30fd2c9628b8da828901215581d0727", 0xd3, 0x1a}, {0x3, 0x3, &(0x7f0000001700)='%%&+}\x8a\x00', &(0x7f0000001740)="144d37fd63c3dc5a955a6edef4256606aa8eb285f683f05ce057bc4f7cbdff608bbc0d987b6ec8cea922bd84128f65ba24c95ef22acdd92ec0f8d70730c171f37b52db1c619a4528e3815b67420c99f804597c837a3bd06ece998cc26dee", 0x5e, 0x28}, {0x2, 0x7, &(0x7f00000017c0)='{{\xfd\x00', &(0x7f0000001800)="e12949df79e498cc6f97191a06c652c567cf4166e37e35d6fda83c53f671a38507c0a19a7a414da1c184d6e1bd586e93b4462d607be225151addfa046464389ebac7e395245c6c0d9c60c4240e520c0ff3ff4414c9585a1065689ea7ab0d29e707fc73b008cb51b113f117e63106374245930650b968fcc29f61a6d0ece443bda274106b58f627d81abfe1c535bfe1def2dfd37239520ee200", 0x99, 0x28}, {0x2, 0x1, &(0x7f00000018c0)='\x00', &(0x7f0000001900)="e7", 0x1, 0x1e}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@arena={0x21, 0x0, 0x0, 0x13, 0x10000, r3, 0x5, '\x00', r11, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, @void, @value, @value=r12}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) getsockopt$bt_sco_SCO_OPTIONS(r12, 0x11, 0x1, &(0x7f00000020c0)=""/187, &(0x7f0000002180)=0xbb) 1.655943863s ago: executing program 4 (id=2770): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5813}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003c80)={'veth0_to_bond\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000003cc0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003d00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003dc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000003e00)={0x0, 0x42, &(0x7f0000003e40)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xd}, {0x0, 0x9}, {0x5}}, [@filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0x0, 0x5, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IP_TTL, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x0, 0x1c, 0xff000000}, @TCA_FLOWER_KEY_IP_TTL={0x0, 0x4b, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040054) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003f80)={'ip6gre0\x00', &(0x7f0000003f00)={'syztnl1\x00', 0x0, 0x2f, 0xfb, 0x6, 0x400, 0x10, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8, 0x4, 0x10001}}) (async) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000003fc0)={@dev, 0x0}, &(0x7f0000004000)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000004080)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f00000040c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004100)=0x14) sendmsg$nl_route(r8, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004180)={&(0x7f00000041c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000004280)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000004340)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000043c0)={'vxcan1\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004480)={0x1, 0x58, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000004740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000004700)={&(0x7f00000044c0)={0x218, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x218}}, 0x4008040) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="80"], 0x30}}, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000140)=0x9, 0x4) r13 = socket$kcm(0x10, 0x2, 0x0) (async) socket(0x23, 0x4, 0x53f0800) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r14) sendmsg$DEVLINK_CMD_RELOAD(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r15, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) 1.599253939s ago: executing program 3 (id=2771): syz_emit_ethernet(0xf0, &(0x7f0000000000)={@empty, @random="a5c8bf75d9d4", @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x4, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x7, 0xf7, "58ea7c8fd88b9c54c8eb9bd5da191f8bd6496e23edae461c95b9d6b322892002ae06a8853f6fde9748a61b58fe619d99dc3abb15413084cb369ef1d81cd0ff47c1d3c3dcdb094273bdc0ade63a69ea5e9a5e6ee237fb2d00738d9c21a3d6b96e409bbbd4611c6cd7a2fc535d168eaa0b6ea928f181cd92496319f36f5c78f0009b2b193cff66402b3cadf3e4d49fb7050dc82cb06292e88d8550540b5bfa99d6300e991fcdb2b70c3c7eaadcd127d707b95e60cb61fbda7f58c69c325cca6de479472159ea40e2021add16dc1a89a222a6c8598bb0f96a"}}}}, &(0x7f0000000100)={0x1, 0x2, [0x441, 0x547, 0x10000, 0x7c8]}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='}[^/]\x00', 0x40200, &(0x7f0000000180)={@align=0x8, {0x2, 0x0, 0x7, 0xe}}, 0x1, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getaddr={0x14, 0x16, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8841) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getaddr={0x14, 0x16, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8841) 1.553146449s ago: executing program 3 (id=2772): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1.362984014s ago: executing program 3 (id=2774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x5, [@broadcast, @empty, @multicast, @local, @empty]}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtfilter={0x50, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x8}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_CLASSID={0x7, 0x1, {0x4, 0xd}}, @TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8c8}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_ACT={0x4}]}}]}, 0x50}}, 0x0) 1.356986757s ago: executing program 4 (id=2775): r0 = socket$kcm(0x10, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000002100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 1.239562174s ago: executing program 4 (id=2776): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x6, &(0x7f0000000440)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000480)='GPL\x00', 0x4, 0xc3, &(0x7f00000004c0)=""/195}, 0x70) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000180)=""/38, 0x26, 0x0, &(0x7f0000000280)=""/75, 0x4b}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000030000000000a0b0a178caca7e51e85de24ac288a3d9d07d"], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000040)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3f0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1e}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x6, &(0x7f0000000440)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000480)='GPL\x00', 0x4, 0xc3, &(0x7f00000004c0)=""/195}, 0x70) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000180)=""/38, 0x26, 0x0, &(0x7f0000000280)=""/75, 0x4b}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000030000000000a0b0a178caca7e51e85de24ac288a3d9d07d"], 0x50) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000040)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3f0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1e}, 0x94) (async) 1.187663582s ago: executing program 1 (id=2777): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000008de60caa00000000c0f39e3abf54a8a9350000000000001842882e21f3c24f210c17335d206937983b756bef0ee2fa4166376597dfa3d1e189a619e7d358fdaf81d8c11e85f86337a7036d12cca371a21b88f3d6207ade403e6d9dd6e3c3f8453d6bc4b9eb70a5e6118f0c7097623c6fcc", @ANYRES32=0x0, @ANYBLOB="0100000001000000140003007665746830000000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000600)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000640)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001400030062617461647630"], 0x34}, 0x1, 0x0, 0x0, 0x24008854}, 0x0) 1.140230283s ago: executing program 3 (id=2778): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000015c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x0, 0x130, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 961.264059ms ago: executing program 4 (id=2780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0580c20000000180"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x80, 0x52, 0x6}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240408d4}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x7}, {0xd, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff}, {0x7, 0xab5d, 0x47b, 0x7e000000}}}]}]}]}}]}, 0x74}}, 0x0) write$tun(r1, &(0x7f0000000480)=ANY=[], 0x46) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0xa}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 955.807545ms ago: executing program 2 (id=2781): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x25, 0x6, "ab23879255d3dc1daee28adc4d3d3a6f9c6e8986f7c6f63e639098743f34db2894"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000010}, 0x4048880) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)="88d8bf92d5ad3dd44a5bb931348d1243896e877ec6c8a4", 0x17}, 0x1, 0x0, 0x0, 0x4000080}, 0xc000010) 895.591265ms ago: executing program 3 (id=2782): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0xfdb7) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000200)=0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0x7d, &(0x7f0000000380)={r4, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f0000000440)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000480)={0x9, 0x9, 0x8000, 0x0, 0x5, 0x6, 0x1, 0x6c83, r4}, &(0x7f00000004c0)=0x20) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000500)={'batadv_slave_0\x00'}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x4, 0x4101}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x560, 0x7, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x94, 0x8, 0x7, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) 872.121075ms ago: executing program 2 (id=2783): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000880)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000940), 0x1f3, 0x10, &(0x7f0000000980), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0xac}}, 0x0) 850.704138ms ago: executing program 1 (id=2784): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 763.089275ms ago: executing program 0 (id=2785): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, r2, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b40)=[{{&(0x7f00000000c0)={0xa, 0x4e33, 0x4, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x7, @local, 0x3a1}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000029"], 0x18}}], 0x2, 0x24000800) 761.682113ms ago: executing program 2 (id=2786): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x130, 0x1d8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0xa, 0x7, 0x0, 0x3], 0x1, 0x1}, {0x4, [0x4, 0x1, 0x3, 0x1, 0x5, 0xe], 0x2, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'macvtap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x32, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x2, 0x5, 0x6}, {0x6, 0x4, 0x4}, 0x8001}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xffffff00, 0xff, 'ipvlan1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x81f6fc83b80a76cf}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x0, 0x2, 0x1, 0x2, 0x3], 0x2, 0x2}, {0x1, [0x2, 0x0, 0x1, 0x6, 0x0, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf6100000000000007010000043f0000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 761.218304ms ago: executing program 4 (id=2787): r0 = socket$inet6(0xa, 0x2, 0xff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000880), 0x10) sendmsg$can_bcm(r1, &(0x7f00000008c0)={&(0x7f0000000900), 0x10, &(0x7f0000000940)={&(0x7f0000000980)={0x5, 0x51e, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0xb, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x2400c808) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000a80)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000ac0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000b00), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000b40)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000c00)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000c40)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r2, &(0x7f0000000e80)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001e80), r2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) syz_emit_ethernet(0x4e, &(0x7f0000000a00)={@local, @random="3cdc119848ac", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @multicast1}, {{0xfdfc, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x40000000000000be, 0x2, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "4215de32491b2e2007220f6b45fd046f"}, @exp_fastopen={0xfe, 0xfffffe82}]}}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) connect$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e24, 0x20000, @loopback}, 0x1c) r6 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x4, 0x1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r7, 0x1, 0x39, 0x0, &(0x7f0000000840)) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000005c0)=""/189, &(0x7f0000000680)=0xbd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) 734.924428ms ago: executing program 1 (id=2788): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000200001c0000000000008000840a0000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62}, 0x94) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x3, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0x0, 0xa}, {0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 664.255503ms ago: executing program 0 (id=2789): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0x3}, {0xd, 0xfff1}, {0x9, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x800}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r7, &(0x7f0000000600), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000034001a0006000000020000002800048024000880080001000100000006000200010000000800030002000000080004"], 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000700000012abd7000fbdbdf2507000000", @ANYRES32=r8, @ANYBLOB="100001800c000480080001000d0000000c000180060002000e0000000c00018008000100000001000c0001800500060007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040081}, 0x60000080) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000940)={{r6, &(0x7f0000000640)='bridge0\x00', 0x40002, &(0x7f0000000840)={@_ha_fsid={[0x1, 0x7fffffff]}, {0x81, 0x3ff, 0x8, 0x7}}, 0x819, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)}, {[0x2, 0x9, 0x8, 0x65]}, 0xfffffff7, 0x6, &(0x7f0000000900)=""/6}) setsockopt$packet_int(r13, 0x107, 0x0, &(0x7f00000009c0)=0xfffffffd, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="630000004ec6"}) 587.71445ms ago: executing program 2 (id=2790): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x1}, 0xe) r1 = accept$inet6_tcp(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000000c0)="71c8b44fec7397c0db956d97e0a01e3e0bcd27395bab08838d5c5063146abd0dac2243bf3dadaf60cb908654525650e6d78ba1802afcba48acfea4a7bd230dbf744c136cd3500852a2279da93c8c8c89114b221fe932e0ac91a7147bf48acab4868e54b5e4dbe451c849a9e3a608f82d213f2f52cc4dbbaaa0257a84e54fd7575fc5033b5c3596519a194f1505ce7ef5f0b0b7e13e087fe9086ca4f20519ad4a602f7ab9160a81a522c58f3c5b1ea653ee4538c357e345587d75f46c6e570bfd8f9ef45575cd7264c3286c9c6542cf6110f3ab1f7640", 0xd6}, {&(0x7f00000001c0)="e73aeabb286921b390d3bada57bdb35bdc47424f932d644565d46421f3ada012047ff7f0bd5efb3575da9d0eb17ac0d383be1c9a532075899ff285e652b69e6b235ad6732763c37a2ca99819aeac74c3d1e6dccbcb10006d6a6182fc30cf57b91e48dc3f51ee0474d0d6e1920c82744cdf23be68246752852cbe57a1a18046170377ad00d7cfd89eb8d5877cb92eba957e4ab5f4a8826ec30d6d8d722d6f5740c9519ca471ec48a75ed1a1ace39187dc4fd9f1a0778e6548ed803f131276a3a7d800883a4209", 0xc6}, {&(0x7f00000002c0)="d2fc1d6b155b7c71c6928c91fb3b3104401a1b24be4678fe50a8b9c47febb659b9235b8389b2a26c5eb11d19d6bd3d5ec3204fa0923bd535d4ba2fddd8e18525d22f0ce84615b936d74e57397504b7a632d844344bfc1fb027fc5551a9621b813de4592275a8b430d29c0e5c07f729c668ba5fc7bedf340af0cfe8f5b8a77b807faf190ece16dfbfd3a84715510af44d92526f6b8fdabf86200ef90dac98a00dff6bd34bb30bba23ccb834d1ea95c33e73365c3752002b2447ed79dffbd91b3a7baaca38615cdc849b584d", 0xcb}, {&(0x7f00000003c0)="a6c6f23033843cbc17e5e15f20b2b52f9106ccaa3b218e3be8c71da4f2f558c3d449defb9d672c3d8580f79614ae3602b25b5a548f1b6418cb45813d14c7cc1ad0f9ebbb2efe18a70390ecbb1c564682ca85ba25f60075868f22e2f6b0b2f2a12be6ac8571172e29d81df04401f571358240991f55e5f12c55244ad989aed2c8913c0710388bd24f825e28dd680484d534325f49e3c6da6ec2aeed821afba497a7534595c79e7bf21ea89d41f31a5a97951d1bde87d12b8107a1a65512b856c89b26a0f6f03f4d95fe19aa8fd1b036049ac7086ca92d1eeab706c8", 0xdb}, {&(0x7f0000000500)="72f1fd7572205e80ebc50f3a1abd7693cd1f0b9edc82e8d6f82583e941e1409a5585780dc062", 0x26}], 0x5, &(0x7f0000000640)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r2}}}], 0x58}}], 0x1, 0x8800) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x1}, 0xe) (async) accept$inet6_tcp(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) (async) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000000c0)="71c8b44fec7397c0db956d97e0a01e3e0bcd27395bab08838d5c5063146abd0dac2243bf3dadaf60cb908654525650e6d78ba1802afcba48acfea4a7bd230dbf744c136cd3500852a2279da93c8c8c89114b221fe932e0ac91a7147bf48acab4868e54b5e4dbe451c849a9e3a608f82d213f2f52cc4dbbaaa0257a84e54fd7575fc5033b5c3596519a194f1505ce7ef5f0b0b7e13e087fe9086ca4f20519ad4a602f7ab9160a81a522c58f3c5b1ea653ee4538c357e345587d75f46c6e570bfd8f9ef45575cd7264c3286c9c6542cf6110f3ab1f7640", 0xd6}, {&(0x7f00000001c0)="e73aeabb286921b390d3bada57bdb35bdc47424f932d644565d46421f3ada012047ff7f0bd5efb3575da9d0eb17ac0d383be1c9a532075899ff285e652b69e6b235ad6732763c37a2ca99819aeac74c3d1e6dccbcb10006d6a6182fc30cf57b91e48dc3f51ee0474d0d6e1920c82744cdf23be68246752852cbe57a1a18046170377ad00d7cfd89eb8d5877cb92eba957e4ab5f4a8826ec30d6d8d722d6f5740c9519ca471ec48a75ed1a1ace39187dc4fd9f1a0778e6548ed803f131276a3a7d800883a4209", 0xc6}, {&(0x7f00000002c0)="d2fc1d6b155b7c71c6928c91fb3b3104401a1b24be4678fe50a8b9c47febb659b9235b8389b2a26c5eb11d19d6bd3d5ec3204fa0923bd535d4ba2fddd8e18525d22f0ce84615b936d74e57397504b7a632d844344bfc1fb027fc5551a9621b813de4592275a8b430d29c0e5c07f729c668ba5fc7bedf340af0cfe8f5b8a77b807faf190ece16dfbfd3a84715510af44d92526f6b8fdabf86200ef90dac98a00dff6bd34bb30bba23ccb834d1ea95c33e73365c3752002b2447ed79dffbd91b3a7baaca38615cdc849b584d", 0xcb}, {&(0x7f00000003c0)="a6c6f23033843cbc17e5e15f20b2b52f9106ccaa3b218e3be8c71da4f2f558c3d449defb9d672c3d8580f79614ae3602b25b5a548f1b6418cb45813d14c7cc1ad0f9ebbb2efe18a70390ecbb1c564682ca85ba25f60075868f22e2f6b0b2f2a12be6ac8571172e29d81df04401f571358240991f55e5f12c55244ad989aed2c8913c0710388bd24f825e28dd680484d534325f49e3c6da6ec2aeed821afba497a7534595c79e7bf21ea89d41f31a5a97951d1bde87d12b8107a1a65512b856c89b26a0f6f03f4d95fe19aa8fd1b036049ac7086ca92d1eeab706c8", 0xdb}, {&(0x7f0000000500)="72f1fd7572205e80ebc50f3a1abd7693cd1f0b9edc82e8d6f82583e941e1409a5585780dc062", 0x26}], 0x5, &(0x7f0000000640)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r2}}}], 0x58}}], 0x1, 0x8800) (async) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) (async) 463.235731ms ago: executing program 0 (id=2791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r2, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800000000001}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x40, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r5, 0x600, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x40000c0) 458.35077ms ago: executing program 2 (id=2792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3, r2}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000b4000000060a010c0000000000000000020000000900010073797a30000000000900020073797a300000000088000480300001800e000100696d6d6564696174650000001c0002800800010000000001100002800c0001000102030405060708540001800c0001006269747769736500440002800800010000000001080002000000000108000300", @ANYRES8=r0], 0x128}}, 0x0) 367.331496ms ago: executing program 1 (id=2793): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) r2 = accept4$inet_tcp(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80800) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={@tcp=r2}) bind$nfc_llcp(r0, &(0x7f0000000700)={0x27, 