last executing test programs: 3.973182326s ago: executing program 2 (id=2698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c8d0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.59204292s ago: executing program 2 (id=2700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) 3.467605431s ago: executing program 2 (id=2703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000080)=0x7, 0x4) bind$l2tp(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1, 0x2}, 0x10) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) ioctl$TUNSETOWNER(r0, 0x400454d4, 0x0) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) (async) r6 = gettid() (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xfffffffc}, 0x20) getsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f0000000080)=""/237, &(0x7f0000000180)=0xed) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES64=r1, @ANYRES32=r4, @ANYBLOB="669b0bb65b836d783e279ba0c80659712db6530ff852231864bf95e5076b503e6d3ba02239efecb6c46cd7468c813948db7504f1fd80c64851ea522c8a75a20395b0dec19c9fc07895b55be33ff82684389746c6d391417031d8ab1eb3f6cb21edb874588ec3a90f48bc673091e582f0470ba6a6c4c7a46f12afd75db62eba83e4bfa7d810d44c6b384ae0ad94bd2ad0dac698d6f6293f2441c3a560a6d18adb1a7bf8b4042141116680d0c2294e503daad5f278cc0cb47a9dbb8d0597019db07426e8572d47bc6f4a7772f749ddbd431698cd247b20b762df2e94", @ANYRESHEX=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0xd}, 0x94) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r10, 0x65, 0x8, 0x0, &(0x7f0000006680)) 3.00017185s ago: executing program 2 (id=2708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno', 0x4) (rerun: 64) shutdown(r0, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000000206010200cbbd39bd464019fa0000000c0007800800084000000011050001000601001b052d30000a00000013000300686173683a6e65742c69ee356699439a0945f8a2980bf166616365000005000500000000000500040003000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2.394993938s ago: executing program 3 (id=2717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000a850dea0f35a5d635da29d543e02d25840d02ba6e262b03d2c88a0d750cc57966f5f2f6d7f32ef6dc408ed547b28bd180a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.282888937s ago: executing program 3 (id=2718): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x25a5, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r6, 0x0, 0x200000000000000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) 2.04265075s ago: executing program 3 (id=2721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000012c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000380000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @private=0xa010102}, 0x110, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x8000000000000001, 0x8}) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x18a}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff37, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYRES8=r0], 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x4044000}, 0x0) 1.755315279s ago: executing program 2 (id=2725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x24004000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x8, &(0x7f0000000400)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2b}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x0, 0x3, 0x9, 0x9, 0x4}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000000)=',\x00', 0x4000, &(0x7f0000000080)={@align=0x3, {0x7ff, 0x2, 0x25e, 0x5}}, 0x7a3e, &(0x7f00000000c0), &(0x7f0000000180)=0x1}, 0x1, &(0x7f0000000300)=[{0x2, 0x6, &(0x7f00000001c0)=',\x00', &(0x7f0000000200)="8fc3492ad0e0b7c4205c6f7c2ab06ff07b1c367baa6cea251dc9aca59a848a21dcf16b7a299a66d19c8c6aa619b9d13b365fc9095b3d0f23a7159903468ebae0b4f5b01a2f2490867db7e889a50033741cf94361a580cfaff882c8a018fd1a019661940df121bef49ebb745e3eee7caf6af4a3f7ecc25d346c9045bf2a715d265b6e2a21c9a1fcd43087560b24e58b37a1b89ceb344a123ab72b58438d2021df0da56eada093f08dbe52a5a63fa961374fdb4a4f0c1d6076d557f90434d7da22b8f417fbbe59dec72a7538289620f554495418c25901366f9b52bf", 0xdb, 0x28}]}) write$cgroup_subtree(r1, &(0x7f00000003c0)={[{0x0, 'io'}]}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x80, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x101}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.711651693s ago: executing program 2 (id=2727): r0 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="1b", 0x1}, {&(0x7f00000001c0)="1cbe0f77e43585a69ab257c464923baca22ae9dc62ee3d37e5878fcdb93f7eecc9639dd724d48558296914fa9726a9e3d6f11ec46c7e684b238f8bf9d7f762bfb94297ecf43249ef9765cc3b", 0x4c}, {&(0x7f0000000240)="0606bb0d83071e053c4ab72e7a4f13c2b80e2fa33801bd3a734ced1a1968b586bef9cb8f6ac75f9d5b6a50f2a6687ba215d08dab76d14c71a83d715829d36a9b249ee5f64f867db15f136f1c81732c1bbe0a9e0968350ff84cc268e5ee0f39901d76b6af37084216fff642fb8678e0848a02f6c9231688bcf3", 0x79}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000340)="a388a9ea3e1b4f82889488ce35c390df47202bfc501f0a8bc3f95b69555eb059d1f54f83a7b8a6974467afa340bfe2a9367e3b3a1f25870338767dc4652527c896614113", 0x44}, {0x0}, {&(0x7f00000005c0)="e7255560481766699ca63cd237b679f427cadb339bfb8dc60e286777c49dbe43ffcfc6794177a0c1704623313dbe5ae4d09ff28e9b01acb50741a0df2e90e7592d62036ac2f6e90ad6b0f23bbea1085d4073869e6da59b0a44ae878736266fb0e5412e4ff8031bb3daf3fbfadb3b5857d68bf1cbdc3eae729f9b813b5a378882c67418006281e2a6f1887afdfe26801898f3dfc7ce2275fb0b5f2d0f64f10c87b9590b03c0ac207fd49e824782a297dbb24d8a9a21f9ab64e13275285e7a73123112e86d9014bec616195b68db8e07ce1cd8a37dea567a81e6811aa2b820f101920dd640a22d51f60086c26a", 0xec}], 0x3, &(0x7f0000000b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14}}], 0x50}}], 0x3, 0x2400c0a2) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="f8134b4006e5213b3f6ed2ddfb90e21a1633e719185247d99eea3a14c8d1314d73e0de56e04ee14a3075e2e55a70e6b71df17ac8e4ada6d616d3bc2d155c4570244e46714c89770b1c577f15a9740cdb149234ead86f49393465557e1bf9d7c8471d3dc58fd1a57e4e6ed5f386da456942c96de31d116079c2cd594902", 0x7d}], 0x1) unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) 1.658879602s ago: executing program 1 (id=2729): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'veth1_to_bond\x00', {}, 0x12f}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'veth1_to_bond\x00', {}, 0x12f}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xfd3ee000) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) 1.642765262s ago: executing program 3 (id=2730): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x6, 0x4) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket(0x400000000010, 0x3, 0x0) r2 = accept4$x25(r1, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x80000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="2a71fc1af995eb3cd8d7122d6f4c95da2bb506f61006aa3d776c435ea93f5b4930a41720cddb9994c08949f5239183d22dc3660c651e95bd675c20595522e34ebe92753e773677b5af183d31f64c90575d15f74b78b0e242debc89981fcd666ecdbe8e0a881dbde84ae513acbd0a5bb0d2f3d0a4d1e619d7664e78153713b5cd99f3c872b96c885e8212c052c4fdde633f9a7c146ffd387775d9fe0afce9fccdd0d366d662a2240fbc5da2ef8bcee64b38e26d453faaae86cdc2475627df9b21a854e9af54d8cea0f0d47b94b3b7ff01edb72f708973de", 0xd7) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) 1.506415473s ago: executing program 1 (id=2731): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000380)=@tipc=@id={0x2d, 0x3, 0x3, {0x4e24, 0x3}}, 0x80, 0x0}, 0x850) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) 1.459196212s ago: executing program 0 (id=2732): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003d40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4752}, 0x1c, 0x0}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @remote}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000440)='vegas', 0x5) socket$netlink(0x10, 0x3, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) connect$inet6(r5, 0x0, 0x0) (async) connect$inet6(r5, 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0xc) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.457090419s ago: executing program 4 (id=2733): syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) r0 = socket(0xf, 0x4, 0xc92b) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r3) (rerun: 32) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="76392fd6", @ANYRES16=r5, @ANYBLOB="00032dbd7000ffdbdf250200000005000400010000000900030073797a30000000000900010073797a30000000001400020069703665727370616e300000000000000900010073797a3100000000"], 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0xcb0760fb326f2691) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x20) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa19}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8f60}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9be}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) (rerun: 32) 1.273399501s ago: executing program 1 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x80, 0x45, 0xfffffffe, {{0xe, 0x4, 0x3, 0x9, 0x38, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast1, @loopback, {[@generic={0x82, 0x7, "b19e4279c6"}, @lsrr={0x83, 0x1b, 0x81, [@remote, @dev={0xac, 0x14, 0x14, 0x41}, @remote, @local, @multicast1, @broadcast]}]}}}}}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 1.235566558s ago: executing program 3 (id=2735): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff5e, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x53, 0x1, 0x0, 0x0, {0xa}, [@typed={0xa, 0x1, 0x0, 0x0, @str='wlan0\x00'}]}, 0x20}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xd9, 0x8, "1fcc9d43383f4530408a9e8cd169f8e333dc968506197a2df1fa8c158d92afb1b7d51b869e52151b5877188b15ca649149435a11f9007871fdc6b372e3c6c64c216e74e998b33c1638ccc9e3277f74f6d9d2741df855585fe10a8ee07432039f267943674c404c6fc15e7557e835ca9caa343e2716a81d26d27469df7d21d763ee80172d019cd802d3bc82af87beb7406c9dac2b519612ef64506b77e20d01fd405c0c041a01a6d7c97ac880fd9397e4c5eaeca182ad4e95787109f3b743e99aacaef895d1ca9e9050f7a3adb31f50436557d69934"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xd9, 0x8, "1fcc9d43383f4530408a9e8cd169f8e333dc968506197a2df1fa8c158d92afb1b7d51b869e52151b5877188b15ca649149435a11f9007871fdc6b372e3c6c64c216e74e998b33c1638ccc9e3277f74f6d9d2741df855585fe10a8ee07432039f267943674c404c6fc15e7557e835ca9caa343e2716a81d26d27469df7d21d763ee80172d019cd802d3bc82af87beb7406c9dac2b519612ef64506b77e20d01fd405c0c041a01a6d7c97ac880fd9397e4c5eaeca182ad4e95787109f3b743e99aacaef895d1ca9e9050f7a3adb31f50436557d69934"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) 1.183292501s ago: executing program 4 (id=2736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2c, 0x25dfdbed, {0x7, 0x0, 0x0, r4, 0x80, 0x0, 0x1}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a0104000000db000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007683302037b37f27f51010054d4077549f4e34e86f469eb0800024000000000090001002a3ea6939a1919aec89e1f6e73797a30000000000910020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.106379691s ago: executing program 0 (id=2737): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x10, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x84, 0x0, 0x41100, 0x4f}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e000000ffffff7ffbffffff0700000002000000", @ANYRES32, @ANYBLOB="0600000000000000000000040000000000000000cdb6a082558450f8c6848d6597cae81efd3ae180ae52c38d4afad041b2778ebd643b079daee2b2141bf969c4978942bdeea233f2ff00b425e3130a02fad1e0c28096b2d42fb4bcbcece5a18548e1450bfd3ad802abea599803233985fa23729d907a62cb8d7ece21282a9cac71716323f3193cf769c124949aee3ebc04cf947e9b28f50bb724cc85f11c2d2389cc72c94f83d6cc7c3e728eb97823a2635ce983fa32a15e33fa5505b624c35e3d8843fd4b5bc3623c142db8329111323d6d789ac496828a6b03", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000040000000700"/28], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x2c, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffff647b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80005020}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x1409, 