0x1, 0x0, 0x5, 0x0, 0x0, 'urn:nfc:sn:snep\x00', 0x10}, 0x60) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) sendto$inet(r3, &(0x7f0000000180)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000200)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 319.608616ms ago: executing program 2 (id=2794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0xa, 0xfffff7fd) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000002c0)=0x7b, 0x4) recvmmsg(r1, &(0x7f0000000300), 0xa0d, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000f40)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x94, 0x5, 0xa, 0x701, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x64, 0xc, "35dcb991cd80b81f8f4b1948c6e04aa98de45ea38e01b8fc3a8a315903484df59c9cc5ef508535b1af3beb8472f3f86871d40227a0fccee803fbb06b80110c3929e7d5df0b405d7d88052df85cfedf7fb031498f63dc5e695942deeba5d3f015"}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000a40)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002180)={r9, &(0x7f0000000500)="e5914275f9788e", &(0x7f0000001180)=""/4096}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 231.121448ms ago: executing program 0 (id=2795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x138, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10c, 0x3, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x160}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 106.038869ms ago: executing program 1 (id=2796): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfc2b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2a2e}, 0x1c) 55.67926ms ago: executing program 0 (id=2797): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x44) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) sendto$inet6(r0, &(0x7f0000000100)="8f6bb66f", 0x4, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.swap.events\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000340)=0x2, &(0x7f0000000380)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r5, &(0x7f00000004c0)}, 0x20) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 31.574652ms ago: executing program 1 (id=2798): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000400007012dbd7000ffdbdf25047c00000400c3000c00018008001600e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000009358253d2a00"/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x44}}, 0x0) 0s ago: executing program 0 (id=2799): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x7fff, 0x8}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x20000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000091}, 0x24048814) r3 = socket(0x2b, 0x7, 0x8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r3) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x9, @bearer=@l2={'ib', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x14000800) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x30, 0x70bd29, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000680)={@rand_addr, @dev, 0x0}, &(0x7f00000006c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1c0, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x66, 0x2, 0xff}, {0x2, 0x21}, {0x401, 0x8, 0x81, 0x7a}, {0x8, 0xc0, 0x13}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1000, 0x5, 0x0, 0x4}, {0x9, 0x0, 0x94, 0x5}, {0x34, 0xf5, 0x4, 0x4}, {0x401, 0x5, 0x8, 0xda34}, {0x3e2, 0xf, 0xbb, 0x1}, {0x7, 0x4, 0xc, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8085}, 0x4000000) socket$netlink(0x10, 0x3, 0xe) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r10, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040081}, 0x20040011) sendmsg$nl_route_sched(r3, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)=@delqdisc={0x108, 0x25, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {0xfff5, 0xffe0}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x18}}, @TCA_RATE={0x6, 0x5, {0xb6, 0xa}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xe, "1f1ae5661fb51e7b0bfed8964a4d92a9"}}}, @TCA_RATE={0x6, 0x5, {0x0, 0xa}}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xf0, 0x0, 0x5, 0x1, 0x3, 0xa, 0x3}}, {0xa, 0x2, [0x30, 0x0, 0x40a1]}}, {{0x1c, 0x1, {0xc, 0x85, 0x3, 0x9, 0x2, 0xfffffffe, 0x3, 0x1}}, {0x6, 0x2, [0x65b]}}, {{0x1c, 0x1, {0x6, 0x3, 0x100, 0xfda8, 0x1, 0xc, 0x800, 0x2}}, {0x8, 0x2, [0x8cef, 0x2]}}, {{0x1c, 0x1, {0x1, 0x6, 0xff, 0x4, 0x1, 0x5, 0xda5, 0x3}}, {0xa, 0x2, [0xffff, 0x4, 0x6]}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000044) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r11, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r12, 0x80049367, &(0x7f0000000e00)=0x6) connect$bt_rfcomm(r3, &(0x7f0000000e40)={0x1f, @any, 0x40}, 0xa) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x24020088}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r10, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004844}, 0x4040810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x4, [@datasec={0x7, 0x4, 0x0, 0xf, 0x1, [{0x5, 0xa92, 0x4}, {0x1, 0x4, 0x756}, {0x1, 0x3, 0x2}, {0x4, 0x4, 0x7}], 'm'}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x8}}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000001040)=""/45, 0xa4, 0x2d, 0x1, 0xffffff00, 0x10000, @value=r6}, 0x28) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xb4, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20800}, 0x4000010) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r13, 0x10f, 0x81, &(0x7f0000001280)=0xd, 0x4) 0s ago: executing program 0 (id=2804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x20, 0xff, 0x3f, 0xfffff004}, {0x16, 0x4, 0x2, 0xfffffffe}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'ipvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x2000, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0x2}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x34004804}, 0x840) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ring off device on rfkill (-4) [ 141.685277][ T7640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.685297][ T7640] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 141.995903][ T7691] ip_tables: iptables: counters copy to user failed while replacing table [ 142.140615][ T7522] Set syz0 is full, maxelem 65536 reached [ 142.347214][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.463623][ T7705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.464388][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.557816][ T7708] bridge0: port 1(syz_tun) entered blocking state [ 142.557928][ T7708] bridge0: port 1(syz_tun) entered disabled state [ 142.558095][ T7708] syz_tun: entered allmulticast mode [ 142.567276][ T7708] syz_tun: entered promiscuous mode [ 142.568520][ T7708] bridge0: port 1(syz_tun) entered blocking state [ 142.568632][ T7708] bridge0: port 1(syz_tun) entered forwarding state [ 142.642214][ T7722] __nla_validate_parse: 6 callbacks suppressed [ 142.642235][ T7722] netlink: 84 bytes leftover after parsing attributes in process `syz.1.478'. [ 142.667766][ T7717] bond1: (slave geneve2): making interface the new active one [ 142.681695][ T7717] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 142.684670][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.684870][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.685068][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.693877][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.786758][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.786968][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.787170][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.787415][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.787611][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 142.787800][ T7705] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 143.166572][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 143.244205][ T7748] ip_tables: iptables: counters copy to user failed while replacing table [ 143.550476][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.487'. [ 144.365214][ T7815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.496'. [ 144.717888][ T7835] netlink: 52 bytes leftover after parsing attributes in process `syz.3.500'. [ 144.725003][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.725672][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.796835][ T7839] netlink: 148 bytes leftover after parsing attributes in process `syz.4.502'. [ 144.858587][ T7833] dvmrp0: entered allmulticast mode [ 145.245497][ T7863] x_tables: duplicate underflow at hook 1 [ 145.297006][ T7867] geneve2: entered allmulticast mode [ 145.633253][ T7892] openvswitch: netlink: Flow key attr not present in new flow. [ 145.637114][ T7889] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 145.637193][ T7889] gretap1: entered promiscuous mode [ 145.637208][ T7889] gretap1: entered allmulticast mode [ 145.767854][ T7895] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 145.815242][ T7896] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 145.911488][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'. [ 145.949392][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.518'. [ 145.957584][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'. [ 145.984893][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'. [ 146.006169][ T7917] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 [ 146.257277][ T7931] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 147.407510][ T8005] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.407712][ T8005] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 147.674799][ T8022] bridge0: entered promiscuous mode [ 147.681593][ T8022] ip6gretap0: entered promiscuous mode [ 147.687666][ T8022] gretap0: entered promiscuous mode [ 147.693999][ T8022] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 147.900747][ T8038] sctp: [Deprecated]: syz.2.548 (pid 8038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.900747][ T8038] Use struct sctp_sack_info instead [ 148.121942][ T8051] __nla_validate_parse: 68 callbacks suppressed [ 148.121964][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 148.206232][ T8052] xt_IDLETIMER: label is empty or not nul-terminated [ 148.489777][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 148.512137][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 148.514225][ T8068] hsr_slave_0: left promiscuous mode [ 148.528493][ T8067] validate_nla: 57 callbacks suppressed [ 148.528509][ T8067] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 148.681784][ T8088] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 148.710322][ T8089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.710348][ T8089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.712983][ T8089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.713002][ T8089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.715698][ T8089] batman_adv: batadv0: Removing interface: gretap1 [ 148.756676][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'. [ 148.935876][ T8106] openvswitch: netlink: Message has -1 unknown bytes. [ 148.983288][ T8102] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 148.983309][ T8102] netlink: 224 bytes leftover after parsing attributes in process `syz.0.567'. [ 148.983324][ T8102] nbd: must specify at least one socket [ 148.985439][ T8111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.569'. [ 149.320702][ T8138] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 149.940020][ T8176] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 149.958080][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 149.999851][ T8176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.025368][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 150.038435][ T8180] bond2: (slave veth0_to_bond): making interface the new active one [ 150.042681][ T8180] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 150.058512][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.058553][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.058584][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.058613][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.126488][ T8176] bond2: entered promiscuous mode [ 150.126518][ T8176] veth0_to_bond: entered promiscuous mode [ 150.126722][ T8176] bond2: entered allmulticast mode [ 150.126735][ T8176] veth0_to_bond: entered allmulticast mode [ 150.232242][ T8176] macvlan2: entered promiscuous mode [ 150.232265][ T8176] macvlan2: entered allmulticast mode [ 150.246544][ T8176] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.260383][ T8176] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 150.343662][ T8186] bridge_slave_0: left allmulticast mode [ 150.343687][ T8186] bridge_slave_0: left promiscuous mode [ 150.344205][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.372905][ T8186] bridge_slave_1: left allmulticast mode [ 150.372930][ T8186] bridge_slave_1: left promiscuous mode [ 150.373171][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.377550][ T8186] bond0: (slave bond_slave_0): Releasing backup interface [ 150.399788][ T8186] bond0: (slave bond_slave_1): Releasing backup interface [ 150.420254][ T8186] team0: Port device team_slave_0 removed [ 150.420806][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.420819][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.422572][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.422589][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.424705][ T8186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.534282][ T8200] netlink: 'syz.0.595': attribute type 1 has an invalid length. [ 150.534303][ T8200] netlink: 224 bytes leftover after parsing attributes in process `syz.0.595'. [ 150.534322][ T8200] nbd: couldn't find device at index 767 [ 150.535703][ T8200] ip_tables: iptables: counters copy to user failed while replacing table [ 150.558854][ T8196] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 150.655869][ T8198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 150.669747][ T8198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 150.682123][ T8202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.685263][ T8202] bond1: (slave bond2): making interface the new active one [ 150.685825][ T8202] bond1: (slave bond2): Enslaving as an active interface with an up link [ 151.024522][ T8226] openvswitch: netlink: Message has 70 unknown bytes. [ 151.024556][ T8226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.027482][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 151.032526][ T8225] netlink: 'syz.4.603': attribute type 10 has an invalid length. [ 151.065616][ T8225] geneve2: entered promiscuous mode [ 151.065640][ T8225] geneve2: entered allmulticast mode [ 151.133492][ T8233] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 151.809765][ T8281] tipc: Started in network mode [ 151.809787][ T8281] tipc: Node identity , cluster identity 4711 [ 151.809801][ T8281] tipc: Failed to set node id, please configure manually [ 151.809843][ T8281] tipc: Enabling of bearer rejected, failed to enable media [ 152.031365][ T8290] geneve3: entered promiscuous mode [ 152.031388][ T8290] geneve3: entered allmulticast mode [ 152.048445][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.049768][ T73] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.049804][ T73] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.049834][ T73] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.562018][ T8321] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 152.651053][ T8329] netlink: 'syz.2.629': attribute type 83 has an invalid length. [ 152.788345][ T8331] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 152.826544][ T8331] 8021q: adding VLAN 0 to HW filter on device bond6 [ 153.013588][ T8338] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 153.056425][ T8338] bond3 (unregistering): Released all slaves [ 153.148520][ T8354] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.378088][ T8358] __nla_validate_parse: 11 callbacks suppressed [ 153.378107][ T8358] netlink: 14 bytes leftover after parsing attributes in process `syz.1.636'. [ 153.423596][ T8358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.440553][ T8358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.454278][ T8358] bond0 (unregistering): Released all slaves [ 153.457562][ T8368] netlink: 72 bytes leftover after parsing attributes in process `syz.2.640'. [ 153.565572][ T8370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.574748][ T8374] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 153.589748][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.643'. [ 153.757020][ T8384] geneve3: entered promiscuous mode [ 153.772386][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.772410][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.773354][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.773371][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.868042][ T8394] syzkaller1: entered promiscuous mode [ 153.868064][ T8394] syzkaller1: entered allmulticast mode [ 153.889510][ T73] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 53074 - 0 [ 153.889844][ T1017] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 53074 - 0 [ 153.889887][ T1017] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 53074 - 0 [ 153.893122][ T8387] tunl0: entered promiscuous mode [ 153.893141][ T8387] tunl0: entered allmulticast mode [ 154.152741][ T12] net_ratelimit: 1 callbacks suppressed [ 154.152767][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.153145][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.186877][ T8414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.653'. [ 154.251468][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 154.254060][ T8410] x_tables: duplicate underflow at hook 1 [ 154.277537][ T8419] validate_nla: 2 callbacks suppressed [ 154.277553][ T8419] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 154.277902][ T8419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.654'. [ 154.278090][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.654'. [ 154.283267][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 154.485017][ T8429] netlink: 140 bytes leftover after parsing attributes in process `syz.4.658'. [ 154.773240][ T8451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.939443][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.977778][ T8469] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 155.009577][ T8469] netlink: 216 bytes leftover after parsing attributes in process `syz.3.669'. [ 155.205203][ T8479] syzkaller1: entered promiscuous mode [ 155.205237][ T8479] syzkaller1: entered allmulticast mode [ 155.260350][ T8479] netlink: 'syz.4.673': attribute type 4 has an invalid length. [ 155.340912][ T8490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.414290][ T8487] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 155.831634][ T8521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.341387][ T8549] bond7: option resend_igmp: invalid value (32767) [ 156.341410][ T8549] bond7: option resend_igmp: allowed values 0 - 255 [ 156.368096][ T8549] bond7 (unregistering): Released all slaves [ 156.413377][ T8557] lo: entered allmulticast mode [ 156.492050][ T8560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.492240][ T8560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.492580][ T8560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.570335][ T8556] lo: left allmulticast mode [ 156.714507][ T8572] 8021q: adding VLAN 0 to HW filter on device team1 [ 157.052338][ T8590] netlink: 'syz.2.710': attribute type 28 has an invalid length. [ 157.052359][ T8590] netlink: 'syz.2.710': attribute type 3 has an invalid length. [ 157.181582][ T8603] bridge0: port 3(gretap0) entered blocking state [ 157.183411][ T8603] bridge0: port 3(gretap0) entered disabled state [ 157.183573][ T8603] gretap0: entered allmulticast mode [ 157.187616][ T8603] gretap0: entered promiscuous mode [ 157.190867][ T8603] bridge0: port 3(gretap0) entered blocking state [ 157.190970][ T8603] bridge0: port 3(gretap0) entered forwarding state [ 157.207990][ T8604] xt_IDLETIMER: timeout value is zero [ 157.644785][ T8637] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.834415][ T8653] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 157.846800][ T8654] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 157.924036][ T8660] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 [ 157.937687][ T8659] xt_hashlimit: size too large, truncated to 1048576 [ 158.175453][ T8675] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 158.360230][ T8684] netlink: 'syz.1.740': attribute type 10 has an invalid length. [ 158.367049][ T8684] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 158.388364][ T8684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.392926][ T8684] team0: Port device netdevsim3 added [ 158.971521][ T8709] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 158.971545][ T8709] __nla_validate_parse: 13 callbacks suppressed [ 158.971556][ T8709] netlink: 44 bytes leftover after parsing attributes in process `syz.2.748'. [ 158.971605][ T8709] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 158.971618][ T8709] netlink: 'syz.2.748': attribute type 2 has an invalid length. [ 159.184478][ T8714] netlink: 'syz.2.750': attribute type 1 has an invalid length. [ 159.184502][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 159.205968][ T8714] netlink: 72 bytes leftover after parsing attributes in process `syz.2.750'. [ 159.206016][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 159.206028][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 159.488049][ T8722] veth1_to_hsr: entered allmulticast mode [ 159.548515][ T8725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.755'. [ 159.577919][ T8726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.756'. [ 159.577940][ T8726] tipc: Invalid UDP bearer configuration [ 159.577996][ T8726] tipc: Enabling of bearer rejected, failed to enable media [ 159.666670][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 159.881111][ T5814] IPVS: starting estimator thread 0... [ 159.970469][ T8752] IPVS: using max 27 ests per chain, 64800 per kthread [ 160.001003][ T8749] bond7: entered allmulticast mode [ 160.001469][ T8749] 8021q: adding VLAN 0 to HW filter on device bond7 [ 160.011213][ T8757] netlink: 14 bytes leftover after parsing attributes in process `syz.2.761'. [ 160.051996][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 160.099475][ T8749] bond8: entered allmulticast mode [ 160.100455][ T8749] 8021q: adding VLAN 0 to HW filter on device bond8 [ 160.253625][ T8757] bond0 (unregistering): Released all slaves [ 160.407915][ T8749] bond0: entered allmulticast mode [ 160.414068][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.442942][ T8749] bond9: entered allmulticast mode [ 160.443458][ T8749] 8021q: adding VLAN 0 to HW filter on device bond9 [ 160.533633][ T8749] bond10: entered allmulticast mode [ 160.534221][ T8749] 8021q: adding VLAN 0 to HW filter on device bond10 [ 160.736439][ T8793] net_ratelimit: 19 callbacks suppressed [ 160.736459][ T8793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.795149][ T8749] bond11: entered allmulticast mode [ 160.795586][ T8749] 8021q: adding VLAN 0 to HW filter on device bond11 [ 161.275149][ T8818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.519816][ T8833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.541416][ T8836] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.542062][ T8836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.542306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.602366][ T8833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.674917][ T8853] --map-set only usable from mangle table [ 162.068697][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.500518][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.500806][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.567023][ T8911] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 162.579211][ T8911] xt_hashlimit: size too large, truncated to 1048576 [ 162.737451][ T8922] bridge0: port 1(veth1_to_bridge) entered blocking state [ 162.737544][ T8922] bridge0: port 1(veth1_to_bridge) entered disabled state [ 162.737690][ T8922] veth1_to_bridge: entered allmulticast mode [ 162.750415][ T8922] veth1_to_bridge: entered promiscuous mode [ 162.779620][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.844359][ T8926] netlink: zone id is out of range [ 163.347293][ T8968] x_tables: duplicate underflow at hook 1 [ 164.055199][ T9019] __nla_validate_parse: 24 callbacks suppressed [ 164.055218][ T9019] netlink: 68 bytes leftover after parsing attributes in process `syz.4.830'. [ 164.055244][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 164.189726][ T9023] netlink: 1744 bytes leftover after parsing attributes in process `syz.3.831'. [ 164.319427][ T9033] netlink: 'syz.3.831': attribute type 2 has an invalid length. [ 164.319996][ T9033] netlink: 44 bytes leftover after parsing attributes in process `syz.3.831'. [ 164.333590][ T9035] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 164.865988][ T9060] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 164.888665][ T9060] bond12 (unregistering): Released all slaves [ 164.964109][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.833'. [ 164.965703][ T9064] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 165.086978][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 165.306930][ T9083] netlink: 216 bytes leftover after parsing attributes in process `syz.3.843'. [ 165.347590][ T9085] netlink: 'syz.1.844': attribute type 83 has an invalid length. [ 165.526877][ T9086] vlan5: entered promiscuous mode [ 165.526901][ T9086] bridge0: entered promiscuous mode [ 165.527212][ T9086] vlan5: entered allmulticast mode [ 165.527226][ T9086] bridge0: entered allmulticast mode [ 165.759892][ T9102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'. [ 165.759931][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'. [ 165.805126][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 165.818762][ T73] net_ratelimit: 20 callbacks suppressed [ 165.818780][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.818956][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.902975][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.138497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.140157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.257620][ T73] IPVS: starting estimator thread 0... [ 166.266087][ T9126] netlink: 'syz.3.851': attribute type 10 has an invalid length. [ 166.277545][ T9126] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 166.338465][ T9133] IPVS: using max 33 ests per chain, 79200 per kthread [ 166.342628][ T9134] xt_REDIRECT: bad MAP_IPS. [ 166.648526][ T9152] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 166.920322][ T8956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.920508][ T8956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.947572][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.180504][ T9185] Bluetooth: MGMT ver 1.23 [ 167.223300][ T9183] syzkaller0: entered promiscuous mode [ 167.223322][ T9183] syzkaller0: entered allmulticast mode [ 167.639372][ T9234] netlink: 'syz.1.874': attribute type 2 has an invalid length. [ 167.639393][ T9234] netlink: 'syz.1.874': attribute type 11 has an invalid length. [ 167.877278][ T9264] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.165875][ T9283] bond12: entered promiscuous mode [ 168.165900][ T9283] bond12: entered allmulticast mode [ 168.224936][ T9299] syzkaller1: entered promiscuous mode [ 168.224959][ T9299] syzkaller1: entered allmulticast mode [ 168.843029][ T9329] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 168.843162][ T9329] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 168.843262][ T9329] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 168.843361][ T9329] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 169.233883][ T9335] syzkaller1: entered promiscuous mode [ 169.233904][ T9335] syzkaller1: entered allmulticast mode [ 169.287228][ T9355] Bluetooth: ISO socket layer initialized [ 169.363905][ T9360] __nla_validate_parse: 16 callbacks suppressed [ 169.363924][ T9360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.895'. [ 169.555366][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.899'. [ 169.561471][ T9369] validate_nla: 63 callbacks suppressed [ 169.561489][ T9369] netlink: 'syz.1.899': attribute type 64 has an invalid length. [ 169.561743][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.563559][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.782483][ T9379] netlink: 'syz.1.902': attribute type 21 has an invalid length. [ 169.782505][ T9379] netlink: 128 bytes leftover after parsing attributes in process `syz.1.902'. [ 169.782588][ T9379] netlink: 'syz.1.902': attribute type 5 has an invalid length. [ 169.782601][ T9379] netlink: 'syz.1.902': attribute type 6 has an invalid length. [ 169.782612][ T9379] netlink: 3 bytes leftover after parsing attributes in process `syz.1.902'. [ 169.921330][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.908'. [ 169.937725][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.908'. [ 170.191649][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 170.450778][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 170.921516][ T9459] net_ratelimit: 15 callbacks suppressed [ 170.921535][ T9459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.921742][ T9459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.922016][ T9459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.973806][ T9460] netlink: 'syz.2.922': attribute type 21 has an invalid length. [ 170.973827][ T9460] netlink: 128 bytes leftover after parsing attributes in process `syz.2.922'. [ 170.973900][ T9460] netlink: 'syz.2.922': attribute type 5 has an invalid length. [ 170.973913][ T9460] netlink: 3 bytes leftover after parsing attributes in process `syz.2.922'. [ 171.098481][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.141632][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.141822][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.178420][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.296673][ T9488] bond_slave_1: entered promiscuous mode [ 171.369472][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.369657][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.935362][ T9512] ip6gre3: entered allmulticast mode [ 172.015883][ T9515] openvswitch: netlink: Actions may not be safe on all matching packets [ 172.144120][ T9521] netlink: 'syz.0.936': attribute type 21 has an invalid length. [ 172.144207][ T9521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.144217][ T9521] IPv6: NLM_F_CREATE should be set when creating new route [ 172.144260][ T9521] IPv6: NLM_F_CREATE should be set when creating new route [ 172.144284][ T9521] IPv6: NLM_F_CREATE should be set when creating new route [ 174.435213][ T9532] ip6_vti0: entered promiscuous mode [ 174.457931][ T9532] __nla_validate_parse: 3 callbacks suppressed [ 174.457950][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 174.637853][ T9537] IPVS: Unknown mcast interface: rose0 [ 174.790395][ T9548] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 174.832441][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.942'. [ 174.833850][ T9548] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.834307][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 174.836790][ T9548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.924515][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.944'. [ 174.994683][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 174.994750][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.946'. [ 174.999868][ T9553] netlink: 52 bytes leftover after parsing attributes in process `syz.1.944'. [ 175.376368][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 175.529366][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 175.560906][ T9599] syzkaller1: entered promiscuous mode [ 175.560929][ T9599] syzkaller1: entered allmulticast mode [ 175.859622][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 175.860485][ T9627] netlink: 'syz.3.957': attribute type 3 has an invalid length. [ 175.863069][ T9627] netlink: 'syz.3.957': attribute type 3 has an invalid length. [ 175.894395][ T9627] netlink: 'syz.3.957': attribute type 3 has an invalid length. [ 175.905274][ T9627] netlink: 'syz.3.957': attribute type 3 has an invalid length. [ 175.918755][ T9627] netlink: 'syz.3.957': attribute type 3 has an invalid length. [ 175.937930][ T9627] netlink: 'syz.3.957': attribute type 3 has an invalid length. [ 175.954404][ T9627] netlink: 'syz.3.957': attribute type 3 has an invalid length. [ 175.957297][ T9627] netlink: 'syz.3.957': attribute type 3 has an invalid length. [ 175.966544][ T9627] netlink: 'syz.3.957': attribute type 3 has an invalid length. [ 176.280413][ T9650] Bluetooth: MGMT ver 1.23 [ 176.299429][ T5829] net_ratelimit: 17 callbacks suppressed [ 176.299446][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.651640][ T9673] xt_cluster: node mask cannot exceed total number of nodes [ 176.878906][ T9687] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 176.879007][ T9687] syzkaller1: linktype set to 823 [ 176.880243][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.880423][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.254072][ T9717] tc_dump_action: action bad kind [ 177.262323][ T2257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.338482][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.886944][ T9776] ip_tables: iptables: counters copy to user failed while replacing table [ 177.981939][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.982118][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.262763][ T9804] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 178.381007][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.054956][ T9844] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 179.461971][ T9870] __nla_validate_parse: 41 callbacks suppressed [ 179.461993][ T9870] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1025'. [ 179.550761][ T9873] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1027'. [ 179.671597][ T9876] bond13: entered promiscuous mode [ 179.673200][ T9876] bond13: entered allmulticast mode [ 179.673643][ T9876] 8021q: adding VLAN 0 to HW filter on device bond13 [ 179.725633][ T9882] xt_TPROXY: Can be used only with -p tcp or -p udp [ 179.764886][ T9884] team0: Device ipvlan0 failed to register rx_handler [ 180.074147][ T9914] validate_nla: 30 callbacks suppressed [ 180.074166][ T9914] netlink: 'syz.4.1038': attribute type 4 has an invalid length. [ 180.194376][ T9927] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1042'. [ 180.254972][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 180.465549][ T9880] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 180.465684][ T9880] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 180.503453][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1045'. [ 180.503716][ T9941] block nbd0: Unsupported socket: should be TCP or UNIX. [ 180.798124][ T9964] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.809618][ T9964] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.032195][ T9982] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1055'. [ 181.312217][ T8957] net_ratelimit: 9 callbacks suppressed [ 181.312236][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.312419][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.504023][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.536219][T10012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1060'. [ 181.873113][T10028] xt_TCPMSS: Only works on TCP SYN packets [ 181.873451][T10029] xt_TCPMSS: Only works on TCP SYN packets [ 181.899190][T10028] vlan1: entered allmulticast mode [ 181.899210][T10028] veth0_vlan: entered allmulticast mode [ 182.148585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.149404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.184565][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.408910][ T9759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.409101][ T9759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.538519][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.968799][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 183.041208][T10071] syz_tun: entered allmulticast mode [ 183.119041][T10077] netlink: 'syz.3.1079': attribute type 2 has an invalid length. [ 183.175487][T10080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.190056][T10080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.223025][T10080] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1078'. [ 183.777601][T10117] netlink: 'syz.3.1089': attribute type 2 has an invalid length. [ 183.901134][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 184.323343][T10161] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 184.326149][T10161] bond5 (unregistering): Released all slaves [ 184.601740][T10168] __nla_validate_parse: 3 callbacks suppressed [ 184.601762][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'. [ 184.645602][T10176] netlink: 'syz.0.1103': attribute type 3 has an invalid length. [ 185.003472][T10187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1107'. [ 185.121341][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 185.121364][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1108'. [ 185.555747][T10200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1113'. [ 185.555779][T10200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1113'. [ 185.877933][T10215] dvmrp0: entered allmulticast mode [ 185.963453][ T42] IPVS: starting estimator thread 0... [ 185.967511][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 186.049182][T10226] IPVS: using max 28 ests per chain, 67200 per kthread [ 186.272044][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 186.352332][T10236] bond14: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 186.357039][T10236] bond14 (unregistering): Released all slaves [ 186.379485][ T2257] net_ratelimit: 28 callbacks suppressed [ 186.379504][ T2257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.699295][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.861081][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.861279][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.073803][T10290] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 187.098684][T10290] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1139'. [ 187.098705][T10290] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1139'. [ 187.103348][T10290] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 187.145886][T10282] netlink: 'syz.1.1138': attribute type 2 has an invalid length. [ 187.364071][T10308] syzkaller1: entered promiscuous mode [ 187.364095][T10308] syzkaller1: entered allmulticast mode [ 187.632731][T10319] Cannot