0x0, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4001) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r4, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r7, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) (async) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000340)={@private0, 0x0}, &(0x7f00000003c0)=0x14) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) (async) getsockname$packet(r11, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r12, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r13, 0x0, 0x0}, 0x20) (async) getsockopt$inet6_mreq(r4, 0x29, 0x35, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x278, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 1.054100334s ago: executing program 1 (id=2738): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbf}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 975.220311ms ago: executing program 3 (id=2739): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x6, 0x4a3, 0xdb4, 0x40000004, 0x3ff]}, &(0x7f0000000240)=0x54) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 974.539622ms ago: executing program 4 (id=2740): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000240)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x500, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "58eca0d430103e859e925e0c02d4a1b6"}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0xc040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 770.155699ms ago: executing program 0 (id=2741): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) 744.359981ms ago: executing program 4 (id=2742): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x16c, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c66551d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x306ff3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46bf6a9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6340743c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f0158e8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25c204ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46db27e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f6b6c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77950a24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73208887}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x240c11f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25f4cc64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x16c}, 0x1, 0x0, 0x0, 0x60000004}, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xdc, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x94, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f1aee51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7445439a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c6fe37d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x977d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ce1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fcfd93c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7922}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5d2}]}, {0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48b1b695}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x567bf6a4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cfa}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x41}, 0x40) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2834121}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000740)=0xa, 0x4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r5, 0x614, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xdc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x26040081}, 0x4048844) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @empty}, &(0x7f0000000980)=0x10, 0x0) r8 = accept4$inet(r7, 0x0, &(0x7f00000009c0), 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x2) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b40), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r9, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000011) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'ip6gre0\x00', &(0x7f0000000cc0)={'ip6gre0\x00', 0x0, 0x29, 0x71, 0x1, 0x6, 0x40, @private1, @private0, 0x7, 0x8, 0x2, 0x30}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d80)={0x11, 0x0, 0x0}, &(0x7f0000000dc0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0x58, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000001040)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=@mpls_delroute={0xe0, 0x19, 0xc22, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x10, 0x14, 0x2, 0xfd, 0x4, 0x0, 0x6, 0xa00}, [@RTA_NEWDST={0x84, 0x13, [{0xffffc, 0x0, 0x1}, {0x1}, {0x200, 0x0, 0x1}, {0x5}, {0x9}, {0x0, 0x0, 0x1}, {0x2}, {0x8, 0x0, 0x1}, {0x4}, {0x100}, {}, {0x130}, {0x0, 0x0, 0x1}, {0x1}, {0x9}, {0x9, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xc1}, {0xffff9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {}, {0x7fff, 0x0, 0x1}, {0x3dbb}, {0x7}, {0x3, 0x0, 0x1}, {0x8}, {0x9}, {0x4}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xa992, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x100, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x401, 0x1, 0x6, r11}}, @RTA_MULTIPATH={0xc, 0x9, {0x8000, 0x5, 0x5, r12}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x20, 0xc, r13}}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x14, 0x6, r14}}, @RTA_DST={0x8, 0x1, {0x3}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={r10, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000002240)={'vcan0\x00', 0x0}) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002300)={0x1b, 0x0, 0x0, 0x989, 0x0, 0x1, 0x0, '\x00', r13, r10, 0x4, 0x1, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002440)=@bpf_lsm={0x1d, 0x23, &(0x7f00000010c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x63d, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x25ef, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @exit, @generic={0x4, 0x7, 0x8, 0x5, 0x227}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001200)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001240)=""/4096, 0x41000, 0x51, '\x00', r16, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000022c0)={0x1, 0x0, 0x8, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000002380)=[r17], &(0x7f00000023c0)=[{0x4, 0x3, 0x5, 0x9}, {0x4, 0x1, 0xe, 0xa}, {0x1, 0x2, 0x4, 0x4}, {0x0, 0x2, 0xa, 0x1}, {0x3, 0x1, 0xe, 0x2}], 0x10, 0x8}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000002500), 0x4) 583.157796ms ago: executing program 0 (id=2743): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0xdb10, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x66a, 0x4, 0x8, 0x8, [0x7f, 0x6]}}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000020603000000000000000000000000000500010007000000090002"], 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async, rerun: 32) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000440)={0x4, 0x0, 0xa, 0xb, 0x20000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010100200000000000400000004000003", @ANYRES32=0x0, @ANYBLOB="500100000000000018003480140035006970366772653000000000000000000008001b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 568.133323ms ago: executing program 1 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8010, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 414.653316ms ago: executing program 0 (id=2745): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x5}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 287.204364ms ago: executing program 4 (id=2746): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x6, 0x3, 0x9}) 285.898886ms ago: executing program 1 (id=2747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x1000}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcb}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1df9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10048001}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xa, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7fff, 0x2, 0x6}, {0xfff, 0xffffffffffffffd9, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c054) 12.090767ms ago: executing program 4 (id=2748): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x75, @local, 0x4e20, 0x0, 'lblcr\x00', 0x5, 0x0, 0x42}, 0x2c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}}], {0x14}}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r2], 0x84}}, 0x20008040) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @empty}, {0x306, @remote}, 0x44, {0x2, 0x4e24, @private=0xa010102}, 'wlan0\x00'}) (async) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x198, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8001}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf2, 0xa9, @random="3e62c9e6e4e7ee572b07ac833da7450f9a1c770f91d00c0719f7528549bd70f8caaa8c6c36860e044df844bfd53a4c87d18e241180f946d8655d26484650fd88ae7f3b89f2c320c5c1635c3679e4b608190945a9b5a9cb3f34ddae78b082459d7dcd8bf79e34fdd04c92b54a3f710523458a9953466817f5570c70314364493a746c6045ae654d0c4bd474a6dd67ce7c0ead3d71e99071b053a39706e4f00949d85ab582dbf1c220d94fc50d1513a86daee18945f5113fe960754a08eb2e61df98d60a30f96c08f7e92f91ea187f2ac4bd29637de07ecb6674d5d84e0275a1b6aeda039fd5e6e1653defebe1bdcb"}]}, 0x198}, 0x1, 0x0, 0x0, 0x4004085}, 0x40011) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="250300000000000000000800"], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r12, 0x210, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r6}]}, 0x24}}, 0x0) 0s ago: executing program 0 (id=2749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @loopback, 0xffff}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, r4, 0x1913, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x7fffffff, 0xd629, {{0x1c, 0x4, 0x1, 0x17, 0x70, 0x68, 0x0, 0x0, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_prespec={0x44, 0x14, 0x86, 0x3, 0x3, [{@private=0xa010102, 0x80000001}, {@private=0xa010102, 0x1f0e}]}, @timestamp_prespec={0x44, 0x24, 0x5f, 0x3, 0x5, [{@loopback, 0x39}, {@loopback, 0x29bf}, {@multicast1}, {@multicast1, 0x6}]}, @timestamp={0x44, 0x10, 0x6a, 0x0, 0x1, [0x1, 0x9be7, 0x0]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x94, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}]}}}}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000000)={0x2f, 0x1}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) kernel console output (not intermixed with test programs): ailed: -4 [ 173.064236][ T7848] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 173.076323][ T7883] syzkaller0: entered allmulticast mode [ 173.179983][ T7883] netlink: 44 bytes leftover after parsing attributes in process `syz.1.520'. [ 173.369750][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.881826][ T7918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.526'. [ 173.891249][ T7909] pimreg3: entered allmulticast mode [ 173.900614][ T7919] netlink: 56 bytes leftover after parsing attributes in process `syz.2.526'. [ 174.134624][ T7924] sctp: [Deprecated]: syz.4.528 (pid 7924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.134624][ T7924] Use struct sctp_sack_info instead [ 174.410800][ T7942] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 