find map_set index 135 as target [ 187.691224][T10327] gtp1: entered promiscuous mode [ 187.691246][T10327] gtp1: entered allmulticast mode [ 187.739423][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.864698][T10338] netlink: 'syz.3.1153': attribute type 83 has an invalid length. [ 187.980217][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.980414][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.779418][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.803784][T10396] netlink: 'syz.4.1168': attribute type 12 has an invalid length. [ 188.882575][T10396] bond5: option primary_reselect: invalid value (255) [ 188.882888][T10401] netlink: 'syz.0.1171': attribute type 21 has an invalid length. [ 188.884463][T10396] bond5 (unregistering): Released all slaves [ 188.915038][T10405] netlink: 'syz.0.1171': attribute type 21 has an invalid length. [ 189.060348][T10410] netlink: 'syz.2.1172': attribute type 3 has an invalid length. [ 189.079932][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.080116][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.084545][T10394] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 191.829398][T10540] __nla_validate_parse: 12 callbacks suppressed [ 191.829418][T10540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1206'. [ 191.898552][ T5838] net_ratelimit: 9 callbacks suppressed [ 191.898570][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.957130][T10547] sctp: [Deprecated]: syz.2.1209 (pid 10547) Use of int in maxseg socket option. [ 191.957130][T10547] Use struct sctp_assoc_value instead [ 192.218737][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.255817][T10560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1212'. [ 192.345870][T10568] netlink: 'syz.3.1216': attribute type 23 has an invalid length. [ 192.431592][ T9759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.431774][ T9759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.579009][T10584] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1222'. [ 192.928474][T10602] ip_tables: iptables: counters copy to user failed while replacing table [ 192.947269][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.411667][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.411827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.531533][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.531715][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.535419][T10615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1229'. [ 194.010938][T10643] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1237'. [ 194.017285][T10642] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 194.161989][T10651] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1241'. [ 194.166473][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'. [ 194.222070][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1240'. [ 194.222092][T10648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1240'. [ 194.252231][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1241'. [ 194.275496][T10653] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 194.306715][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.838522][T10684] pimreg: entered allmulticast mode [ 195.556639][T10727] syzkaller1: entered promiscuous mode [ 195.556663][T10727] syzkaller1: entered allmulticast mode [ 195.677322][T10733] Unknown options in mask 4 [ 195.872828][T10750] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 195.930129][T10755] syz_tun: left allmulticast mode [ 195.930148][T10755] syz_tun: left promiscuous mode [ 195.930329][T10755] bridge0: port 1(syz_tun) entered disabled state [ 197.100199][ T5838] net_ratelimit: 20 callbacks suppressed [ 197.100222][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.998768][ T9759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.998898][ T9759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.138637][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.299325][ T2257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.808821][T10741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.931164][T10779] __nla_validate_parse: 14 callbacks suppressed [ 198.931184][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 199.011778][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1269'. [ 199.011809][T10782] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1269'. [ 199.058123][T10791] openvswitch: netlink: Unknown nsh attribute 0 [ 199.061084][T10790] openvswitch: netlink: Unknown nsh attribute 0 [ 199.095960][T10790] tipc: Started in network mode [ 199.095989][T10790] tipc: Node identity ac1414aa, cluster identity 4711 [ 199.100455][T10790] tipc: New replicast peer: 172.20.20.187 [ 199.108042][T10790] tipc: Enabled bearer , priority 10 [ 199.110512][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.110683][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.121232][T10785] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 199.178469][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.344493][T10806] Driver unsupported XDP return value 0 on prog (id 450) dev N/A, expect packet loss! [ 199.388443][T10806] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1280'. [ 199.687222][T10834] ip6t_hbh: unknown flags 38 [ 199.807924][T10839] vlan3: entered allmulticast mode [ 199.859543][T10846] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1288'. [ 199.859565][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1288'. [ 199.859577][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 200.137078][T10860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1294'. [ 200.147715][T10862] netlink: 'syz.3.1295': attribute type 3 has an invalid length. [ 200.147735][T10862] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 200.220292][ T2257] tipc: Node number set to 2886997162 [ 200.297744][T10864] netlink: 'syz.3.1296': attribute type 12 has an invalid length. [ 200.297764][T10864] netlink: 'syz.3.1296': attribute type 29 has an invalid length. [ 200.297775][T10864] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1296'. [ 200.297805][T10864] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1296'. [ 200.300684][T10865] netlink: 'syz.3.1296': attribute type 12 has an invalid length. [ 200.300700][T10865] netlink: 'syz.3.1296': attribute type 29 has an invalid length. [ 200.477796][T10870] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 200.494160][T10870] bond4 (unregistering): Released all slaves [ 200.496896][T10880] block nbd0: not configured, cannot reconfigure [ 200.647045][T10865] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 200.652215][T10865] bond4 (unregistering): Released all slaves [ 200.793396][T10900] tipc: Failed to remove unknown binding: 66,0,0/0:3765012641/3765012643 [ 200.793426][T10900] tipc: Failed to remove unknown binding: 66,0,0/0:3765012641/3765012642 [ 201.336029][ T5646] block nbd0: Receive control failed (result -32) [ 201.336442][ T5631] block nbd0: Receive control failed (result -32) [ 201.816268][T10970] netlink: 'syz.2.1324': attribute type 12 has an invalid length. [ 201.885581][T10970] bond14: option primary_reselect: invalid value (255) [ 201.899487][T10970] bond14 (unregistering): Released all slaves [ 202.244332][T10987] net_ratelimit: 16 callbacks suppressed [ 202.244354][T10987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.245062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.268664][T10987] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 202.298692][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.325403][T10987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.351871][T10996] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 202.374496][T10987] bond2: entered promiscuous mode [ 202.374521][T10987] bond2: entered allmulticast mode [ 202.490352][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.490539][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.662557][T11013] xt_HMARK: proto mask must be zero with L3 mode [ 202.683850][T11013] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 202.996590][T11034] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 203.202863][T11052] netlink: 'syz.2.1344': attribute type 12 has an invalid length. [ 203.339731][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.488011][T11064] 8021q: adding VLAN 0 to HW filter on device bond14 [ 203.496186][T11064] bond14: entered allmulticast mode [ 203.505517][T11064] bond0: (slave bond14): Enslaving as a backup interface with a down link [ 203.597667][T11075] bond15: entered allmulticast mode [ 203.598960][T11075] 8021q: adding VLAN 0 to HW filter on device bond15 [ 203.611562][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.611722][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.898697][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.112203][T11102] __nla_validate_parse: 16 callbacks suppressed [ 204.112223][T11102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1358'. [ 204.112254][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 204.165924][T11105] ip_tables: iptables: counters copy to user failed while replacing table [ 204.263060][T11109] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 204.476296][T11118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1363'. [ 204.513506][T11119] sctp: [Deprecated]: syz.3.1362 (pid 11119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.513506][T11119] Use struct sctp_sack_info instead [ 204.514112][T11119] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1362'. [ 205.107054][T11147] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1371'. [ 205.123829][T11147] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.497041][T11163] validate_nla: 3 callbacks suppressed [ 205.497060][T11163] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 205.497933][T11176] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 205.627164][T11185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1376'. [ 205.739051][T11179] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.744714][T11179] bond4: (slave bond5): making interface the new active one [ 205.745198][T11179] bond4: (slave bond5): Enslaving as an active interface with an up link [ 206.108079][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'. [ 206.231204][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 206.241487][T11222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1388'. [ 206.363024][T11228] netlink: 'syz.2.1393': attribute type 1 has an invalid length. [ 206.805714][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 207.398426][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a2f800: rx timeout, send abort [ 207.399703][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a2f800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 207.422017][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a2c800: rx timeout, send abort [ 207.422302][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a2c800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 207.500413][ T5734] net_ratelimit: 30 callbacks suppressed [ 207.500426][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.511990][T11301] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 207.515650][T11301] bond3 (unregistering): Released all slaves [ 207.589310][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.602287][T11304] netlink: 'syz.1.1411': attribute type 10 has an invalid length. [ 207.602325][T11304] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 207.692596][T11309] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 207.720708][T11309] bond3 (unregistering): Released all slaves [ 208.049869][ T9757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.050058][ T9757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.541087][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.634127][T11368] tipc: Enabling of bearer rejected, already enabled [ 208.646837][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.813056][T11379] veth1_macvtap: left promiscuous mode [ 208.813098][T11379] macsec0: entered allmulticast mode [ 208.826641][T11378] veth1_macvtap: entered promiscuous mode [ 208.826661][T11378] veth1_macvtap: entered allmulticast mode [ 208.826787][T11378] macsec0: left allmulticast mode [ 208.826798][T11378] veth1_macvtap: left allmulticast mode [ 208.941198][ T9757] bond0: (slave bond_slave_0): interface is now down [ 208.941228][ T9757] bond0: (slave bond_slave_1): interface is now down [ 209.151800][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.151988][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.269179][T11399] __nla_validate_parse: 6 callbacks suppressed [ 209.269198][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 209.312117][ T5294] veth0_macvtap: left promiscuous mode [ 209.406069][T11416] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 209.439401][T11416] 8021q: adding VLAN 0 to HW filter on device bond16 [ 209.440302][T11416] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 209.461997][T11417] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 209.475996][T11416] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 209.493040][T11416] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 209.493258][T11416] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 209.584688][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.763951][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 209.816888][T11433] sctp: [Deprecated]: syz.1.1445 (pid 11433) Use of int in maxseg socket option. [ 209.816888][T11433] Use struct sctp_assoc_value instead [ 209.973915][T11440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.004722][T11438] pim6reg: entered allmulticast mode [ 210.025337][T11447] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1448'. [ 210.092815][T11450] syzkaller1: entered promiscuous mode [ 210.092839][T11450] syzkaller1: entered allmulticast mode [ 210.259871][ T9757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.262246][ T9757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.264424][T11461] pim6reg1: entered promiscuous mode [ 210.264442][T11461] pim6reg1: entered allmulticast mode [ 210.285696][T11461] veth0_virt_wifi: entered promiscuous mode [ 210.291150][T11461] veth1_to_bridge: entered promiscuous mode [ 210.447923][T11451] veth1_to_bridge: left promiscuous mode [ 210.447962][T11451] veth0_virt_wifi: left promiscuous mode [ 210.613596][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1455'. [ 211.087004][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'. [ 211.126544][T11504] ªªªªª»: renamed from dummy0 (while UP) [ 211.163119][T11513] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1465'. [ 211.181680][T11513] bridge0: port 3(gretap0) entered disabled state [ 211.191215][T11513] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1465'. [ 211.191332][T11513] 0ªî{X¹¦: renamed from gretap0 [ 211.225397][T11513] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 211.225475][T11513] bridge0: port 3(30ªî{X¹¦) entered forwarding state [ 211.273491][T11519] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1467'. [ 211.334312][T11523] xt_connbytes: Forcing CT accounting to be enabled [ 211.334515][T11523] set match dimension is over the limit! [ 211.367995][T11524] bridge4: entered promiscuous mode [ 211.368055][T11524] bridge4: entered allmulticast mode [ 211.454626][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1470'. [ 211.499898][ T1017] bond0: (slave bond_slave_0): interface is now down [ 211.499920][ T1017] bond0: (slave bond_slave_1): interface is now down [ 211.512410][ T1017] bond0: now running without any active interface! [ 211.856448][T11551] validate_nla: 29 callbacks suppressed [ 211.856468][T11551] netlink: 'syz.2.1477': attribute type 1 has an invalid length. [ 211.992961][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 212.044006][T11567] gre2: entered promiscuous mode [ 212.094812][T11571] netlink: 'syz.0.1479': attribute type 4 has an invalid length. [ 212.257663][T11572] syzkaller1: entered promiscuous mode [ 212.257685][T11572] syzkaller1: entered allmulticast mode [ 212.588002][T11588] netlink: 'syz.3.1484': attribute type 39 has an invalid length. [ 212.981179][T11604] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 212.981376][T11604] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.091684][T11611] netlink: 'syz.3.1492': attribute type 5 has an invalid length. [ 213.271554][T11624] net_ratelimit: 9 callbacks suppressed [ 213.271574][T11624] ip_tables: iptables: counters copy to user failed while replacing table [ 213.643077][T11647] ip6t_rt: too many addresses specified [ 213.686742][T11647] ip6t_rt: too many addresses specified [ 213.772350][T11652] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 214.105757][T11669] can: request_module (can-proto-4) failed. [ 214.279002][T11677] __nla_validate_parse: 73 callbacks suppressed [ 214.279023][T11677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1511'. [ 214.311091][T11683] ip_tables: iptables: counters copy to user failed while replacing table [ 214.605091][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 214.696096][T11691] 8021q: adding VLAN 0 to HW filter on device bond6 [ 214.725884][T11692] bond2: (slave veth0_to_bond): Releasing active interface [ 214.725910][T11692] veth0_to_bond: left promiscuous mode [ 214.726144][T11692] veth0_to_bond: left allmulticast mode [ 214.764483][T11692] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 215.017026][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 215.040082][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 215.368449][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 215.368471][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 215.397652][T11741] netlink: 'syz.1.1529': attribute type 4 has an invalid length. [ 215.398915][T11741] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 215.401192][T11741] ip_tables: iptables: counters copy to user failed while replacing table [ 215.406698][T11741] ip_tables: iptables: counters copy to user failed while replacing table [ 215.580089][T11754] netlink: 'syz.3.1533': attribute type 24 has an invalid length. [ 215.624629][T11754] bond7: (slave bond_slave_0): Device is not our slave [ 215.624652][T11754] bond7: option active_slave: invalid value (bond_slave_0) [ 215.627703][T11754] bond7 (unregistering): Released all slaves [ 215.701864][T11760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.773659][T11761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.931321][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 215.933126][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 215.934772][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 216.151404][T11790] bond7: option tlb_dynamic_lb: invalid value (254) [ 216.153219][T11790] bond7 (unregistering): Released all slaves [ 216.308434][T11801] can: request_module (can-proto-0) failed. [ 216.429921][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 216.430601][T11812] hsr_slave_0: left promiscuous mode [ 216.433925][T11812] hsr_slave_1: left promiscuous mode [ 216.636705][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074d90000: rx timeout, send abort [ 216.636975][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888074d90000: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 216.803833][T11836] unsupported nlmsg_type 40 [ 216.967321][T11856] ip_tables: iptables: counters copy to user failed while replacing table [ 217.121043][T11863] ip_tables: iptables: counters copy to user failed while replacing table [ 217.121391][T11863] ip_tables: iptables: counters copy to user failed while replacing table [ 217.121714][T11863] ip_tables: iptables: counters copy to user failed while replacing table [ 217.122033][T11863] ip_tables: iptables: counters copy to user failed while replacing table [ 217.176120][T11870] netlink: 'syz.1.1567': attribute type 21 has an invalid length. [ 217.176141][T11870] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.176215][T11870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.176222][T11870] IPv6: NLM_F_CREATE should be set when creating new route [ 217.176253][T11870] IPv6: NLM_F_CREATE should be set when creating new route [ 217.176269][T11870] IPv6: NLM_F_CREATE should be set when creating new route [ 217.465376][T11884] bond7: entered allmulticast mode [ 217.465824][T11884] 8021q: adding VLAN 0 to HW filter on device bond7 [ 217.491838][T11884] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 217.494846][T11884] macvlan3: entered allmulticast mode [ 217.494864][T11884] bond0: entered allmulticast mode [ 217.494875][T11884] bond_slave_0: entered allmulticast mode [ 217.494890][T11884] bond_slave_1: entered allmulticast mode [ 217.495798][T11884] bond7: (slave macvlan3): Enslaving as an active interface with an up link [ 217.562091][T11884] ip6gretap1: entered allmulticast mode [ 217.562588][T11884] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 217.913604][T11899] netlink: 'syz.4.1574': attribute type 1 has an invalid length. [ 217.913627][T11899] NCSI netlink: No device for ifindex 0 [ 217.913994][T11901] netlink: 'syz.4.1574': attribute type 1 has an invalid length. [ 217.914010][T11901] NCSI netlink: No device for ifindex 0 [ 218.017089][T11901] netlink: 'syz.4.1574': attribute type 15 has an invalid length. [ 218.094699][T11901] netlink: 'syz.4.1574': attribute type 15 has an invalid length. [ 218.099197][ T8957] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 218.099922][ T9757] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 218.099999][ T9757] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 218.100030][ T9757] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 218.598056][T11929] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 218.612769][T11929] bond5 (unregistering): Released all slaves [ 218.846663][T11937] block nbd2: not configured, cannot reconfigure [ 219.246722][T11954] net_ratelimit: 62 callbacks suppressed [ 219.246741][T11954] ip_tables: iptables: counters copy to user failed while replacing table [ 219.265869][T11954] syzkaller1: entered promiscuous mode [ 219.265891][T11954] syzkaller1: entered allmulticast mode [ 219.391489][T11956] : entered promiscuous mode [ 219.524168][T11963] xt_hashlimit: size too large, truncated to 1048576 [ 219.838460][T11970] bond4: entered allmulticast mode [ 219.838912][T11970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.843174][T11973] netlink: 'syz.3.1593': attribute type 11 has an invalid length. [ 219.843333][T11970] __nla_validate_parse: 10 callbacks suppressed [ 219.843345][T11970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1592'. [ 219.916828][T11977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 220.224605][T11997] netlink: 'syz.0.1603': attribute type 32 has an invalid length. [ 220.287414][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 220.400611][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'. [ 220.407131][T12002] syzkaller1: entered promiscuous mode [ 220.407152][T12002] syzkaller1: entered allmulticast mode [ 220.531526][T12014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1607'. [ 220.637232][T12014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1607'. [ 220.781713][T12008] geneve4: entered promiscuous mode [ 220.781737][T12008] geneve4: entered allmulticast mode [ 220.783847][T12022] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 220.808910][ T9756] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 220.808949][ T9756] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 220.808978][ T9756] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 221.217379][T12046] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 221.295568][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1617'. [ 221.341959][T12053] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.462701][T12059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1621'. [ 221.466617][T12064] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1623'. [ 221.571093][T12064] team0: Port device team_slave_1 removed [ 222.045776][T12096] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1627'. [ 222.102227][T12097] netlink: 'syz.0.1628': attribute type 28 has an invalid length. [ 222.102249][T12097] netlink: 'syz.0.1628': attribute type 3 has an invalid length. [ 222.405528][T12127] x_tables: unsorted underflow at hook 1 [ 222.599298][T12128] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.599620][T12128] bridge0: port 2(bridge_slave_1) entered listening state [ 222.599884][T12128] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.600026][T12128] bridge0: port 1(bridge_slave_0) entered listening state [ 223.035071][T12156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.048545][T12165] netlink: 'syz.4.1643': attribute type 11 has an invalid length. [ 223.048737][T12165] netlink: 'syz.4.1643': attribute type 11 has an invalid length. [ 223.048914][T12165] netlink: 'syz.4.1643': attribute type 11 has an invalid length. [ 223.049112][T12165] netlink: 'syz.4.1643': attribute type 11 has an invalid length. [ 223.049278][T12165] netlink: 'syz.4.1643': attribute type 11 has an invalid length. [ 223.049465][T12165] netlink: 'syz.4.1643': attribute type 11 has an invalid length. [ 223.049640][T12165] netlink: 'syz.4.1643': attribute type 11 has an invalid length. [ 223.049823][T12165] netlink: 'syz.4.1643': attribute type 11 has an invalid length. [ 223.538517][T12186] netlink: 'syz.0.1647': attribute type 1 has an invalid length. [ 223.702553][T12186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.032300][T12209] wireguard0: entered promiscuous mode [ 224.619978][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 224.620560][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 225.017773][T12276] dvmrp0: entered allmulticast mode [ 225.042379][T12280] __nla_validate_parse: 70 callbacks suppressed [ 225.042398][T12280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1669'. [ 225.051211][T12280] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1669'. [ 225.212616][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'. [ 225.227249][T12290] bond0: option ad_select: unable to set because the bond device is up [ 225.280402][ T9757] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.280863][ T9757] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.280910][ T9757] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.386404][T12299] syzkaller0: entered promiscuous mode [ 225.386425][T12299] syzkaller0: entered allmulticast mode [ 225.430239][T12299] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1674'. [ 225.447585][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 225.447618][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 225.509779][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 225.509813][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 225.731982][T12314] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.904594][T12323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1682'. [ 225.957385][T12323] 8021q: adding VLAN 0 to HW filter on device bond17 [ 225.960834][T12323] bond17: entered allmulticast mode [ 225.961520][T12323] bond0: (slave bond17): Enslaving as a backup interface with a down link [ 226.034198][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'. [ 226.116595][T12339] xt_cluster: node mask cannot exceed total number of nodes [ 226.251595][T12350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.253483][T12343] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 226.260499][T12343] netlink: 'syz.0.1691': attribute type 5 has an invalid length. [ 226.286322][T12343] geneve5: entered promiscuous mode [ 226.286341][T12343] geneve5: entered allmulticast mode [ 226.299101][ T9757] netdevsim netdevsim0 netdevsim3: set [1, 3] type 2 family 0 port 256 - 0 [ 226.300835][ T9758] netdevsim netdevsim0 netdevsim2: set [1, 3] type 2 family 0 port 256 - 0 [ 226.300871][ T9758] netdevsim netdevsim0 netdevsim1: set [1, 3] type 2 family 0 port 256 - 0 [ 226.457258][T12363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.611324][T12365] team_slave_0: entered allmulticast mode [ 226.632046][T12365] team_slave_0: entered promiscuous mode [ 226.698260][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.698280][ C0] bridge0: topology change detected, propagating [ 226.698644][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.698659][ C0] bridge0: topology change detected, propagating [ 226.894729][T12398] syzkaller1: entered promiscuous mode [ 226.894750][T12398] syzkaller1: entered allmulticast mode [ 227.090267][T12414] veth0_vlan: left promiscuous mode [ 227.090329][T12414] vlan0: entered promiscuous mode [ 227.090341][T12414] veth0_vlan: entered promiscuous mode [ 227.126273][T12414] team0: Device vlan0 failed to register rx_handler [ 227.343790][T12409] pim6reg1: entered promiscuous mode [ 227.343811][T12409] pim6reg1: entered allmulticast mode [ 228.051107][T12456] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 228.052970][T12456] gretap0: entered promiscuous mode [ 228.052984][T12456] gretap0: entered allmulticast mode [ 228.279967][T12473] tipc: Started in network mode [ 228.280012][T12473] tipc: Node identity ac14142f, cluster identity 4711 [ 228.282011][T12473] tipc: Enabled bearer , priority 10 [ 228.564419][T12483] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 228.601989][T12486] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.755354][T12490] validate_nla: 4 callbacks suppressed [ 228.755375][T12490] netlink: 'syz.3.1729': attribute type 9 has an invalid length. [ 229.400127][T11195] tipc: Node number set to 2886997039 [ 229.618715][T12544] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.767383][T12552] netlink: 'syz.1.1748': attribute type 4 has an invalid length. [ 229.780118][T12554] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 230.311888][T12579] __nla_validate_parse: 16 callbacks suppressed [ 230.311907][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 230.519384][T12600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1765'. [ 230.702485][T12609] veth0: entered promiscuous mode [ 230.703663][T12609] veth1_to_bridge: entered promiscuous mode [ 230.790267][T12608] veth1_to_bridge: left promiscuous mode [ 230.790303][T12608] veth0: left promiscuous mode [ 230.982326][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 231.052746][T12621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.277992][T12649] netlink: 1744 bytes leftover after parsing attributes in process `syz.4.1777'. [ 231.329762][T12651] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 231.432074][T12659] ip6gre1: entered allmulticast mode [ 231.597755][T12672] netlink: 'syz.0.1785': attribute type 1 has an invalid length. [ 231.615508][T12675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1784'. [ 231.680061][T12672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.707563][T12678] bond2: (slave veth0_to_bond): Releasing active interface [ 231.736025][T12678] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 231.754836][T12672] macvlan2: entered promiscuous mode [ 231.754856][T12672] macvlan2: entered allmulticast mode [ 231.755489][T12672] bond6: entered promiscuous mode [ 231.755850][T12672] bond6: entered allmulticast mode [ 231.756429][T12672] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.757134][T12672] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 231.757449][T12672] bond6: left allmulticast mode [ 231.757487][T12672] bond6: left promiscuous mode [ 231.896950][T12688] bridge_slave_0: left allmulticast mode [ 231.896976][T12688] bridge_slave_0: left promiscuous mode [ 231.897189][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.955005][T12688] bridge_slave_1: left allmulticast mode [ 231.955029][T12688] bridge_slave_1: left promiscuous mode [ 231.955239][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.019614][T12688] team0: Port device team_slave_0 removed [ 232.042315][T12688] team0: Port device team_slave_1 removed [ 232.057395][T12696] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 232.067910][T12696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1788'. [ 232.076095][T12688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.102664][T12699] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1789'. [ 232.123920][T12684] team0: No ports can be present during mode change [ 232.216850][T12704] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1790'. [ 232.430552][ T5294] veth1_vlan: left promiscuous mode [ 232.710135][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1799'. [ 232.946262][T12750] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1802'. [ 232.988004][T12754] bridge0: entered promiscuous mode [ 232.988505][T12754] bridge0: entered allmulticast mode [ 233.903341][T12794] sctp: Trying to GSO but underlying device doesn't support it. [ 233.949505][T12796] ipvtap1: entered promiscuous mode [ 233.949568][T12796] ipvtap1: entered allmulticast mode [ 233.949582][T12796] gretap0: entered allmulticast mode [ 234.074621][T12805] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 234.102389][T12809] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 234.605349][T12842] Cannot find add_set index 0 as target [ 234.632730][T12848] Cannot find add_set index 0 as target [ 234.893143][T12871] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 235.058723][T12879] sit1: entered promiscuous mode [ 235.058746][T12879] sit1: entered allmulticast mode [ 235.417978][T12906] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 235.428665][T12905] __nla_validate_parse: 4 callbacks suppressed [ 235.428682][T12905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1848'. [ 235.428711][T12905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1848'. [ 235.713874][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'. [ 235.866421][T12941] vlan2: entered promiscuous mode [ 235.866442][T12941] bridge0: entered promiscuous mode [ 235.866589][T12941] vlan2: entered allmulticast mode [ 235.866602][T12941] bridge0: entered allmulticast mode [ 235.981147][T12949] netlink: 'syz.1.1857': attribute type 1 has an invalid length. [ 235.981170][T12949] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1857'. [ 236.192911][T12955] netlink: 'syz.2.1859': attribute type 18 has an invalid length. [ 236.217300][T12959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1861'. [ 236.366145][T12975] netlink: 'syz.3.1866': attribute type 21 has an invalid length. [ 236.366169][T12975] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1866'. [ 236.366249][T12975] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1866'. [ 236.412404][T12977] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1865'. [ 237.058539][T13009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1874'. [ 237.224473][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 237.315399][T13031] bridge: RTM_NEWNEIGH with invalid ether address [ 237.482843][T13046] Cannot find add_set index 0 as target [ 237.801546][T13071] 8021q: adding VLAN 0 to HW filter on device bond18 [ 237.925883][T13085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.925908][T13085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.931671][T13085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.931694][T13085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.199248][T13102] sctp: [Deprecated]: syz.3.1893 (pid 13102) Use of int in max_burst socket option deprecated. [ 238.199248][T13102] Use struct sctp_assoc_value instead [ 238.509742][T13129] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 238.556972][T13129] bond7: entered promiscuous mode [ 238.557426][T13129] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.585823][T13130] bond7: (slave bridge5): making interface the new active one [ 238.585846][T13130] bridge5: entered promiscuous mode [ 238.586794][T13130] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 238.956119][T13169] xt_REDIRECT: bad MAP_IPS. [ 238.983835][T13167] bond7: entered promiscuous mode [ 238.983870][T13167] bond7: entered allmulticast mode [ 239.004789][T13167] bond7: left allmulticast mode [ 239.007202][T13167] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.110023][T13167] bond7: option mode: unable to set because the bond device is up [ 239.110784][T13167] bond7: option mode: unable to set because the bond device is up [ 239.310487][T13168] IPVS: Scheduler module ip_vs_mh not found [ 239.625819][T13207] netlink: 'syz.2.1915': attribute type 1 has an invalid length. [ 239.710487][T13207] 8021q: adding VLAN 0 to HW filter on device bond19 [ 239.836480][T13207] bond19: (slave geneve3): making interface the new active one [ 239.849868][T13207] bond19: (slave geneve3): Enslaving as an active interface with an up link [ 240.042592][T13237] x_tables: duplicate underflow at hook 1 [ 240.415861][T13263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.417168][T13260] bond_slave_1: entered allmulticast mode [ 240.456893][T13263] __nla_validate_parse: 10 callbacks suppressed [ 240.456911][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'. [ 240.456924][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 240.496503][T13263] netlink: 'syz.1.1929': attribute type 4 has an invalid length. [ 240.496527][T13263] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1929'. [ 240.591836][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 240.600751][T13274] netlink: 'syz.2.1933': attribute type 1 has an invalid length. [ 240.644986][T13274] bond20: entered promiscuous mode [ 240.645514][T13274] 8021q: adding VLAN 0 to HW filter on device bond20 [ 242.581966][T13363] netlink: 'syz.1.1953': attribute type 1 has an invalid length. [ 242.625145][T13368] netlink: 'syz.1.1953': attribute type 1 has an invalid length. [ 242.716592][T13372] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1954'. [ 242.716617][T13372] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1954'. [ 242.921899][T13376] lo speed is unknown, defaulting to 1000 [ 242.923139][T13376] lo speed is unknown, defaulting to 1000 [ 242.928805][T13376] lo speed is unknown, defaulting to 1000 [ 243.624002][T13376] infiniband syz0: set down [ 243.624507][ T5838] lo speed is unknown, defaulting to 1000 [ 243.625751][T13376] infiniband syz0: added lo [ 243.648848][T13376] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 243.648885][T13376] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 243.649001][T13376] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 243.688753][T13376] RDS/IB: syz0: added [ 243.688811][T13376] smc: adding ib device syz0 with port count 1 [ 243.688830][T13376] smc: ib device syz0 port 1 has no pnetid [ 243.688902][ T5838] lo speed is unknown, defaulting to 1000 [ 243.689977][T13376] lo speed is unknown, defaulting to 1000 [ 243.699167][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 244.238418][T13418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.302037][T13376] lo speed