174.421497][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.607488][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.534'. [ 175.216657][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.295824][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 175.359470][ T7972] netlink: 'syz.1.542': attribute type 5 has an invalid length. [ 175.414896][ T7977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.453209][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.542683][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.007298][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.546'. [ 176.136070][ T7995] ip6erspan0: entered promiscuous mode [ 176.490041][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.718348][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 176.729995][ T8032] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 176.754571][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.557'. [ 177.097018][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.561'. [ 177.119615][ T808] IPVS: starting estimator thread 0... [ 177.184720][ T8048] ip6erspan0: entered promiscuous mode [ 177.228604][ T8050] IPVS: using max 28 ests per chain, 67200 per kthread [ 177.455781][ T8056] netlink: 'syz.3.562': attribute type 62 has an invalid length. [ 177.529026][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.956385][ T8068] netlink: 'syz.1.565': attribute type 4 has an invalid length. [ 178.009525][ T8071] netlink: 260 bytes leftover after parsing attributes in process `syz.2.559'. [ 178.163527][ T8073] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 178.251427][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.333322][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 178.374920][ T8081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.412643][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 178.437682][ T8073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.743946][ T8101] SET target dimension over the limit! [ 178.943413][ T8108] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20000 [ 179.109908][ T8112] syzkaller0: entered promiscuous mode [ 179.120012][ T8112] syzkaller0: entered allmulticast mode [ 179.163134][ T8119] SET target dimension over the limit! [ 179.288125][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 179.328335][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.579'. [ 179.515300][ T8134] syzkaller0: entered promiscuous mode [ 179.551739][ T8134] syzkaller0: entered allmulticast mode [ 179.645399][ T8125] syzkaller1: entered promiscuous mode [ 179.668101][ T8125] syzkaller1: entered allmulticast mode [ 179.973787][ T8150] xt_hashlimit: size too large, truncated to 1048576 [ 180.470560][ T8173] syzkaller0: entered promiscuous mode [ 180.528228][ T8173] syzkaller0: entered allmulticast mode [ 180.976358][ T8189] sock: sock_timestamping_bind_phc: sock not bind to device [ 181.028159][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'. [ 181.305305][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'. [ 181.324486][ T8200] netlink: 'syz.1.597': attribute type 16 has an invalid length. [ 181.362499][ T8200] netlink: 'syz.1.597': attribute type 17 has an invalid length. [ 181.435236][ T8205] bridge_slave_0: left allmulticast mode [ 181.463891][ T8205] bridge_slave_0: left promiscuous mode [ 181.475314][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.510248][ T8205] bridge_slave_1: left allmulticast mode [ 181.523375][ T8205] bridge_slave_1: left promiscuous mode [ 181.537202][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.596604][ T8205] bond0: (slave bond_slave_0): Releasing backup interface [ 181.660501][ T8205] bond0: (slave bond_slave_1): Releasing backup interface [ 181.742978][ T8205] team0: Port device team_slave_0 removed [ 181.813432][ T8205] team0: Port device team_slave_1 removed [ 181.842333][ T8205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.883651][ T8205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.923613][ T8205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.958836][ T8205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.988340][ T8205] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.172675][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.186707][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.279894][ T8200] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 182.326774][ T8236] __nla_validate_parse: 2 callbacks suppressed [ 182.326792][ T8236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.606'. [ 182.822239][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c1f5c00: rx timeout, send abort [ 182.845167][ T8273] netlink: 'syz.4.617': attribute type 58 has an invalid length. [ 182.868173][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.617'. [ 183.250466][ T8288] netlink: 'syz.0.622': attribute type 12 has an invalid length. [ 183.268070][ T8288] netlink: 'syz.0.622': attribute type 29 has an invalid length. [ 183.279391][ T8288] netlink: 148 bytes leftover after parsing attributes in process `syz.0.622'. [ 183.302538][ T8288] netlink: 59 bytes leftover after parsing attributes in process `syz.0.622'. [ 183.322336][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054d22400: rx timeout, send abort [ 183.332179][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c1f5c00: abort rx timeout. Force session deactivation [ 183.543294][ T8297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.624'. [ 183.781157][ T8284] block nbd0: not configured, cannot reconfigure [ 183.813256][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c1f6400: rx timeout, send abort [ 183.830637][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054d22400: abort rx timeout. Force session deactivation [ 183.844708][ T8289] netlink: 81 bytes leftover after parsing attributes in process `syz.4.621'. [ 183.984289][ T8312] Bluetooth: MGMT ver 1.23 [ 184.085088][ T8318] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 184.161606][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.625'. [ 184.321683][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c1f6400: abort rx timeout. Force session deactivation [ 184.925992][ T8352] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.633'. [ 185.040626][ T8355] blkio.reset_stats is deprecated [ 185.497415][ T8379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.638'. [ 185.509033][ T8380] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.544330][ T8383] vlan2: entered allmulticast mode [ 185.558863][ T8383] bond0: entered allmulticast mode [ 185.569905][ T8383] bond_slave_0: entered allmulticast mode [ 185.586532][ T8383] bond_slave_1: entered allmulticast mode [ 185.601443][ T8382] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 185.609782][ T8383] syz_tun: entered allmulticast mode [ 185.633582][ T8385] netlink: 14 bytes leftover after parsing attributes in process `syz.2.640'. [ 185.853272][ T8382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.885391][ T8380] macvlan2: entered promiscuous mode [ 185.890960][ T8380] macvlan2: entered allmulticast mode [ 185.897751][ T8380] bond2: entered promiscuous mode [ 185.903780][ T8380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.917329][ T8380] bond2: left promiscuous mode [ 186.045563][ T8385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.094104][ T8385] bond_slave_0: left allmulticast mode [ 186.121773][ T8385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.142610][ T8385] bond_slave_1: left allmulticast mode [ 186.172837][ T8385] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 186.204114][ T8385] syz_tun: left allmulticast mode [ 186.216145][ T8385] bond0 (unregistering): Released all slaves [ 186.236507][ T8391] batman_adv: batadv0: Adding interface: dummy0 [ 186.247032][ T8391] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.281843][ T8391] batman_adv: batadv0: Interface activated: dummy0 [ 186.324153][ T8393] batadv0: mtu less than device minimum [ 186.342426][ T8393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.355145][ T8393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.366958][ T8393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.379700][ T8393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.391480][ T8393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.403398][ T8393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.415208][ T8393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.513666][ T8473] netlink: 'syz.3.659': attribute type 10 has an invalid length. [ 187.526891][ T8460] __nla_validate_parse: 3 callbacks suppressed [ 187.526909][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'. [ 187.764241][ T8469] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 187.782568][ T8469] bond3 (unregistering): Released all slaves [ 187.823557][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 188.001042][ T8473] team0: Port device vlan0 added [ 188.416637][ T8508] netlink: 64 bytes leftover after parsing attributes in process `syz.0.665'. [ 188.542195][ T8501] batadv0: entered promiscuous mode [ 188.585668][ T8501] macsec1: entered promiscuous mode [ 188.635598][ T8501] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 188.686931][ T8501] batadv0: left promiscuous mode [ 188.763238][ T8514] netlink: 'syz.0.668': attribute type 2 has an invalid length. [ 188.907184][ T8526] net_ratelimit: 12 callbacks suppressed [ 188.907203][ T8526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.047964][ T8531] netlink: 'syz.1.673': attribute type 12 has an invalid length. [ 189.077381][ T8531] netlink: 'syz.1.673': attribute type 29 has an invalid length. [ 189.109545][ T8531] netlink: 148 bytes leftover after parsing attributes in process `syz.1.673'. [ 189.153147][ T8531] netlink: 59 bytes leftover after parsing attributes in process `syz.1.673'. [ 189.561287][ T8550] vlan2: entered promiscuous mode [ 189.578701][ T8550] bridge0: entered promiscuous mode [ 190.429591][ T8605] veth0: entered promiscuous mode [ 190.513206][ T8605] veth0: left promiscuous mode [ 190.743167][ T8629] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 190.754239][ T8630] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 190.859649][ T8629] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.892141][ T8636] bond3: (slave bridge5): making interface the new active one [ 190.900816][ T8636] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 191.438018][ T8670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.914694][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 192.008153][ T8702] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.713'. [ 192.027295][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.713'. [ 192.040347][ T8702] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.069265][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.713'. [ 192.328742][ T8717] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 192.356352][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 192.680643][ T8726] __nla_validate_parse: 1 callbacks suppressed [ 192.680662][ T8726] netlink: 312 bytes leftover after parsing attributes in process `syz.1.724'. [ 192.766491][ T8727] xt_hashlimit: size too large, truncated to 1048576 [ 192.786203][ T8728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.723'. [ 193.016346][ T8740] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 193.042268][ T8741] IPVS: set_ctl: invalid protocol: 98 172.30.1.3:20002 [ 193.063092][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 193.074921][ T8744] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 193.254805][ T8746] netlink: 216 bytes leftover after parsing attributes in process `syz.3.731'. [ 193.299024][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 193.450592][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 193.473901][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 193.657410][ T8773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.737'. [ 193.837167][ T8784] netlink: 'syz.0.740': attribute type 15 has an invalid length. [ 193.874666][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 193.887769][ T8784] netlink: 'syz.0.740': attribute type 15 has an invalid length. [ 193.895803][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 193.905246][ T8784] netlink: 'syz.0.740': attribute type 15 has an invalid length. [ 194.094442][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.102758][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.110041][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 194.301155][ T8798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.849101][ T8846] tipc: Enabled bearer , priority 11 [ 195.201036][ T8850] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 195.233028][ T8850] bond3 (unregistering): Released all slaves [ 195.272225][ T8868] syzkaller0: entered promiscuous mode [ 195.291658][ T8868] syzkaller0: entered allmulticast mode [ 195.475270][ T8882] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 195.484463][ T8882] netlink: 'syz.0.764': attribute type 2 has an invalid length. [ 195.596927][ T8889] netlink: 'syz.3.766': attribute type 25 has an invalid length. [ 195.616715][ T8883] netlink: zone id is out of range [ 195.636850][ T8883] netlink: zone id is out of range [ 195.647120][ T8883] netlink: zone id is out of range [ 195.674819][ T8883] netlink: zone id is out of range [ 195.692123][ T8883] netlink: zone id is out of range [ 195.697707][ T8883] netlink: zone id is out of range [ 195.710271][ T8889] netlink: 'syz.3.766': attribute type 25 has an invalid length. [ 195.716114][ T8883] netlink: zone id is out of range [ 195.743281][ T8883] netlink: zone id is out of range [ 195.759700][ T8883] netlink: zone id is out of range [ 196.087470][ T8901] syzkaller0: entered promiscuous mode [ 196.105079][ T8901] syzkaller0: entered allmulticast mode [ 196.267172][ T8913] pimreg: entered allmulticast mode [ 196.386117][ T8922] netlink: 'syz.0.776': attribute type 13 has an invalid length. [ 196.645469][ T8933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.131916][ T8998] netlink: 'syz.3.804': attribute type 10 has an invalid length. [ 198.396373][ T8998] team0 (unregistering): Port device team_slave_0 removed [ 198.411839][ T9006] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 198.433179][ T9006] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 198.450058][ T8998] team0 (unregistering): Port device team_slave_1 removed [ 198.459548][ T9006] __nla_validate_parse: 10 callbacks suppressed [ 198.459568][ T9006] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.805'. [ 198.508353][ T8998] team0 (unregistering): Port device vlan0 removed [ 198.683347][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 199.153193][ T9046] netlink: 256 bytes leftover after parsing attributes in process `syz.2.817'. [ 199.339648][ T9055] sctp: [Deprecated]: syz.2.822 (pid 9055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.339648][ T9055] Use struct sctp_sack_info instead [ 199.366982][ T9055] veth1_macvtap: left promiscuous mode [ 199.470738][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 199.516140][ T9061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.823'. [ 199.539291][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 199.588530][ T9066] netlink: 'syz.2.825': attribute type 1 has an invalid length. [ 199.610496][ T9066] netlink: 224 bytes leftover after parsing attributes in process `syz.2.825'. [ 199.924661][ T9079] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 200.014638][ T9083] vlan2: entered allmulticast mode [ 200.020134][ T9083] veth0_to_bond: entered allmulticast mode [ 200.965205][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 201.202796][ T9139] xt_l2tp: invalid flags combination: 0 [ 201.238099][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.847'. [ 201.258055][ T9144] xt_l2tp: invalid flags combination: 0 [ 201.268627][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.847'. [ 201.311999][ T9145] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 201.978648][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.991658][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.023357][ T9162] veth1_mac: left promiscuous mode [ 202.075891][ T9162] geneve2: left promiscuous mode [ 202.107304][ T9162] ip6erspan0: left promiscuous mode [ 202.128616][ T181] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.173201][ T181] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.209941][ T181] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 46822 - 0 [ 202.273883][ T181] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.317730][ T181] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.354203][ T181] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 46822 - 0 [ 202.384157][ T9195] atomic_op ffff8880297d3198 conn xmit_atomic 0000000000000000 [ 202.401906][ T181] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.434825][ T181] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.480176][ T181] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 46822 - 0 [ 202.525847][ T181] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.563784][ T181] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.594300][ T181] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 46822 - 0 [ 202.800884][ T9217] bridge0: port 3(gretap0) entered blocking state [ 202.842246][ T9217] bridge0: port 3(gretap0) entered disabled state [ 202.875392][ T9217] gretap0: entered allmulticast mode [ 202.920304][ T9217] gretap0: entered promiscuous mode [ 202.942860][ T9211] xt_CT: No such helper "snmp_trap" [ 202.962926][ T9215] IPVS: Error connecting to the multicast addr [ 203.405713][ T9253] netlink: 'syz.4.870': attribute type 1 has an invalid length. [ 203.612231][ T29] hsr0: entered promiscuous mode [ 203.617678][ T9267] __nla_validate_parse: 11 callbacks suppressed [ 203.617694][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 204.413721][ T9308] netlink: 'syz.4.883': attribute type 21 has an invalid length. [ 204.514599][ T9310] netlink: 'syz.0.884': attribute type 10 has an invalid length. [ 204.548965][ T9310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.584553][ T9310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.594167][ T9317] netlink: 'syz.0.884': attribute type 10 has an invalid length. [ 204.655236][ T9310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.677617][ T9322] netlink: 27 bytes leftover after parsing attributes in process `syz.1.887'. [ 204.691964][ T9323] sctp: [Deprecated]: syz.4.888 (pid 9323) Use of int in max_burst socket option. [ 204.691964][ T9323] Use struct sctp_assoc_value instead [ 204.729243][ T9323] netlink: 'syz.4.888': attribute type 21 has an invalid length. [ 205.728410][ T9366] netlink: 'syz.4.898': attribute type 2 has an invalid length. [ 205.746603][ T9366] netlink: 'syz.4.898': attribute type 1 has an invalid length. [ 206.058104][ T9377] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.901'. [ 206.191911][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 206.215103][ T9391] netlink: 'syz.3.905': attribute type 10 has an invalid length. [ 206.567807][ T9407] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.910'. [ 206.588758][ T9402] netlink: 'syz.3.908': attribute type 28 has an invalid length. [ 206.606207][ T9407] net_ratelimit: 51 callbacks suppressed [ 206.606224][ T9407] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 206.631023][ T9402] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 206.737719][ T9415] bridge0: port 1(syz_tun) entered blocking state [ 206.783128][ T9415] bridge0: port 1(syz_tun) entered disabled state [ 206.810629][ T9415] syz_tun: entered allmulticast mode [ 207.401828][ T9446] lo speed is unknown, defaulting to 1000 [ 207.449999][ T9446] lo speed is unknown, defaulting to 1000 [ 207.484376][ T9446] lo speed is unknown, defaulting to 1000 [ 207.576063][ T9464] netlink: 104 bytes leftover after parsing attributes in process `syz.1.923'. [ 207.616725][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 207.985405][ T9477] openvswitch: netlink: Key type 159 is out of range max 32 [ 208.328148][ T9492] macvlan0: entered promiscuous mode [ 208.456507][ T5759] lo speed is unknown, defaulting to 1000 [ 208.470253][ T9446] infiniband syz2: set down [ 208.489174][ T9446] infiniband syz2: added lo [ 208.523387][ T9506] sctp: [Deprecated]: syz.2.936 (pid 9506) Use of int in max_burst socket option. [ 208.523387][ T9506] Use struct sctp_assoc_value instead [ 208.599974][ T9446] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 208.632584][ T9446] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 208.672347][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 208.712281][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'. [ 208.737020][ T9446] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 208.768122][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 208.796783][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'. [ 208.875505][ T9523] netlink: 104 bytes leftover after parsing attributes in process `syz.1.939'. [ 208.942609][ T9446] RDS/IB: syz2: added [ 208.968175][ T9446] smc: adding ib device syz2 with port count 1 [ 209.005052][ T9446] smc: ib device syz2 port 1 has no pnetid [ 209.030933][ T10] lo speed is unknown, defaulting to 1000 [ 209.083208][ T9446] lo speed is unknown, defaulting to 1000 [ 209.298177][ T9539] nbd: must specify a device to reconfigure [ 209.380797][ T9541] validate_nla: 4 callbacks suppressed [ 209.380815][ T9541] netlink: 'syz.4.943': attribute type 21 has an invalid length. [ 209.395827][ T9541] netlink: 'syz.4.943': attribute type 22 has an invalid length. [ 209.404358][ T9541] netlink: 'syz.4.943': attribute type 23 has an invalid length. [ 209.412625][ T9541] netlink: 'syz.4.943': attribute type 25 has an invalid length. [ 209.420791][ T9541] netlink: 96 bytes leftover after parsing attributes in process `syz.4.943'. [ 209.724406][ T9552] netlink: 56 bytes leftover after parsing attributes in process `syz.2.948'. [ 209.924080][ T9552] bond0 (unregistering): Released all slaves [ 210.378723][ T9446] lo speed is unknown, defaulting to 1000 [ 211.036073][ T9446] lo speed is unknown, defaulting to 1000 [ 211.070463][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.964'. [ 211.463396][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'. [ 211.491133][ T9616] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 211.586733][ T9616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.643104][ T9616] bridge2: entered promiscuous mode [ 211.653533][ T9616] bridge2: entered allmulticast mode [ 211.711012][ T9446] lo speed is unknown, defaulting to 1000 [ 214.703982][ T9446] lo speed is unknown, defaulting to 1000 [ 214.774557][ T9692] ip6gre1: entered allmulticast mode [ 214.936753][ T9708] netlink: 'syz.1.981': attribute type 1 has an invalid length. [ 214.962884][ T9708] netlink: 224 bytes leftover after parsing attributes in process `syz.1.981'. [ 214.996621][ T9708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.981'. [ 215.110524][ T9715] netlink: 'syz.4.983': attribute type 1 has an invalid length. [ 215.131296][ T9715] netlink: 'syz.4.983': attribute type 11 has an invalid length. [ 215.152983][ T9715] netlink: 224 bytes leftover after parsing attributes in process `syz.4.983'. [ 215.231395][ T9721] netlink: 277 bytes leftover after parsing attributes in process `syz.2.985'. [ 215.553250][ T9734] bridge_slave_0: left allmulticast mode [ 215.567854][ T9734] bridge_slave_0: left promiscuous mode [ 215.594821][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.630509][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.992'. [ 215.686260][ T9734] bridge_slave_1: left allmulticast mode [ 215.701867][ T9734] bridge_slave_1: left promiscuous mode [ 215.724251][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.760928][ T9734] bond0: (slave bond_slave_0): Releasing backup interface [ 215.816724][ T9734] bond0: (slave bond_slave_1): Releasing backup interface [ 215.854730][ T9734] team0: Port device team_slave_0 removed [ 215.896681][ T9734] team0: Port device team_slave_1 removed [ 215.930427][ T9734] bond1: (slave gretap1): Releasing active interface [ 215.983973][ T9740] team0: Mode changed to "broadcast" [ 216.187449][ T9765] netlink: 192 bytes leftover after parsing attributes in process `syz.0.998'. [ 216.435796][ T9781] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1003'. [ 216.446639][ T9779] IPv6: sit1: Disabled Multicast RS [ 216.486581][ T9779] sit1: entered allmulticast mode [ 216.513663][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 216.697069][ T9795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1008'. [ 216.827434][ T9799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'. [ 216.847766][ T9788] lo speed is unknown, defaulting to 1000 [ 216.913330][ T9810] x_tables: duplicate entry at hook 3 [ 217.247148][ T9823] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 217.553079][ T9839] IPv6: Can't replace route, no match found [ 217.599370][ T9840] xt_l2tp: invalid flags combination: 0 [ 218.392854][ T9868] netlink: 'syz.1.1026': attribute type 28 has an invalid length. [ 219.376927][ T9909] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 219.486537][ T9909] xt_hashlimit: size too large, truncated to 1048576 [ 220.220263][ T9936] __nla_validate_parse: 9 callbacks suppressed [ 220.220282][ T9936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1044'. [ 220.243684][ T9938] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 220.591867][ T9954] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 220.836982][ T9968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1052'. [ 221.207571][ T9979] netlink: 'syz.3.1054': attribute type 28 has an invalid length. [ 221.232621][ T9979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1054'. [ 221.674746][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1058'. [ 221.735540][ T9992] syzkaller0: entered promiscuous mode [ 221.753730][ T9992] syzkaller0: entered allmulticast mode [ 221.815075][T10002] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1062'. [ 221.862517][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 221.895949][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 221.962672][ T6843] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.987895][ T6843] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.035023][ T6843] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.067466][ T6843] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.083910][T10006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1064'. [ 222.194217][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 222.229026][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 222.478124][T10019] netlink: 'syz.1.1068': attribute type 28 has an invalid length. [ 222.554147][T10032] 0·: renamed from hsr0 (while UP) [ 222.572812][T10032] 0·: entered allmulticast mode [ 222.589603][T10032] hsr_slave_0: entered allmulticast mode [ 222.608687][T10032] hsr_slave_1: entered allmulticast mode [ 222.633217][T10032] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 222.698705][T10038] netlink: 'syz.1.1074': attribute type 29 has an invalid length. [ 222.960973][T10053] netlink: 'syz.4.1080': attribute type 1 has an invalid length. [ 223.137003][T10055] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 223.154764][T10055] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 223.219035][T10065] netlink: 'syz.1.1084': attribute type 28 has an invalid length. [ 223.385804][T10074] ipvlan1: entered promiscuous mode [ 223.402037][T10074] ipvlan1: entered allmulticast mode [ 223.407556][T10074] veth0_vlan: entered allmulticast mode [ 224.395522][T10119] netlink: 'syz.0.1100': attribute type 16 has an invalid length. [ 224.412932][T10119] netlink: 'syz.0.1100': attribute type 17 has an invalid length. [ 224.567354][T10122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.673589][T10119] tipc: Resetting bearer [ 224.682515][T10119] tipc: Resetting bearer [ 224.779662][T10119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.806248][T10119] bond2: left promiscuous mode [ 224.827578][T10119] bond2: left allmulticast mode [ 224.852330][T10119] macvtap1: left promiscuous mode [ 224.867793][T10119] macvtap1: left allmulticast mode [ 224.875058][T10119] veth1_vlan: left allmulticast mode [ 224.902392][T10119] bridge2: left promiscuous mode [ 224.907615][T10119] bridge2: left allmulticast mode [ 224.932403][T10119] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.244165][T10151] netlink: 'syz.2.1107': attribute type 2 has an invalid length. [ 225.283134][T10154] netlink: 'syz.2.1107': attribute type 2 has an invalid length. [ 225.571111][T10165] bond4: option mode: unable to set because the bond device is up [ 225.597867][T10165] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 225.674449][T10165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.712637][T10172] netlink: 'syz.1.1112': attribute type 1 has an invalid length. [ 225.781141][T10165] bond4: (slave lo): making interface the new active one [ 225.801400][T10165] bond4: (slave lo): Enslaving as an active interface with an up link [ 225.816076][T10175] __nla_validate_parse: 6 callbacks suppressed [ 225.816094][T10175] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1113'. [ 225.839501][T10165] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 225.892024][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1110'. [ 226.081657][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 226.115391][T10186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1116'. [ 226.240477][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 226.257923][T10196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1120'. [ 226.261796][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 226.306411][T10190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1118'. [ 226.339994][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 226.369727][T10200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1118'. [ 226.741831][T10219] validate_nla: 1 callbacks suppressed [ 226.741851][T10219] netlink: 'syz.1.1125': attribute type 32 has an invalid length. [ 226.874636][T10219] bond3: option coupled_control: invalid value (3) [ 226.900653][T10219] bond3 (unregistering): Released all slaves [ 226.954924][T10225] syzkaller0: entered promiscuous mode [ 226.963004][T10225] syzkaller0: entered allmulticast mode [ 227.259260][T10237] syzkaller0: entered promiscuous mode [ 227.281018][T10237] syzkaller0: entered allmulticast mode [ 227.670229][T10254] netlink: 'syz.3.1139': attribute type 21 has an invalid length. [ 228.027965][T10272] netlink: 'syz.1.1144': attribute type 7 has an invalid length. [ 228.036468][T10272] netlink: 'syz.1.1144': attribute type 7 has an invalid length. [ 228.256858][T10284] netlink: 'syz.4.1146': attribute type 3 has an invalid length. [ 228.592643][T10295] netlink: 'syz.0.1150': attribute type 4 has an invalid length. [ 228.647401][T10291] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 228.664289][T10291] bond5 (unregistering): Released all slaves [ 228.693722][T10295] .`: renamed from bond0 (while UP) [ 230.462028][ T10] IPVS: starting estimator thread 0... [ 230.467807][T10370] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20001 [ 230.486902][T10374] openvswitch: netlink: Invalid VLAN frame [ 230.505118][T10374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.580026][T10373] IPVS: using max 27 ests per chain, 64800 per kthread [ 230.926660][T10390] netlink: 'syz.1.1179': attribute type 4 has an invalid length. [ 230.973338][T10389] netlink: 'syz.1.1179': attribute type 4 has an invalid length. [ 230.998189][T10392] __nla_validate_parse: 45 callbacks suppressed [ 230.998210][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 231.016081][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1180'. [ 231.371867][T10405] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1187'. [ 231.396938][T10405] 8021q: VLANs not supported on ip6tnl0 [ 231.633754][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'. [ 231.747259][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 231.762647][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1192'. [ 231.775945][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 231.785510][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'. [ 231.813442][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 231.816758][T10424] bond3 (unregistering): Released all slaves [ 232.120145][T10447] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 232.281283][T10459] netlink: 'syz.1.1202': attribute type 24 has an invalid length. [ 232.354531][T10459] syzkaller1: entered promiscuous mode [ 232.361872][T10459] syzkaller1: entered allmulticast mode [ 232.439788][T10467] netlink: 792 bytes leftover after parsing attributes in process `syz.3.1204'. [ 232.725444][T10480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.353874][T10524] xt_bpf: check failed: parse error [ 233.774783][T10545] netlink: 'syz.0.1228': attribute type 13 has an invalid length. [ 233.804770][T10545] gretap0: refused to change device tx_queue_len [ 233.818948][T10545] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.237850][T10564] tipc: MTU too low for tipc bearer [ 234.946241][T10593] tc_dump_action: action bad kind [ 236.022164][T10624] __nla_validate_parse: 16 callbacks suppressed [ 236.022182][T10624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1250'. [ 236.283195][T10657] netlink: 'syz.1.1258': attribute type 4 has an invalid length. [ 236.371695][T10652] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1257'. [ 236.596819][ T993] IPVS: starting estimator thread 0... [ 236.708569][T10684] IPVS: using max 27 ests per chain, 64800 per kthread [ 236.804217][T10687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1266'. [ 239.218975][T10662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.440014][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'. [ 239.716291][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 239.763188][T10746] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 239.836862][T10752] xt_TCPMSS: Only works on TCP SYN packets [ 239.848985][T10754] xt_TCPMSS: Only works on TCP SYN packets [ 240.002332][T10749] bond0: (slave bridge5): Enslaving as a backup interface with an up link [ 240.056827][T10758] macvlan2: entered promiscuous mode [ 240.063796][T10758] macvlan2: entered allmulticast mode [ 240.071610][T10758] bond0: entered promiscuous mode [ 240.080074][T10758] bridge5: entered promiscuous