is unknown, defaulting to 1000 [ 244.434393][T13433] netlink: 'syz.3.1966': attribute type 1 has an invalid length. [ 244.569435][T13444] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1968'. [ 244.945117][T13469] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1970'. [ 244.983659][T13469] netlink: 'syz.0.1970': attribute type 83 has an invalid length. [ 244.986382][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'. [ 245.273873][T13376] lo speed is unknown, defaulting to 1000 [ 245.425368][T13486] ip_tables: iptables: counters copy to user failed while replacing table [ 245.701123][T13489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1977'. [ 245.739454][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1980'. [ 245.743730][T13494] tipc: Enabling of bearer rejected, already enabled [ 245.743814][T13376] lo speed is unknown, defaulting to 1000 [ 245.922026][T13503] x_tables: duplicate underflow at hook 2 [ 245.930467][T13502] netlink: 'syz.3.1982': attribute type 16 has an invalid length. [ 245.930485][T13502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1982'. [ 245.930508][T13502] veth1_macvtap: entered allmulticast mode [ 246.093363][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 246.093383][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 246.093406][T13515] netlink: 'syz.4.1983': attribute type 15 has an invalid length. [ 246.156449][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 246.156469][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 246.156489][T13515] netlink: 'syz.4.1983': attribute type 15 has an invalid length. [ 246.189531][ T8956] netdevsim netdevsim4 netdevsim0: set [0, 2] type 1 family 0 port 256 - 0 [ 246.189620][ T8956] netdevsim netdevsim4 netdevsim1: set [0, 2] type 1 family 0 port 256 - 0 [ 246.198477][ T9760] netdevsim netdevsim4 netdevsim2: set [0, 2] type 1 family 0 port 256 - 0 [ 246.200073][ T8956] netdevsim netdevsim4 netdevsim3: set [0, 2] type 1 family 0 port 256 - 0 [ 246.286491][T13522] IPVS: twos: SCTP 127.0.0.1:20000 - no destination available [ 246.375771][T13376] lo speed is unknown, defaulting to 1000 [ 246.603691][T13533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1987'. [ 246.666908][T13543] geneve6: entered allmulticast mode [ 246.682154][T13541] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1987'. [ 246.944162][T13559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1991'. [ 247.774826][T13588] syzkaller0: entered promiscuous mode [ 247.774851][T13588] syzkaller0: entered allmulticast mode [ 247.890635][T13588] netlink: 'syz.1.2000': attribute type 1 has an invalid length. [ 247.892636][T13596] ip_tables: iptables: counters copy to user failed while replacing table [ 247.912210][T13596] sctp: [Deprecated]: syz.0.2004 (pid 13596) Use of int in max_burst socket option. [ 247.912210][T13596] Use struct sctp_assoc_value instead [ 248.343407][T13625] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 248.511174][T13636] ip_tables: iptables: counters copy to user failed while replacing table [ 248.622497][T13632] syz_tun (unregistering): left allmulticast mode [ 248.817817][T13659] ifb0: entered allmulticast mode [ 249.053448][T13682] SET target dimension over the limit! [ 249.054513][T13683] xt_l2tp: v2 doesn't support IP mode [ 249.061162][T13682] netlink: 'syz.0.2022': attribute type 11 has an invalid length. [ 249.137374][T13687] netlink: 'syz.3.2023': attribute type 39 has an invalid length. [ 249.175270][T13689] netlink: 'syz.3.2023': attribute type 39 has an invalid length. [ 249.399640][T13704] team_slave_0: left promiscuous mode [ 249.441840][T13695] team_slave_0: entered promiscuous mode [ 250.241718][T13753] netlink: 'syz.1.2040': attribute type 10 has an invalid length. [ 250.407747][T13768] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 250.752511][T13778] bond3: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 250.753674][T13778] bond3 (unregistering): Released all slaves [ 251.079761][T13799] Unsupported ieee802154 address type: 0 [ 255.750830][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.359825][T13828] __nla_validate_parse: 10 callbacks suppressed [ 280.359846][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 280.361509][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2058'. [ 280.383938][T13834] x_tables: duplicate underflow at hook 3 [ 280.484098][T13837] tipc: Started in network mode [ 280.484144][T13837] tipc: Node identity de3c0d4aa7d, cluster identity 4711 [ 280.496881][T13837] tipc: Enabled bearer , priority 0 [ 280.535145][T13834] tipc: Resetting bearer [ 280.543349][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 280.981854][T13882] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 280.982075][T13882] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 280.984110][T13882] netlink: 10668 bytes leftover after parsing attributes in process `syz.3.2076'. [ 281.028191][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 281.033675][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 281.035387][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 281.054635][T13882] TC_ACT_REPEAT abuse ? [ 281.055849][T13883] TC_ACT_REPEAT abuse ? [ 281.203061][T13886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2077'. [ 281.417747][T13895] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2082'. [ 281.435680][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 281.509452][ T10] tipc: Node number set to 2045513034 [ 281.601706][T13912] ipt_rpfilter: unknown options [ 281.840148][T13918] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 282.104980][T13943] veth0_vlan: left promiscuous mode [ 282.105040][T13943] vlan1: entered promiscuous mode [ 282.105052][T13943] veth0_vlan: entered promiscuous mode [ 282.219626][T13955] ip_tables: iptables: counters copy to user failed while replacing table [ 282.358451][T13965] mac80211_hwsim hwsim8 syzkaller1: entered promiscuous mode [ 282.358481][T13965] mac80211_hwsim hwsim8 syzkaller1: entered allmulticast mode [ 283.120754][T14016] ip_tables: iptables: counters copy to user failed while replacing table [ 283.121118][T14016] ip_tables: iptables: counters copy to user failed while replacing table [ 283.121424][T14016] ip_tables: iptables: counters copy to user failed while replacing table [ 283.121729][T14016] ip_tables: iptables: counters copy to user failed while replacing table [ 283.125557][T14016] ip_tables: iptables: counters copy to user failed while replacing table [ 283.125897][T14016] ip_tables: iptables: counters copy to user failed while replacing table [ 284.063659][T14065] bond0: (slave bond_slave_0): Releasing backup interface [ 284.107822][T14065] bond_slave_0: entered promiscuous mode [ 284.107870][T14065] bond_slave_0: entered allmulticast mode [ 284.734946][T14114] netlink: 'syz.4.2142': attribute type 11 has an invalid length. [ 284.752979][T14114] netlink: 'syz.4.2142': attribute type 11 has an invalid length. [ 285.022562][T14141] batadv_slave_1: entered promiscuous mode [ 285.196841][T14139] batadv_slave_1: left promiscuous mode [ 285.284560][T14158] netlink: 'syz.4.2152': attribute type 2 has an invalid length. [ 285.456457][T14165] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 285.517619][T14169] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 285.581749][T14173] __nla_validate_parse: 17 callbacks suppressed [ 285.581763][T14173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2156'. [ 285.586304][T14177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2156'. [ 285.765800][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 285.765824][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 285.932247][T14199] xt_LOG: prefix is not null-terminated [ 286.147641][T14210] netlink: 'syz.2.2167': attribute type 10 has an invalid length. [ 286.175958][T14210] team0: Device ipvlan0 failed to register rx_handler [ 286.206281][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'. [ 286.207227][T14212] vlan0: entered promiscuous mode [ 286.286274][T14212] team0: Port device vlan0 added [ 286.510366][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 286.514693][T14224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2172'. [ 286.644260][T14235] net_ratelimit: 27 callbacks suppressed [ 286.644280][T14235] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 286.721889][T14225] smbdirect: ib_dev[rxe0] renamed to [syz2] [ 286.847495][T14243] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.013158][T14259] x_tables: duplicate underflow at hook 1 [ 287.064321][T14248] netlink: 'syz.1.2178': attribute type 83 has an invalid length. [ 287.086327][T14248] netlink: 'syz.1.2178': attribute type 4 has an invalid length. [ 287.086345][T14248] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2178'. [ 287.189414][T14270] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2180'. [ 287.352482][T14276] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2182'. [ 287.425805][T14283] bond0: (slave ip6tnl0): refused to change device type [ 287.815161][T14302] mac80211_hwsim hwsim8 syzkaller1: left promiscuous mode [ 287.815187][T14302] mac80211_hwsim hwsim8 syzkaller1: left allmulticast mode [ 288.439985][T14324] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 288.464943][T14327] netlink: 'syz.3.2196': attribute type 1 has an invalid length. [ 288.502277][T14327] 8021q: adding VLAN 0 to HW filter on device bond9 [ 288.602815][T14328] bond9: (slave bridge4): making interface the new active one [ 288.626580][T14328] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 289.201717][T14371] ip_tables: iptables: counters copy to user failed while replacing table [ 289.943342][T14390] bridge_slave_1: left allmulticast mode [ 289.943370][T14390] bridge_slave_1: left promiscuous mode [ 289.943604][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.978742][T14390] bridge_slave_0: left allmulticast mode [ 289.978767][T14390] bridge_slave_0: left promiscuous mode [ 289.978988][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.051295][T14390] bridge0 (unregistering): left promiscuous mode [ 290.216317][T14407] ip_tables: iptables: counters copy to user failed while replacing table [ 290.433701][T14423] veth4: entered allmulticast mode [ 290.473424][T14419] sit0: entered promiscuous mode [ 290.565472][T14431] ip_tables: iptables: counters copy to user failed while replacing table [ 290.573955][T14419] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 290.581079][T14428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.787854][T14438] __nla_validate_parse: 15 callbacks suppressed [ 290.787875][T14438] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2220'. [ 291.067297][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2226'. [ 291.101021][T14466] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 291.103348][T14466] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 291.135710][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2229'. [ 291.202575][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2229'. [ 291.235621][T14463] bridge6: entered allmulticast mode [ 291.420539][T14483] 8021q: VLANs not supported on sit0 [ 291.434182][T14486] bond_slave_0: left promiscuous mode [ 291.434203][T14486] bond_slave_0: left allmulticast mode [ 291.437332][T14483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2234'. [ 291.536066][T14488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2238'. [ 291.614685][T14497] ipt_ECN: cannot use operation on non-tcp rule [ 291.704531][T14503] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2245'. [ 291.706051][T14503] ip_tables: iptables: counters copy to user failed while replacing table [ 291.799218][T14510] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2247'. [ 291.950338][T14514] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 292.039179][T14527] x_tables: unsorted underflow at hook 2 [ 292.056555][T14527] syzkaller0: entered promiscuous mode [ 292.056577][T14527] syzkaller0: entered allmulticast mode [ 292.111230][T14531] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2254'. [ 292.183224][T14534] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2255'. [ 292.558358][T14571] netlink: 'syz.0.2264': attribute type 142 has an invalid length. [ 292.702148][T14575] x_tables: duplicate underflow at hook 2 [ 293.083877][T14610] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 294.224816][ T5631] block nbd1: Receive control failed (result -32) [ 294.624337][T14698] ip_tables: iptables: counters copy to user failed while replacing table [ 294.808981][T14709] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 296.007172][T14791] __nla_validate_parse: 7 callbacks suppressed [ 296.007194][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 296.032386][T14791] netlink: 'syz.4.2317': attribute type 21 has an invalid length. [ 296.032467][T14791] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2317'. [ 296.033512][T14791] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 296.047501][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 296.063829][T14791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2317'. [ 296.429387][T14812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2323'. [ 296.429421][T14812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2323'. [ 296.660890][T14832] netlink: 81 bytes leftover after parsing attributes in process `syz.2.2327'. [ 296.805674][T14843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2331'. [ 296.989809][T14854] netlink: 'syz.2.2335': attribute type 3 has an invalid length. [ 296.989833][T14854] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2335'. [ 297.441226][T14881] bond10: option min_links: invalid value (18446744073709551614) [ 297.441253][T14881] bond10: option min_links: allowed values 0 - 2147483647 [ 297.446962][T14881] bond10 (unregistering): Released all slaves [ 297.757138][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2346'. [ 297.879984][T14910] xt_hashlimit: size too large, truncated to 1048576 [ 297.949042][T14917] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 298.096197][T14910] xt_hashlimit: size too large, truncated to 1048576 [ 298.160454][T14923] xt_ipcomp: unknown flags 1D [ 298.344904][T14910] xt_hashlimit: size too large, truncated to 1048576 [ 298.596606][T14910] xt_hashlimit: size too large, truncated to 1048576 [ 298.630881][T14933] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 298.672365][T14941] vlan2: entered promiscuous mode [ 298.672529][T14941] vlan2: entered allmulticast mode [ 298.873509][T14949] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 299.173601][T14975] netlink: 'syz.1.2368': attribute type 16 has an invalid length. [ 299.173616][T14975] netlink: 'syz.1.2368': attribute type 17 has an invalid length. [ 299.292700][T14975] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 299.376204][T14985] openvswitch: netlink: Actions may not be safe on all matching packets [ 299.773178][T15008] netlink: 'syz.0.2375': attribute type 1 has an invalid length. [ 299.773202][T15008] netlink: 'syz.0.2375': attribute type 1 has an invalid length. [ 299.856746][T15012] netlink: 'syz.0.2377': attribute type 5 has an invalid length. [ 299.998039][T15018] rt_mt6_check: 23 callbacks suppressed [ 299.998060][T15018] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 300.550737][T15049] ebt_among: dst integrity fail: 102 [ 300.902554][T15074] syzkaller0: left promiscuous mode [ 300.902576][T15074] syzkaller0: left allmulticast mode [ 300.918044][T15078] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 301.246918][T15101] __nla_validate_parse: 12 callbacks suppressed [ 301.246940][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 301.679382][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2407'. [ 301.834266][T15131] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2409'. [ 301.834290][T15131] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2409'. [ 301.992762][T15137] bridge_slave_1: mtu less than device minimum [ 302.036047][T15138] bridge_slave_1: mtu less than device minimum [ 302.073208][T15136] netlink: 'syz.4.2411': attribute type 3 has an invalid length. [ 302.089043][T15146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2414'. [ 302.089101][T15146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2414'. [ 302.347284][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 302.494501][T15163] bond21: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 302.506816][T15163] bond21 (unregistering): Released all slaves [ 302.510005][T15169] netlink: 4960 bytes leftover after parsing attributes in process `syz.1.2421'. [ 302.867806][T15180] netlink: 'syz.2.2425': attribute type 2 has an invalid length. [ 302.920661][T15186] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2428'. [ 303.048961][T15194] x_tables: duplicate underflow at hook 1 [ 303.065728][T15193] netlink: 'syz.0.2429': attribute type 22 has an invalid length. [ 303.065746][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'. [ 303.090787][T15193] netlink: 'syz.0.2429': attribute type 22 has an invalid length. [ 303.105773][ T9758] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.105815][ T9758] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.105846][ T9758] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.320117][T15208] veth0: entered promiscuous mode [ 303.324174][T15212] netlink: 'syz.4.2435': attribute type 2 has an invalid length. [ 303.362166][T15207] xt_REDIRECT: bad rangesize 26624. [ 303.734000][T15205] veth0: left promiscuous mode [ 303.756884][T15238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.778055][T15236] syz_tun: entered allmulticast mode [ 303.795775][T15236] dvmrp0: left allmulticast mode [ 303.985525][T15240] netlink: 'syz.3.2444': attribute type 29 has an invalid length. [ 303.996573][T15240] netlink: 'syz.3.2444': attribute type 29 has an invalid length. [ 304.017999][T15252] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 304.435715][T15274] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 304.438869][T15274] team0: Device ipvlan3 is already an upper device of the team interface [ 304.550422][T14035] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.787469][T15316] netlink: 'syz.3.2461': attribute type 4 has an invalid length. [ 305.207505][T15345] netlink: 'syz.0.2473': attribute type 6 has an invalid length. [ 305.503712][T15359] trusted_key: syz.3.2478 sent an empty control message without MSG_MORE. [ 305.634496][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.635957][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.643164][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.644459][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.651617][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.662803][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.671172][T15380] netlink: 'syz.4.2480': attribute type 16 has an invalid length. [ 305.671635][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.674868][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.682538][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.701749][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.714017][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.723479][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.750264][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.759069][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.764541][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.780248][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.787455][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.800783][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.829089][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.849724][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.852363][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.857250][T15380] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 