mode [ 240.088154][T10758] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 240.100126][T10758] bond0: left promiscuous mode [ 240.108377][T10758] bridge5: left promiscuous mode [ 240.151434][T10767] ip6erspan1: entered allmulticast mode [ 240.306725][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1294'. [ 240.321845][T10780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1294'. [ 240.336252][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 240.354808][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 240.511355][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 240.589374][T10798] sctp: [Deprecated]: syz.3.1297 (pid 10798) Use of int in maxseg socket option. [ 240.589374][T10798] Use struct sctp_assoc_value instead [ 240.832259][T10810] netlink: 'syz.4.1300': attribute type 1 has an invalid length. [ 240.935077][T10820] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 240.957558][T10820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.968168][T10810] bond6: entered promiscuous mode [ 240.990646][T10810] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.034696][T10825] __nla_validate_parse: 4 callbacks suppressed [ 241.034718][T10825] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1301'. [ 241.055621][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 241.173641][T10831] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.196101][T10831] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 241.210588][T10831] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 241.228861][T10831] bond6: (slave vti0): making interface the new active one [ 241.236409][T10831] vti0: entered promiscuous mode [ 241.244366][T10831] bond6: (slave vti0): Enslaving as an active interface with an up link [ 241.481718][T10849] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1310'. [ 241.528229][T10849] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1310'. [ 241.538379][T10852] openvswitch: netlink: IP tunnel dst address not specified [ 241.816517][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 241.950673][T10877] netlink: 'syz.1.1317': attribute type 21 has an invalid length. [ 241.964911][T10872] ip6tnl2: entered promiscuous mode [ 241.975820][T10877] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.997991][T10877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.005436][T10877] IPv6: NLM_F_CREATE should be set when creating new route [ 242.012824][T10877] IPv6: NLM_F_CREATE should be set when creating new route [ 242.020141][T10877] IPv6: NLM_F_CREATE should be set when creating new route [ 242.360063][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 242.390091][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'. [ 242.462488][T10887] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 242.568077][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1323'. [ 242.891325][T10887] bond0 (unregistering): Released all slaves [ 242.958081][T10899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1322'. [ 243.088066][T10908] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1324'. [ 243.122052][T10913] netlink: 'syz.2.1326': attribute type 4 has an invalid length. [ 243.306204][T10913] netlink: 'syz.2.1326': attribute type 28 has an invalid length. [ 243.346164][T10925] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 243.536060][T10925] 8021q: adding VLAN 0 to HW filter on device bond5 [ 243.603143][T10928] macvlan2: entered promiscuous mode [ 243.624510][T10928] macvlan2: entered allmulticast mode [ 243.704364][T10935] bond5: (slave ip6gretap1): making interface the new active one [ 243.721891][T10935] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 243.992764][T10958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.130428][T10965] netlink: 'syz.2.1342': attribute type 3 has an invalid length. [ 244.235869][T10967] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.245198][T10970] IPVS: Error connecting to the multicast addr [ 244.268596][T10971] macvlan3: entered promiscuous mode [ 244.279655][T10971] macvlan3: entered allmulticast mode [ 244.286512][T10971] bond6: entered promiscuous mode [ 244.293415][T10971] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 244.301506][T10971] bond6: left promiscuous mode [ 244.654605][T10989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.767488][T10993] dummy0: entered promiscuous mode [ 245.241999][T11013] netlink: 'syz.1.1359': attribute type 4 has an invalid length. [ 245.503501][T11028] xt_socket: unknown flags 0x50 [ 245.640123][T11031] syzkaller0: entered promiscuous mode [ 245.646395][T11031] syzkaller0: entered allmulticast mode [ 245.662730][T11032] lo: entered allmulticast mode [ 245.757566][T11032] lo: left allmulticast mode [ 246.115641][T11060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.531753][T11076] tipc: Enabled bearer , priority 0 [ 246.624658][T11086] netlink: 'syz.4.1382': attribute type 10 has an invalid length. [ 246.650272][T11086] __nla_validate_parse: 14 callbacks suppressed [ 246.650291][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 246.727135][T11076] syzkaller0: entered promiscuous mode [ 246.734169][T11076] syzkaller0: entered allmulticast mode [ 246.743072][T11076] tipc: Resetting bearer [ 246.775180][T11075] tipc: Resetting bearer [ 246.842322][T11091] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1384'. [ 246.973750][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1381'. [ 248.804245][T11075] tipc: Disabling bearer [ 248.816785][T11086] tipc: Enabled bearer , priority 0 [ 248.824457][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 248.834115][T11090] syzkaller0: entered promiscuous mode [ 248.839723][T11090] syzkaller0: entered allmulticast mode [ 248.857047][T11094] tipc: Resetting bearer [ 248.865651][T11080] tipc: Resetting bearer [ 248.911554][T11080] tipc: Disabling bearer [ 249.763636][T11147] syzkaller1: entered promiscuous mode [ 249.790908][T11147] syzkaller1: entered allmulticast mode [ 249.827873][T11158] netlink: 'syz.1.1401': attribute type 29 has an invalid length. [ 249.846777][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 249.866669][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 249.867118][T11150] netlink: 'syz.0.1398': attribute type 58 has an invalid length. [ 249.916905][T11150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1398'. [ 250.047925][T11162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1403'. [ 250.075479][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 250.090412][T11165] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 250.221474][T11173] netlink: 'syz.3.1408': attribute type 33 has an invalid length. [ 250.285595][T11181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1409'. [ 250.532891][T11191] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 250.594361][T11191] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 250.714183][T11206] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 251.326544][T11232] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 251.341235][T11236] netlink: 'syz.2.1424': attribute type 6 has an invalid length. [ 251.370446][T11232] bond3 (unregistering): Released all slaves [ 251.687274][T11251] vcan0 (unregistering): left allmulticast mode [ 251.716427][T11253] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 251.864250][T11267] netlink: 'syz.2.1434': attribute type 10 has an invalid length. [ 252.005792][T11276] __nla_validate_parse: 5 callbacks suppressed [ 252.005810][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 252.024752][T11275] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1437'. [ 252.080660][T11276] syzkaller0: entered promiscuous mode [ 252.095848][T11276] syzkaller0: entered allmulticast mode [ 252.205639][T11283] syzkaller1: entered promiscuous mode [ 252.221739][T11283] syzkaller1: entered allmulticast mode [ 252.635784][T11304] netlink: 'syz.4.1448': attribute type 10 has an invalid length. [ 252.652298][T11301] ip6gre1: entered promiscuous mode [ 252.661269][T11304] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1448'. [ 252.677733][T11301] ip6gre1: entered allmulticast mode [ 252.974358][T11324] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 252.996512][T11316] bond2: (slave bond_slave_1): Device is not bonding slave [ 253.004223][T11316] bond2: option active_slave: invalid value (bond_slave_1) [ 253.021673][T11316] bond2 (unregistering): Released all slaves [ 253.053632][T11329] Bluetooth: MGMT ver 1.23 [ 253.061347][T11319] netlink: 'syz.4.1453': attribute type 2 has an invalid length. [ 253.073271][T11319] netlink: 'syz.4.1453': attribute type 11 has an invalid length. [ 253.099978][T11319] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1453'. [ 253.165998][T11332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.521819][T11345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1460'. [ 253.537202][T11345] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 253.560709][T11347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.576014][T11350] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 253.591661][T11347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.660851][T11347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.667937][T11347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.687734][T11347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.710540][T11347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.726543][T11347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.736400][T11347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.743971][T11348] bond3 (unregistering): Released all slaves [ 253.772742][T11347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.780975][T11347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.920319][T11348] bond3 (unregistering): Released all slaves [ 254.210477][T11348] bond3 (unregistering): Released all slaves [ 254.225929][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1472'. [ 254.282229][T11389] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1472'. [ 254.450256][T11348] bond3 (unregistering): Released all slaves [ 254.614774][T11405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1477'. [ 254.904803][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 254.921602][T11408] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1477'. [ 254.934030][T11408] nbd: device at index 64 is going down [ 255.194601][ T7746] udevd[7746]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 255.208224][T11426] IPVS: Error connecting to the multicast addr [ 255.224131][ T9723] udevd[9723]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 255.242665][T11430] netlink: 'syz.3.1484': attribute type 21 has an invalid length. [ 255.336831][T11430] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 255.530742][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.676367][T11444] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 255.772026][T11453] syzkaller0: entered promiscuous mode [ 255.791001][T11453] syzkaller0: entered allmulticast mode [ 255.975614][T11472] netlink: 'syz.0.1498': attribute type 10 has an invalid length. [ 256.129259][T11483] netlink: 'syz.3.1499': attribute type 7 has an invalid length. [ 256.255849][ T1110] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.272405][ T1110] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.281234][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.533170][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.790975][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 257.021329][T11527] __nla_validate_parse: 12 callbacks suppressed [ 257.021349][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1514'. [ 257.043041][T11521] lo speed is unknown, defaulting to 1000 [ 257.071099][T11528] validate_nla: 1 callbacks suppressed [ 257.071131][T11528] netlink: 'syz.4.1513': attribute type 75 has an invalid length. [ 257.520982][T11549] netlink: 'syz.2.1521': attribute type 1 has an invalid length. [ 257.599617][T11554] ip6erspan0: entered allmulticast mode [ 257.957361][T11570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1526'. [ 258.202671][T11578] bond2: Unable to set up delay as MII monitoring is disabled [ 258.227414][T11578] bond2 (unregistering): Released all slaves [ 258.302939][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1530'. [ 258.505828][T11595] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 258.762537][T11595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.772184][T11601] ip_vti0: entered promiscuous mode [ 258.846169][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 258.857219][T11605] syz.4.1535 (11605) used obsolete PPPIOCDETACH ioctl [ 259.348558][T11631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 259.677791][T11646] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1549'. [ 259.693904][T11646] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 259.703922][T11643] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1548'. [ 259.948169][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1550'. [ 260.048209][T11621] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 260.220451][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 260.239206][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 260.410328][T11679] syzkaller0: entered promiscuous mode [ 260.431206][T11679] syzkaller0: entered allmulticast mode [ 260.488618][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 261.065139][T11715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.106059][T11729] 8021q: VLANs not supported on lo [ 261.593933][T11746] netlink: 'syz.1.1578': attribute type 9 has an invalid length. [ 261.815220][T11757] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 261.853803][T11757] tipc: Enabled bearer , priority 0 [ 261.881410][T11757] syzkaller0: entered promiscuous mode [ 261.907532][T11757] syzkaller0: entered allmulticast mode [ 261.941853][T11765] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.971881][T11757] tipc: Resetting bearer [ 262.044433][T11752] tipc: Resetting bearer [ 262.109432][T11752] tipc: Disabling bearer [ 262.378902][T11791] __nla_validate_parse: 5 callbacks suppressed [ 262.378920][T11791] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1593'. [ 262.425318][T11791] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1593'. [ 262.583358][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1596'. [ 262.825823][T11816] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1601'. [ 262.836764][T11816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1601'. [ 262.885875][T11815] syzkaller0: entered promiscuous mode [ 262.899158][T11815] syzkaller0: entered allmulticast mode [ 263.298717][T11837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1608'. [ 263.321766][T11838] xt_l2tp: invalid flags combination: 0 [ 263.564411][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 263.657432][T11853] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1614'. [ 263.689505][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1614'. [ 263.885994][T11859] netlink: 'syz.1.1616': attribute type 13 has an invalid length. [ 263.911270][T11859] netlink: 'syz.1.1616': attribute type 58 has an invalid length. [ 263.945460][T11859] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1616'. [ 264.007606][T11861] netlink: 'syz.4.1617': attribute type 4 has an invalid length. [ 264.220583][T11865] bond7 (unregistering): Released all slaves [ 264.561234][T11890] block nbd0: Unsupported socket: should be TCP or UNIX. [ 264.859555][T11908] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 264.904032][T11908] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.960823][T11908] bond7: (slave geneve2): making interface the new active one [ 264.994518][T11908] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 265.076228][T11908] syzkaller1: entered promiscuous mode [ 265.095402][T11908] syzkaller1: entered allmulticast mode [ 265.467776][T11928] xt_hashlimit: size too large, truncated to 1048576 [ 266.212919][T11965] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 266.227093][T11963] vlan2: entered allmulticast mode [ 266.240914][T11963] bond0: entered allmulticast mode [ 266.278605][T11963] bridge5: entered allmulticast mode [ 267.185340][T12014] netlink: 'syz.3.1664': attribute type 1 has an invalid length. [ 267.228223][T12017] syzkaller1: entered promiscuous mode [ 267.236918][T12017] syzkaller1: entered allmulticast mode [ 267.356503][T12027] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 267.790277][T12050] __nla_validate_parse: 12 callbacks suppressed [ 267.790296][T12050] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1673'. [ 267.895573][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 267.908240][T12053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.960495][T12053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.003973][T12061] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1676'. [ 268.014334][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 268.399211][T12078] tipc: Resetting bearer [ 268.533602][T12086] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1684'. [ 268.557417][T12089] sctp: [Deprecated]: syz.3.1685 (pid 12089) Use of int in max_burst socket option. [ 268.557417][T12089] Use struct sctp_assoc_value instead [ 268.671053][T12093] tipc: New replicast peer: 255.255.255.255 [ 268.694037][T12093] tipc: Enabled bearer , priority 10 [ 268.781907][T12101] openvswitch: netlink: IP tunnel dst address not specified [ 268.796957][T12101] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.113112][T12119] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 269.487744][T12142] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1698'. [ 269.524105][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 269.561368][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1699'. [ 269.618704][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 269.976251][T12169] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 270.038331][T12175] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 270.072108][T12175] netlink: 'syz.3.1707': attribute type 28 has an invalid length. [ 270.091787][T12175] netlink: 'syz.3.1707': attribute type 3 has an invalid length. [ 270.110548][T12175] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1707'. [ 270.299860][T12189] openvswitch: netlink: Multiple metadata blocks provided [ 270.499894][T12204] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 270.757958][T12214] IPv6: sit2: Disabled Multicast RS [ 271.041500][T12232] netlink: 'syz.2.1726': attribute type 1 has an invalid length. [ 271.059662][T12230] syzkaller1: entered promiscuous mode [ 271.070780][T12232] netlink: 'syz.2.1726': attribute type 1 has an invalid length. [ 271.082617][T12230] syzkaller1: entered allmulticast mode [ 271.225194][T12236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1727'. [ 271.410070][T12253] netlink: zone id is out of range [ 271.423816][T12253] netlink: zone id is out of range [ 271.442137][T12253] netlink: zone id is out of range [ 271.454910][T12253] netlink: zone id is out of range [ 271.469369][T12253] netlink: zone id is out of range [ 271.480982][T12253] netlink: zone id is out of range [ 271.492772][T12253] netlink: zone id is out of range [ 271.499475][T12253] netlink: set zone limit has 4 unknown bytes [ 271.659701][T12258] netlink: 'syz.4.1733': attribute type 15 has an invalid length. [ 271.719661][T12258] netlink: 'syz.4.1733': attribute type 15 has an invalid length. [ 271.728198][ T6851] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 271.757934][ T6851] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 271.791907][ T6851] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 271.832151][ T6851] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 272.885666][T12332] __nla_validate_parse: 11 callbacks suppressed [ 272.885686][T12332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'. [ 273.107521][T12342] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 273.190687][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 273.226396][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 273.283876][T12348] Cannot find del_set index 4 as target [ 273.304465][T12348] x_tables: duplicate underflow at hook 1 [ 273.333215][T12350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1762'. [ 273.423603][T12363] netlink: 'syz.0.1767': attribute type 10 has an invalid length. [ 273.527527][T12367] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1768'. [ 273.550024][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1768'. [ 273.774149][T12377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1771'. [ 273.838340][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 273.970716][T12385] syzkaller0: entered promiscuous mode [ 273.978774][T12385] syzkaller0: entered allmulticast mode [ 273.991012][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1775'. [ 274.015826][T12394] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 274.487983][T12418] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1780'. [ 274.754504][T12427] bridge4: entered promiscuous mode [ 274.769616][T12427] bridge4: entered allmulticast mode [ 275.046933][T12446] sock: sock_set_timeout: `syz.4.1790' (pid 12446) tries to set negative timeout [ 275.073265][T12450] netlink: zone id is out of range [ 275.156166][T12452] netlink: 'syz.0.1791': attribute type 30 has an invalid length. [ 275.370823][T12452] bond8: option arp_missed_max: invalid value (0) [ 275.392586][T12472] netlink: 'syz.4.1796': attribute type 1 has an invalid length. [ 275.408712][T12452] bond8: option arp_missed_max: allowed values 1 - 255 [ 275.674650][T12452] bond8 (unregistering): Released all slaves [ 275.834752][T12472] bond9: entered promiscuous mode [ 275.841444][T12472] bond9: entered allmulticast mode [ 275.847093][T12472] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.005530][T12495] xt_CT: No such helper "syz1" [ 276.080960][T12465] syzkaller0: entered promiscuous mode [ 276.105929][T12465] syzkaller0: entered allmulticast mode [ 276.467998][T12527] Bluetooth: MGMT ver 1.23 [ 277.666964][T12535] netlink: 'syz.4.1810': attribute type 15 has an invalid length. [ 277.927593][T12517] __nla_validate_parse: 5 callbacks suppressed [ 277.927619][T12517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1805'. [ 278.060441][T12538] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1811'. [ 278.106192][ T57] netdevsim netdevsim4 netdevsim0: set [0, 2] type 1 family 0 port 256 - 0 [ 278.115563][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 278.125283][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'. [ 278.129834][ T57] netdevsim netdevsim4 netdevsim1: set [0, 2] type 1 family 0 port 256 - 0 [ 278.168628][T12535] netlink: 'syz.4.1810': attribute type 15 has an invalid length. [ 278.168956][ T57] netdevsim netdevsim4 netdevsim2: set [0, 2] type 1 family 0 port 256 - 0 [ 278.289848][ T57] netdevsim netdevsim4 netdevsim3: set [0, 2] type 1 family 0 port 256 - 0 [ 278.407504][T12543] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 