305.857370][T15380] bridge0: port 3(30ªî{X¹¦) entered listening state [ 305.857666][T15380] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.857794][T15380] bridge0: port 1(bridge_slave_0) entered listening state [ 305.860832][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.863823][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.879939][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.884080][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.892824][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.904123][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.913933][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.923668][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.932867][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.944047][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.951754][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.963750][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.976962][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.002631][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.012482][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.019701][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.036028][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.051307][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.054708][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.060650][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.064035][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.067639][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.076586][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.082188][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.085457][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.096941][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.102699][T15380] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 306.106780][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.111397][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.119340][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.124941][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.131009][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.135611][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.137308][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.148064][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.153921][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.164466][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.171141][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.176988][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.182206][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.190118][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.195428][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.204084][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.205229][T15385] bond21: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 306.207822][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.217552][T15385] bond21 (unregistering): Released all slaves [ 306.220292][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.310708][T14027] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.310831][T14027] bridge0: port 2(bridge_slave_1) entered listening state [ 306.490286][T15393] __nla_validate_parse: 11 callbacks suppressed [ 306.490306][T15393] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2486'. [ 306.490416][T15393] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 306.504427][T15393] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 306.736881][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 306.834032][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 306.864868][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 306.947227][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 306.970131][T15431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2492'. [ 306.972166][T15431] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2492'. [ 307.087195][T15435] validate_nla: 3 callbacks suppressed [ 307.087214][T15435] netlink: 'syz.1.2493': attribute type 29 has an invalid length. [ 307.094683][T15436] netlink: 'syz.1.2493': attribute type 29 has an invalid length. [ 307.094943][T15436] netlink: 'syz.1.2493': attribute type 29 has an invalid length. [ 307.095243][T15436] netlink: 'syz.1.2493': attribute type 29 has an invalid length. [ 307.101846][T15436] netlink: 'syz.1.2493': attribute type 29 has an invalid length. [ 307.102084][T15436] netlink: 'syz.1.2493': attribute type 29 has an invalid length. [ 307.102299][T15436] netlink: 'syz.1.2493': attribute type 29 has an invalid length. [ 307.104477][T15436] netlink: 'syz.1.2493': attribute type 29 has an invalid length. [ 307.107040][T15436] netlink: 'syz.1.2493': attribute type 29 has an invalid length. [ 307.112836][T15436] netlink: 'syz.1.2493': attribute type 29 has an invalid length. [ 307.363843][T15451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2496'. [ 307.371549][T15452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2496'. [ 307.489898][T15457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2497'. [ 308.114208][T15494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.474124][T15532] ifb0: entered allmulticast mode [ 308.980442][T15563] tc_dump_action: action bad kind [ 308.999186][T15565] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.183496][T15574] bond21: Unable to set up delay as MII monitoring is disabled [ 309.201494][T15574] bond21 (unregistering): Released all slaves [ 309.287285][T15581] Bluetooth: hci0: unsupported parameter 5135 [ 309.287307][T15581] Bluetooth: hci0: unsupported parameter 8192 [ 309.287323][T15581] Bluetooth: hci0: unsupported parameter 5135 [ 309.287335][T15581] Bluetooth: hci0: unsupported parameter 8192 [ 309.357927][T15582] xt_limit: Overflow, try lower: 536871034/127 [ 309.523643][T15595] block nbd2: Unsupported socket: should be TCP or UNIX. [ 309.559763][T15600] block nbd2: Unsupported socket: should be TCP or UNIX. [ 309.769932][T15613] gretap0: entered promiscuous mode [ 310.927938][ T5631] block nbd2: Receive control failed (result -107) [ 311.385116][T15713] veth1_macvtap: left promiscuous mode [ 311.385146][T15713] macsec0: entered allmulticast mode [ 311.397802][T15713] veth1_macvtap: entered promiscuous mode [ 311.397921][T15713] macsec0: left allmulticast mode [ 311.711612][T15725] erspan1: entered promiscuous mode [ 312.046435][T15748] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 312.225418][T15757] __nla_validate_parse: 59 callbacks suppressed [ 312.225438][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 312.580165][T15783] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2584'. [ 312.580185][T15783] tc_dump_action: action bad kind [ 312.720486][T15793] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2587'. [ 312.861284][T15801] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 312.861769][T15801] team0: Device ipvlan3 is already an upper device of the team interface [ 312.911225][T15808] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2593'. [ 312.915319][T15805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.915822][T15805] bond0: (slave gtp0): The slave device specified does not support setting the MAC address [ 312.916932][T15805] bond0: (slave gtp0): Error -95 calling set_mac_address [ 313.069375][T15817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2596'. [ 313.069402][T15817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2596'. [ 313.107285][T15817] netlink: 'syz.4.2596': attribute type 11 has an invalid length. [ 313.107306][T15817] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2596'. [ 313.285085][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2599'. [ 313.286830][ T5631] block nbd3: Receive control failed (result -107) [ 313.702137][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'. [ 313.834313][T15850] validate_nla: 8 callbacks suppressed [ 313.834333][T15850] netlink: 'syz.0.2607': attribute type 1 has an invalid length. [ 313.877887][T15850] bond9: entered promiscuous mode [ 313.886796][T15850] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.048097][T15860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2609'. [ 314.327753][T15878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.436711][T15782] NFSD: Failed to start, no listeners configured. [ 315.193617][T15904] netlink: 'syz.1.2622': attribute type 1 has an invalid length. [ 315.527947][T15923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 315.763106][T15931] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 316.793701][T15955] openvswitch: netlink: Multiple metadata blocks provided [ 317.020025][T15968] netlink: 'syz.0.2641': attribute type 58 has an invalid length. [ 317.056850][T15969] openvswitch: netlink: Message has -1 unknown bytes. [ 317.180169][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.186267][T15976] Bluetooth: hci0: unsupported parameter 5135 [ 317.186288][T15976] Bluetooth: hci0: unsupported parameter 8192 [ 317.186300][T15976] Bluetooth: hci0: unsupported parameter 5135 [ 317.186311][T15976] Bluetooth: hci0: unsupported parameter 8192 [ 317.238212][T15976] sctp: [Deprecated]: syz.0.2643 (pid 15976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.238212][T15976] Use struct sctp_sack_info instead [ 317.502909][T15988] __nla_validate_parse: 8 callbacks suppressed [ 317.502928][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2647'. [ 317.528038][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2647'. [ 317.546111][T15988] vlan0: entered promiscuous mode [ 317.546132][T15988] macvtap0: entered promiscuous mode [ 317.587419][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2649'. [ 317.796514][T16005] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2655'. [ 317.802278][T15999] openvswitch: netlink: IPv6 tunnel dst address is zero [ 317.853799][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 317.856359][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2652'. [ 318.372027][T16033] IPv6: Can't replace route, no match found [ 318.504153][T16044] netlink: 'syz.2.2667': attribute type 24 has an invalid length. [ 318.562634][T16046] netlink: 'syz.2.2667': attribute type 24 has an invalid length. [ 318.682509][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2669'. [ 318.709427][T16057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2671'. [ 318.781675][T16064] netlink: 'syz.0.2673': attribute type 1 has an invalid length. [ 318.781698][T16064] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2673'. [ 318.895723][T16072] netlink: 'syz.2.2675': attribute type 4 has an invalid length. [ 318.895744][T16072] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2675'. [ 319.145113][T16080] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 319.146241][T16080] bond3 (unregistering): Released all slaves [ 319.539043][T16095] netlink: 'syz.1.2683': attribute type 1 has an invalid length. [ 320.061712][T16134] tipc: Can't bind to reserved service type 2 [ 320.077575][T16131] netlink: 'syz.4.2697': attribute type 2 has an invalid length. [ 320.077594][T16131] netlink: 'syz.4.2697': attribute type 1 has an invalid length. [ 320.374330][T16154] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 320.513528][T16152] sctp: [Deprecated]: syz.4.2702 (pid 16152) Use of int in maxseg socket option. [ 320.513528][T16152] Use struct sctp_assoc_value instead [ 320.516012][T16157] 8021q: adding VLAN 0 to HW filter on device bond22 [ 320.518921][T16157] bond21: (slave bond22): making interface the new active one [ 320.548830][T16157] bond21: (slave bond22): Enslaving as an active interface with an up link [ 320.573526][T16154] bond21: (slave gretap3): Enslaving as a backup interface with an up link [ 320.588938][T16169] 8021q: adding VLAN 0 to HW filter on device bond21 [ 320.589924][T16174] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 320.939840][ T5631] block nbd4: Receive control failed (result -107) [ 321.020069][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 321.020270][ C1] bridge0: port 3(31ªî{X¹¦) entered learning state [ 321.193062][T16213] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.580877][T16235] nbd: must specify at least one socket [ 321.658416][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 322.063940][T14028] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.064189][T14028] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.089355][ T990] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.120730][ T5838] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.346773][T16260] gretap3: entered promiscuous mode [ 322.396929][T16158] NFSD: Failed to start, no listeners configured. [ 322.518509][ T5838] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.596413][T16276] netlink: 'syz.0.2733': attribute type 1 has an invalid length. [ 322.597168][T16273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.714955][T16280] pimreg: entered allmulticast mode [ 322.811852][T16286] netlink: 'syz.2.2737': attribute type 1 has an invalid length. [ 322.876504][T16289] __nla_validate_parse: 17 callbacks suppressed [ 322.876524][T16289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2737'. [ 323.150666][T16299] syzkaller0: entered promiscuous mode [ 323.150687][T16299] syzkaller0: entered allmulticast mode [ 323.748806][T16321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2748'. [ 324.325720][T16346] netlink: 'syz.1.2755': attribute type 1 has an invalid length. [ 324.369617][T16346] bond3: entered promiscuous mode [ 324.370086][T16346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 324.396856][T16346] bond3: (slave bridge7): making interface the new active one [ 324.396880][T16346] bridge7: entered promiscuous mode [ 324.405765][T16346] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 324.698448][T16359] x_tables: duplicate underflow at hook 1 [ 324.845821][T16369] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 324.959217][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2765'. [ 325.225349][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2767'. [ 325.284454][T16390] 8021q: adding VLAN 0 to HW filter on device bond9 [ 325.293181][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 325.337501][T16397] vlan2: entered promiscuous mode [ 325.337524][T16397] bond0: entered promiscuous mode [ 325.337537][T16397] bond_slave_0: entered promiscuous mode [ 325.337746][T16397] bond_slave_1: entered promiscuous mode [ 325.622198][T16404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2770'. [ 325.653878][T16408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2770'. [ 325.747578][T16403] netlink: 'syz.4.2770': attribute type 21 has an invalid length. [ 325.747634][T16403] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2770'. [ 325.985586][T16420] netlink: 'syz.3.2774': attribute type 1 has an invalid length. [ 326.297671][T16443] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.458510][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 326.669856][T16469] tipc: Started in network mode [ 326.669887][T16469] tipc: Node identity ee634c69298b, cluster identity 4711 [ 326.670202][T16469] tipc: Enabled bearer , priority 0 [ 326.809102][T16476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2792'. [ 326.846045][T16478] nbd5: detected capacity change from 0 to 274877906944 [ 326.871813][ T5631] block nbd5: Receive control failed (result -32) [ 326.890505][ T2527] block nbd5: Dead connection, failed to find a fallback [ 326.890529][ T2527] block nbd5: shutting down sockets [ 326.890642][ T2527] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 326.890747][ T2527] Buffer I/O error on dev nbd5, logical block 0, async page read [ 326.894401][ T2527] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 326.894430][ T2527] Buffer I/O error on dev nbd5, logical block 0, async page read [ 326.897926][ T2527] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 326.897955][ T2527] Buffer I/O error on dev nbd5, logical block 0, async page read [ 326.900931][ T2527] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 326.900959][ T2527] Buffer I/O error on dev nbd5, logical block 0, async page read [ 326.901289][ T2527] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 326.901313][ T2527] Buffer I/O error on dev nbd5, logical block 0, async page read [ 326.902141][ T2527] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 326.902165][ T2527] Buffer I/O error on dev nbd5, logical block 0, async page read [ 326.902462][ T2527] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 326.902485][ T2527] Buffer I/O error on dev nbd5, logical block 0, async page read [ 326.903202][ T2527] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 326.903226][ T2527] Buffer I/O error on dev nbd5, logical block 0, async page read [ 326.903264][T16479] ldm_validate_partition_table(): Disk read failed. [ 326.903347][ T2527] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 326.903369][ T2527] Buffer I/O error on dev nbd5, logical block 0, async page read [ 326.903497][ T2527] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 326.903519][ T2527] Buffer I/O error on dev nbd5, logical block 0, async page read [ 326.904342][T16479] Dev nbd5: unable to read RDB block 0 [ 326.906551][T16479] nbd5: unable to read partition table [ 326.964005][T16479] ldm_validate_partition_table(): Disk read failed. [ 326.966572][T16479] Dev nbd5: unable to read RDB block 0 [ 326.967060][T16479] nbd5: unable to read partition table [ 327.035201][T16485] netlink: 'syz.0.2795': attribute type 2 has an invalid length. [ 327.209889][T16493] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 327.624660][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2804'. [ 327.639826][T16517] openvswitch: netlink: Actions may not be safe on all matching packets [ 327.760609][T16512] [ 327.762984][T16512] ====================================================== [ 327.770003][T16512] WARNING: possible circular locking dependency detected [ 327.777038][T16512] syzkaller #0 Not tainted [ 327.781454][T16512] ------------------------------------------------------ [ 327.788470][T16512] syz.0.2804/16512 is trying to acquire lock: [ 327.794532][T16512] ffff88801d28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 327.804401][T16512] [ 327.804401][T16512] but task is already holding lock: [ 327.811766][T16512] ffffffff90c20c60 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 327.820483][T16512] [ 327.820483][T16512] which lock already depends on the new lock. [ 327.820483][T16512] [ 327.830892][T16512] [ 327.830892][T16512] the existing dependency chain (in reverse order) is: [ 327.839908][T16512] [ 327.839908][T16512] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 327.847140][T16512] __mutex_lock+0x197/0x15a0 [ 327.852268][T16512] get_device_parent+0x16f/0x3a0 [ 327.857728][T16512] device_add+0x2d4/0xb80 [ 327.862579][T16512] device_create+0x269/0x300 [ 327.867688][T16512] msr_device_create+0x33/0x50 [ 327.872994][T16512] cpuhp_invoke_callback+0x434/0x810 [ 327.878801][T16512] cpuhp_thread_fun+0x362/0x780 [ 327.884175][T16512] smpboot_thread_fn+0x5f8/0xb30 [ 327.889625][T16512] kthread+0x38b/0x480 [ 327.894211][T16512] ret_from_fork+0x514/0xb70 [ 327.899320][T16512] ret_from_fork_asm+0x1a/0x30 [ 327.904622][T16512] [ 327.904622][T16512] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 327.908225][T16527] __nla_validate_parse: 2 callbacks suppressed [ 327.908240][T16527] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2807'. [ 327.910078][T16528] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2807'. [ 327.936377][T16512] cpuhp_thread_fun+0x127/0x780 [ 327.941761][T16512] smpboot_thread_fn+0x5f8/0xb30 [ 327.947222][T16512] kthread+0x38b/0x480 [ 327.951805][T16512] ret_from_fork+0x514/0xb70 [ 327.956910][T16512] ret_from_fork_asm+0x1a/0x30 [ 327.962190][T16512] [ 327.962190][T16512] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 327.969917][T16512] cpus_read_lock+0x3d/0x160 [ 327.975026][T16512] static_key_slow_inc+0x12/0x30 [ 327.980481][T16512] tcp_md5_do_add+0x1d4/0x390 [ 327.985678][T16512] tcp_v4_parse_md5_keys+0x47f/0x650 [ 327.991509][T16512] do_tcp_setsockopt+0x1250/0x1f80 [ 327.997146][T16512] do_sock_setsockopt+0x17c/0x1b0 [ 328.002684][T16512] __x64_sys_setsockopt+0x13d/0x1b0 [ 328.008398][T16512] do_syscall_64+0x166/0x520 [ 328.013519][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.019975][T16512] [ 328.019975][T16512] -> #8 (sk_lock-AF_INET){+.+.}-{0:0}: [ 328.027612][T16512] lock_sock_nested+0x41/0x100 [ 328.032899][T16512] inet_shutdown+0x6a/0x390 [ 328.037917][T16512] nbd_mark_nsock_dead+0x2cb/0x550 [ 328.043553][T16512] recv_work+0x1d14/0x1e30 [ 328.048484][T16512] process_scheduled_works+0xc3d/0x1630 [ 328.054557][T16512] worker_thread+0xa47/0xfb0 [ 328.059673][T16512] kthread+0x38b/0x480 [ 328.064269][T16512] ret_from_fork+0x514/0xb70 [ 328.069383][T16512] ret_from_fork_asm+0x1a/0x30 [ 328.074660][T16512] [ 328.074660][T16512] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 328.082295][T16512] __mutex_lock+0x197/0x15a0 [ 328.087404][T16512] nbd_queue_rq+0x373/0xff0 [ 328.092417][T16512] blk_mq_dispatch_rq_list+0x499/0x1990 [ 328.098481][T16512] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 328.105322][T16512] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 328.111812][T16512] blk_mq_run_work_fn+0x167/0x2f0 [ 328.117356][T16512] process_scheduled_works+0xc3d/0x1630 [ 328.123424][T16512] worker_thread+0xa47/0xfb0 [ 328.128545][T16512] kthread+0x38b/0x480 [ 328.133141][T16512] ret_from_fork+0x514/0xb70 [ 328.138251][T16512] ret_from_fork_asm+0x1a/0x30 [ 328.143542][T16512] [ 328.143542][T16512] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 328.150747][T16512] __mutex_lock+0x197/0x15a0 [ 328.155859][T16512] nbd_queue_rq+0xc1/0xff0 [ 328.160787][T16512] blk_mq_dispatch_rq_list+0x499/0x1990 [ 328.166856][T16512] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 328.173693][T16512] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 328.180185][T16512] blk_mq_run_work_fn+0x167/0x2f0 [ 328.185727][T16512] process_scheduled_works+0xc3d/0x1630 [ 328.191793][T16512] worker_thread+0xa47/0xfb0 [ 328.196903][T16512] kthread+0x38b/0x480 [ 328.201484][T16512] ret_from_fork+0x514/0xb70 [ 328.206592][T16512] ret_from_fork_asm+0x1a/0x30 [ 328.211874][T16512] [ 328.211874][T16512] -> #5 (set->srcu){.+.+}-{0:0}: [ 328.218999][T16512] __synchronize_srcu+0xca/0x2f0 [ 328.224459][T16512] elevator_switch+0x1e8/0x7b0 [ 328.229750][T16512] elevator_change+0x2fa/0x480 [ 328.235051][T16512] elevator_set_default+0x375/0x440 [ 328.240781][T16512] blk_register_queue+0x404/0x4f0 [ 328.246329][T16512] __add_disk+0x6b8/0xdb0 [ 328.251177][T16512] add_disk_fwnode+0x100/0x3a0 [ 328.256459][T16512] nbd_dev_add+0x733/0xb60 [ 328.261391][T16512] nbd_init+0x168/0x1f0 [ 328.266066][T16512] do_one_initcall+0x250/0x870 [ 328.271344][T16512] do_initcall_level+0x10a/0x1a0 [ 328.276801][T16512] do_initcalls+0x59/0xa0 [ 328.281647][T16512] kernel_init_freeable+0x29d/0x3e0 [ 328.287369][T16512] kernel_init+0x22/0x1d0 [ 328.292213][T16512] ret_from_fork+0x514/0xb70 [ 328.297321][T16512] ret_from_fork_asm+0x1a/0x30 [ 328.302603][T16512] [ 328.302603][T16512] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 328.310422][T16512] __mutex_lock+0x197/0x15a0 [ 328.315533][T16512] elevator_change+0x1af/0x480 [ 328.320824][T16512] elevator_set_none+0xb5/0x140 [ 328.326216][T16512] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 328.332542][T16512] nbd_start_device+0x189/0xb30 [ 328.337912][T16512] nbd_genl_connect+0x167d/0x1cd0 [ 328.343454][T16512] genl_family_rcv_msg_doit+0x233/0x340 [ 328.349528][T16512] genl_rcv_msg+0x614/0x7a0 [ 328.354555][T16512] netlink_rcv_skb+0x226/0x4a0 [ 328.359841][T16512] genl_rcv+0x28/0x40 [ 328.364346][T16512] netlink_unicast+0x8ef/0xa80 [ 328.369635][T16512] netlink_sendmsg+0x7f0/0xb20 [ 328.374924][T16512] sock_sendmsg_nosec+0x14e/0x190 [ 328.380478][T16512] ____sys_sendmsg+0x49f/0x790 [ 328.385758][T16512] ___sys_sendmsg+0x2f7/0x3d0 [ 328.390954][T16512] __x64_sys_sendmsg+0x1b1/0x290 [ 328.396425][T16512] do_syscall_64+0x166/0x520 [ 328.401547][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.407957][T16512] [ 328.407957][T16512] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 328.416553][T16512] blk_alloc_queue+0x544/0x690 [ 328.421843][T16512] __blk_mq_alloc_disk+0x194/0x390 [ 328.427471][T16512] nbd_dev_add+0x494/0xb60 [ 328.432408][T16512] nbd_init+0x168/0x1f0 [ 328.437096][T16512] do_one_initcall+0x250/0x870 [ 328.442374][T16512] do_initcall_level+0x10a/0x1a0 [ 328.447827][T16512] do_initcalls+0x59/0xa0 [ 328.452674][T16512] kernel_init_freeable+0x29d/0x3e0 [ 328.458390][T16512] kernel_init+0x22/0x1d0 [ 328.463236][T16512] ret_from_fork+0x514/0xb70 [ 328.468363][T16512] ret_from_fork_asm+0x1a/0x30 [ 328.473656][T16512] [ 328.473656][T16512] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 328.480866][T16512] fs_reclaim_acquire+0x71/0x100 [ 328.486328][T16512] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 328.492565][T16512] alloc_inode+0xb8/0x1b0 [ 328.497410][T16512] iget_locked+0x12c/0x690 [ 328.502345][T16512] kernfs_get_inode+0x4f/0x770 [ 328.507631][T16512] kernfs_get_tree+0x5dc/0x9a0 [ 328.512938][T16512] vfs_get_tree+0x92/0x2a0 [ 328.517874][T16512] do_new_mount+0x325/0xb00 [ 328.522894][T16512] __se_sys_mount+0x31d/0x420 [ 328.528099][T16512] do_syscall_64+0x166/0x520 [ 328.533216][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.539627][T16512] [ 328.539627][T16512] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 328.547614][T16512] down_write+0x91/0x200 [ 328.552387][T16512] kernfs_remove_by_name_ns+0x4e/0x140 [ 328.558371][T16512] device_links_driver_bound+0x4ab/0x1440 [ 328.564621][T16512] driver_bound+0xd8/0x2e0 [ 328.569556][T16512] really_probe+0x774/0xae0 [ 328.574579][T16512] __driver_probe_device+0x1e8/0x360 [ 328.580378][T16512] driver_probe_device+0x4f/0x240 [ 328.585923][T16512] __device_attach_driver+0x270/0x410 [ 328.591824][T16512] bus_for_each_drv+0x258/0x2f0 [ 328.597198][T16512] __device_attach+0x2bd/0x430 [ 328.602476][T16512] device_initial_probe+0x9c/0x100 [ 328.608109][T16512] __bus_probe_device+0x126/0x220 [ 328.613657][T16512] device_add+0x7d7/0xb80 [ 328.618504][T16512] faux_device_create_with_groups+0x1a5/0x2b0 [ 328.625094][T16512] regulator_dummy_init+0x19/0x40 [ 328.630631][T16512] regulator_init+0xca/0x110 [ 328.635731][T16512] do_one_initcall+0x250/0x870 [ 328.641006][T16512] do_initcall_level+0x10a/0x1a0 [ 328.646463][T16512] do_initcalls+0x59/0xa0 [ 328.651309][T16512] kernel_init_freeable+0x29d/0x3e0 [ 328.657023][T16512] kernel_init+0x22/0x1d0 [ 328.661861][T16512] ret_from_fork+0x514/0xb70 [ 328.666963][T16512] ret_from_fork_asm+0x1a/0x30 [ 328.672251][T16512] [ 328.672251][T16512] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 328.681887][T16512] __lock_acquire+0x164c/0x2de0 [ 328.687258][T16512] lock_acquire+0x115/0x350 [ 328.692278][T16512] down_read+0x45/0x320 [ 328.696955][T16512] kernfs_remove+0x35/0x80 [ 328.701891][T16512] __kobject_del+0xe0/0x310 [ 328.706909][T16512] kobject_del+0x45/0x60 [ 328.711661][T16512] cleanup_glue_dir+0x1a3/0x220 [ 328.717027][T16512] device_del+0x77d/0x8f0 [ 328.721873][T16512] device_destroy+0xb2/0x1a0 [ 328.726992][T16512] ipvtap_device_event+0x226/0x400 [ 328.732630][T16512] notifier_call_chain+0x1a5/0x3d0 [ 328.738263][T16512] unregister_netdevice_many_notify+0x1432/0x1dc0 [ 328.745209][T16512] rtnl_dellink+0x5bc/0x810 [ 328.750239][T16512] rtnetlink_rcv_msg+0x802/0xc00 [ 328.755696][T16512] netlink_rcv_skb+0x226/0x4a0 [ 328.760982][T16512] netlink_unicast+0x8ef/0xa80 [ 328.766261][T16512] netlink_sendmsg+0x7f0/0xb20 [ 328.771547][T16512] sock_sendmsg_nosec+0x14e/0x190 [ 328.777093][T16512] ____sys_sendmsg+0x49f/0x790 [ 328.782378][T16512] ___sys_sendmsg+0x2f7/0x3d0 [ 328.787580][T16512] __x64_sys_sendmsg+0x1b1/0x290 [ 328.793033][T16512] do_syscall_64+0x166/0x520 [ 328.798181][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.804627][T16512] [ 328.804627][T16512] other info that might help us debug this: [ 328.804627][T16512] [ 328.814853][T16512] Chain exists of: [ 328.814853][T16512] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 328.814853][T16512] [ 328.828327][T16512] Possible unsafe locking scenario: [ 328.828327][T16512] [ 328.835773][T16512] CPU0 CPU1 [ 328.841149][T16512] ---- ---- [ 328.846506][T16512] lock(gdp_mutex); [ 328.850399][T16512] lock(cpuhp_state-up); [ 328.857243][T16512] lock(gdp_mutex); [ 328.863650][T16512] rlock(&root->kernfs_supers_rwsem); [ 328.869102][T16512] [ 328.869102][T16512] *** DEADLOCK *** [ 328.869102][T16512] [ 328.877233][T16512] locks held by syz.0.2804/16512: 2, last CPU#1: [ 328.883549][T16512] #0: ffffffff916937e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 328.892514][T16512] #1: ffffffff90c20c60 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 328.901660][T16512] [ 328.901660][T16512] stack backtrace: [ 328.907673][T16512] CPU: 1 UID: 0 PID: 16512 Comm: syz.0.2804 Not tainted syzkaller #0 PREEMPT(full) [ 328.917080][T16512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 328.927153][T16512] Call Trace: [ 328.930430][T16512] [ 328.933351][T16512] dump_stack_lvl+0xe8/0x150 [ 328.937950][T16512] print_circular_bug+0x2e2/0x300 [ 328.942983][T16512] check_noncircular+0x12f/0x150 [ 328.947924][T16512] __lock_acquire+0x164c/0x2de0 [ 328.952790][T16512] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 328.958602][T16512] lock_acquire+0x115/0x350 [ 328.963118][T16512] ? kernfs_remove+0x35/0x80 [ 328.967724][T16512] down_read+0x45/0x320 [ 328.971888][T16512] ? kernfs_remove+0x35/0x80 [ 328.976477][T16512] kernfs_remove+0x35/0x80 [ 328.980897][T16512] __kobject_del+0xe0/0x310 [ 328.985409][T16512] kobject_del+0x45/0x60 [ 328.989647][T16512] cleanup_glue_dir+0x1a3/0x220 [ 328.994501][T16512] device_del+0x77d/0x8f0 [ 328.998828][T16512] ? __pfx_device_del+0x10/0x10 [ 329.003678][T16512] ? kobject_put+0x50f/0x550 [ 329.008271][T16512] device_destroy+0xb2/0x1a0 [ 329.012862][T16512] ? __pfx_device_destroy+0x10/0x10 [ 329.018060][T16512] ? kernfs_remove_by_name_ns+0x101/0x140 [ 329.023778][T16512] ipvtap_device_event+0x226/0x400 [ 329.028899][T16512] ? __pfx_ipvlan_device_event+0x10/0x10 [ 329.034531][T16512] ? __pfx_ipvtap_device_event+0x10/0x10 [ 329.040170][T16512] ? lockdep_rtnl_is_held+0x26/0x40 [ 329.045367][T16512] notifier_call_chain+0x1a5/0x3d0 [ 329.050475][T16512] unregister_netdevice_many_notify+0x1432/0x1dc0 [ 329.056895][T16512] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 329.063651][T16512] ? netdev_upper_dev_unlink+0x99/0xe0 [ 329.069100][T16512] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 329.075070][T16512] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 329.081049][T16512] ? __pfx_ipvtap_dellink+0x10/0x10 [ 329.086242][T16512] rtnl_dellink+0x5bc/0x810 [ 329.090737][T16512] ? __pfx_rtnl_dellink+0x10/0x10 [ 329.095783][T16512] ? lock_acquire+0x115/0x350 [ 329.100460][T16512] ? __pfx_rtnl_dellink+0x10/0x10 [ 329.105509][T16512] ? __pfx_rtnl_dellink+0x10/0x10 [ 329.110532][T16512] rtnetlink_rcv_msg+0x802/0xc00 [ 329.115466][T16512] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 329.120574][T16512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 329.126028][T16512] ? __copy_skb_header+0xa3/0x4a0 [ 329.131074][T16512] netlink_rcv_skb+0x226/0x4a0 [ 329.135840][T16512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 329.141293][T16512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.146580][T16512] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.151774][T16512] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.156975][T16512] netlink_unicast+0x8ef/0xa80 [ 329.161742][T16512] netlink_sendmsg+0x7f0/0xb20 [ 329.166525][T16512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.171806][T16512] ? __lock_acquire+0x747/0x2de0 [ 329.176739][T16512] ? aa_sock_msg_perm+0x144/0x210 [ 329.181763][T16512] ? apparmor_socket_sendmsg+0x98/0x360 [ 329.187308][T16512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.192602][T16512] sock_sendmsg_nosec+0x14e/0x190 [ 329.197625][T16512] ____sys_sendmsg+0x49f/0x790 [ 329.202724][T16512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.208027][T16512] ? import_iovec+0x73/0xa0 [ 329.212537][T16512] ___sys_sendmsg+0x2f7/0x3d0 [ 329.217223][T16512] ? __lock_acquire+0x747/0x2de0 [ 329.222168][T16512] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.227365][T16512] ? futex_wait+0x2a2/0x390 [ 329.231887][T16512] ? __fget_files+0x3a2/0x420 [ 329.236655][T16512] ? __fget_files+0x2a/0x420 [ 329.241255][T16512] __x64_sys_sendmsg+0x1b1/0x290 [ 329.246192][T16512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.251656][T16512] do_syscall_64+0x166/0x520 [ 329.256246][T16512] ? trace_irq_disable+0x3b/0x140 [ 329.261353][T16512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.267421][T16512] ? clear_bhb_loop+0x70/0xc0 [ 329.272095][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.278017][T16512] RIP: 0033:0x7f496efa8fd9 [ 329.282446][T16512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.302051][T16512] RSP: 002b:00007f496fdf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 329.310496][T16512] RAX: ffffffffffffffda RBX: 00007f496f225fa0 RCX: 00007f496efa8fd9 [ 329.318466][T16512] RDX: 0000000000000840 RSI: 0000200000000400 RDI: 0000000000000009 [ 329.326432][T16512] RBP: 00007f496f037fed R08: 0000000000000000 R09: 0000000000000000 [ 329.334397][T16512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.342365][T16512] R13: 00007f496f226038 R14: 00007f496f225fa0 R15: 00007fff903be238 [ 329.350344][T16512] [ 329.515577][ T5838] tipc: Node number set to 3353889897 [ 329.872941][ T5629] syz_tun (unregistering): left allmulticast mode [ 329.958054][T16526] syz_tun (unregistering): left allmulticast mode [ 330.023883][ T9758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.023914][ T9758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.023927][ T9758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 330.066203][ T9758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.066225][ T9758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.066237][ T9758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 330.113044][ T9758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.113073][ T9758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.113087][ T9758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 330.360940][ T9758] pim6reg: left allmulticast mode [ 330.361073][ T9758] pimreg: left allmulticast mode [ 330.363514][ T9758] tipc: Resetting bearer [ 330.474633][ T9758] team0: Port device xfrm0 removed [ 330.501764][ T9758] bond21 (unregistering): (slave gretap3): Releasing backup interface [ 330.504663][ T9758] bond4 (unregistering): (slave gretap2): Releasing active interface [ 330.544011][ T9758] bond19 (unregistering): (slave geneve3): Releasing active interface [ 330.545870][ T9758] bond2 (unregistering): (slave geneve2): Releasing active interface [ 330.573861][ T9758] tipc: Disabling bearer [ 330.584391][ T9758] bond1 (unregistering): (slave bridge1): Releasing active interface [ 330.626729][ T9758] bond1 (unregistering): Released all slaves [ 330.631301][ T9758] bond2 (unregistering): Released all slaves [ 330.636145][ T9758] bond3 (unregistering): Released all slaves [ 330.641579][ T9758] bond4 (unregistering): Released all slaves [ 330.646675][ T9758] bond5 (unregistering): Released all slaves [ 330.652442][ T9758] bond6 (unregistering): Released all slaves [ 330.658796][ T9758] bond7 (unregistering): Released all slaves [ 330.665062][ T9758] bond8 (unregistering): Released all slaves [ 330.686569][ T9758] bond0 (unregistering): (slave bond14): Releasing backup interface [ 330.693198][ T9758] bond14 (unregistering): left allmulticast mode [ 330.697212][ T9758] bond0 (unregistering): (slave bond17): Releasing backup interface [ 330.704277][ T9758] bond17 (unregistering): left allmulticast mode [ 330.704429][ T9758] bond0 (unregistering): Released all slaves [ 330.709951][ T9758] bond9 (unregistering): Released all slaves [ 330.715023][ T9758] bond10 (unregistering): Released all slaves [ 330.720694][ T9758] bond11 (unregistering): Released all slaves [ 330.725536][ T9758] bond12 (unregistering): Released all slaves [ 330.731510][ T9758] bond13 (unregistering): Released all slaves [ 330.736511][ T9758] bond14 (unregistering): Released all slaves [ 330.741807][ T9758] bond15 (unregistering): Released all slaves [ 330.759856][ T9758] bond16 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 330.775372][ T9758] bond16 (unregistering): Released all slaves [ 330.781057][ T9758] bond17 (unregistering): Released all slaves [ 330.786158][ T9758] bond18 (unregistering): Released all slaves [ 330.796946][ T9758] bond19 (unregistering): Released all slaves [ 330.804777][ T9758] bond20 (unregistering): Released all slaves [ 330.818943][ T9758] bond21 (unregistering): (slave bond22): Releasing backup interface [ 330.819362][ T9758] bond21 (unregistering): Released all slaves [ 330.822223][ T9758] bond22 (unregistering): Released all slaves [ 330.825111][ T9758] bond23 (unregistering): Released all slaves [ 330.945093][ T9758] tipc: Left network mode [ 331.228650][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 331.297268][ T9758] hsr_slave_0: left promiscuous mode [ 331.297894][ T9758] hsr_slave_1: left promiscuous mode [ 331.314666][ T9758] veth1_macvtap: left promiscuous mode [ 331.314720][ T9758] veth1_vlan: left promiscuous mode [ 331.314745][ T9758] veth0_vlan: left promiscuous mode [ 331.653183][ T9756] smc: removing ib device syz0 [ 331.657035][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 331.673171][ T9756] smbdirect: ib_dev[syz0] removed [ 332.135081][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 332.275350][ T9758] IPVS: stop unused estimator thread 0... [ 332.382403][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 336.378420][ C1] bridge0: port 3(31ªî{X¹¦) entered forwarding state [ 336.378443][ C1] bridge0: topology change detected, propagating [ 336.378601][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.378623][ C1] bridge0: topology change detected, propagating [ 336.879556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.879749][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 337.018227][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.018250][ C0] bridge0: topology change detected, propagating