278.649970][T12561] bond10: entered promiscuous mode [ 278.667204][T12561] bond10: entered allmulticast mode [ 278.680069][T12561] 8021q: adding VLAN 0 to HW filter on device bond10 [ 278.746401][T12565] netlink: 'syz.2.1820': attribute type 11 has an invalid length. [ 278.834733][T12569] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1821'. [ 279.011665][T12584] netlink: 'syz.3.1825': attribute type 4 has an invalid length. [ 279.192489][T12594] sctp: [Deprecated]: syz.0.1827 (pid 12594) Use of int in maxseg socket option. [ 279.192489][T12594] Use struct sctp_assoc_value instead [ 279.245337][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 279.302003][T12602] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 279.335524][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 279.598015][T12621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1832'. [ 279.635490][T12611] lo speed is unknown, defaulting to 1000 [ 279.815918][T12624] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1835'. [ 279.838121][T12624] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.854586][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1836'. [ 280.055783][T12628] hsr_slave_0 (unregistering): left promiscuous mode [ 280.660071][T12657] nbd1: detected capacity change from 0 to 63 [ 280.686432][T12668] block nbd1: NBD_DISCONNECT [ 280.713819][T12668] block nbd1: Disconnected due to user request. [ 280.730802][T12668] block nbd1: shutting down sockets [ 280.747570][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.756953][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 280.764880][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.773993][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 280.781886][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.791014][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 280.798888][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.807965][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 280.821113][ T7939] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.832902][ T7939] Buffer I/O error on dev nbd1, logical block 0, async page read [ 280.847920][ T7939] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.857529][ T7939] Buffer I/O error on dev nbd1, logical block 1, async page read [ 280.880241][ T7939] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.919591][ T7939] Buffer I/O error on dev nbd1, logical block 2, async page read [ 280.968162][ T7939] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.999756][ T7939] Buffer I/O error on dev nbd1, logical block 3, async page read [ 281.020482][ T7939] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.058211][ T7939] Buffer I/O error on dev nbd1, logical block 0, async page read [ 281.109425][ T7939] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.145246][ T7939] Buffer I/O error on dev nbd1, logical block 1, async page read [ 281.203867][ T7939] ldm_validate_partition_table(): Disk read failed. [ 281.253706][ T7939] Dev nbd1: unable to read RDB block 0 [ 281.302294][ T7939] nbd1: unable to read partition table [ 281.358088][ T7939] ldm_validate_partition_table(): Disk read failed. [ 281.385091][ T7939] Dev nbd1: unable to read RDB block 0 [ 281.425435][ T7939] nbd1: unable to read partition table [ 281.527139][T12701] tipc: Started in network mode [ 281.553171][T12701] tipc: Node identity 4, cluster identity 4711 [ 281.579813][T12701] tipc: Node number set to 4 [ 281.960061][T12721] IPv6: NLM_F_REPLACE set, but no existing node found! [ 283.119633][T12731] __nla_validate_parse: 4 callbacks suppressed [ 283.119655][T12731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1863'. [ 283.348750][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 283.391347][T12760] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1871'. [ 283.419882][T12760] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1871'. [ 283.454342][T12760] netlink: 'syz.4.1871': attribute type 5 has an invalid length. [ 283.483671][T12760] netlink: 'syz.4.1871': attribute type 6 has an invalid length. [ 283.519396][T12760] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1871'. [ 283.577822][T12764] : entered promiscuous mode [ 283.934153][T12789] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 284.701434][T12836] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 284.716143][T12836] netlink: 'syz.3.1888': attribute type 2 has an invalid length. [ 284.727840][T12836] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 284.737852][T12836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1888'. [ 284.906314][T12847] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1892'. [ 284.936939][T12844] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1891'. [ 284.976607][T12844] 8021q: VLANs not supported on sit0 [ 284.997857][T12851] netlink: 'syz.3.1891': attribute type 22 has an invalid length. [ 285.010633][T12853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1894'. [ 285.027066][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 285.047760][T12853] netlink: 'syz.0.1894': attribute type 7 has an invalid length. [ 285.151412][T12859] netlink: 'syz.1.1895': attribute type 1 has an invalid length. [ 285.463783][T12872] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 285.503780][T12872] bond3 (unregistering): Released all slaves [ 285.562021][T12882] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 285.590315][T12882] bond5 (unregistering): Released all slaves [ 285.969991][T12903] netlink: 'syz.0.1907': attribute type 39 has an invalid length. [ 286.067347][T12915] batadv_slave_1: entered promiscuous mode [ 286.128254][T12905] batadv_slave_1: left promiscuous mode [ 287.382413][T12974] geneve3: entered promiscuous mode [ 287.421098][T12974] geneve3: entered allmulticast mode [ 287.528632][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 287.702861][T12991] net_ratelimit: 142 callbacks suppressed [ 287.702887][T12991] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 288.224052][T13017] openvswitch: netlink: Tunnel attr 330 out of range max 16 [ 288.253948][T13017] __nla_validate_parse: 12 callbacks suppressed [ 288.253969][T13017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1939'. [ 288.305820][T13017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1939'. [ 288.565970][T13030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1944'. [ 288.811457][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1948'. [ 288.824221][T13046] syzkaller0: entered promiscuous mode [ 288.839327][T13046] syzkaller0: entered allmulticast mode [ 288.845118][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'. [ 289.587205][T13078] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1959'. [ 289.634911][T13081] netlink: 'syz.1.1961': attribute type 12 has an invalid length. [ 289.667784][T13081] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1961'. [ 289.721522][T13090] netlink: 'syz.2.1962': attribute type 4 has an invalid length. [ 289.747054][T13088] netlink: 'syz.1.1961': attribute type 33 has an invalid length. [ 289.854433][T13102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.211237][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 290.251926][T13122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1971'. [ 290.430885][T13132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1974'. [ 290.618291][T13140] xt_hashlimit: size too large, truncated to 1048576 [ 290.871184][T13160] x_tables: duplicate underflow at hook 1 [ 291.079701][T13169] netlink: 'syz.2.1985': attribute type 2 has an invalid length. [ 291.174826][T13174] netlink: 'syz.0.1986': attribute type 12 has an invalid length. [ 291.193174][T13177] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 291.225856][T13174] netlink: 'syz.0.1986': attribute type 2 has an invalid length. [ 291.334144][T13183] pimreg: entered allmulticast mode [ 291.399162][T13189] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 291.553794][T13194] netlink: 'syz.1.1993': attribute type 21 has an invalid length. [ 291.596327][T13201] netlink: 'syz.2.1996': attribute type 32 has an invalid length. [ 291.733366][T13201] bond3: Setting coupled_control to off (0) [ 291.931889][T13218] pim6reg: entered allmulticast mode [ 291.957059][T13218] pim6reg: left allmulticast mode [ 292.583860][T13260] netlink: 'syz.4.2013': attribute type 29 has an invalid length. [ 292.761304][T13268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.236442][T13307] 8021q: adding VLAN 0 to HW filter on device .` [ 293.288152][T13307] dummy0: left promiscuous mode [ 293.375240][T13307] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 293.483448][T13315] syzkaller0: entered promiscuous mode [ 293.504225][T13315] syzkaller0: entered allmulticast mode [ 293.669630][T13334] __nla_validate_parse: 48 callbacks suppressed [ 293.669648][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 293.688388][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 293.707066][T13313] syzkaller0: entered promiscuous mode [ 293.713137][T13313] syzkaller0: entered allmulticast mode [ 293.775844][T13334] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2035'. [ 294.037833][T13347] openvswitch: netlink: Missing valid actions attribute. [ 294.054396][T13347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.598685][T13342] netem: change failed [ 295.715046][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 295.792236][T13362] vlan2: entered allmulticast mode [ 295.818265][T13362] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 296.071259][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 296.142941][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 296.159253][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 296.226761][T13398] validate_nla: 3 callbacks suppressed [ 296.226780][T13398] netlink: 'syz.0.2050': attribute type 10 has an invalid length. [ 296.245622][T13379] 8021q: adding VLAN 0 to HW filter on device bond8 [ 296.274481][ T186] bond0: (slave bridge5): link status up again after 0 ms [ 296.292898][ T186] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 296.304898][T13393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.316188][T13393] bond8: (slave bond0): making interface the new active one [ 296.335664][T13393] bond8: (slave bond0): Enslaving as an active interface with an up link [ 296.340590][ T186] bond0: (slave bridge5): link status up again after 0 ms [ 296.378644][ T186] bond0: (slave bridge5): link status up again after 0 ms [ 296.388697][T13403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2057'. [ 296.408553][ T1110] bond0: (slave bridge5): link status up again after 0 ms [ 296.432636][T13398] .`: (slave bridge0): Enslaving as an active interface with an up link [ 296.451098][ T1110] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 296.474474][ T1110] bond0: (slave bridge5): link status up again after 0 ms [ 296.672814][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 296.705005][T13416] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2060'. [ 296.743989][T13418] x_tables: duplicate underflow at hook 1 [ 297.555050][T13476] ip6t_srh: unknown srh match flags 4000 [ 297.576976][T13479] netlink: 'syz.3.2076': attribute type 3 has an invalid length. [ 297.613067][T13481] netlink: 'syz.2.2077': attribute type 1 has an invalid length. [ 297.815429][T13493] tipc: Enabling of bearer rejected, failed to enable media [ 298.021889][T13504] syzkaller0: entered promiscuous mode [ 298.044293][T13504] syzkaller0: entered allmulticast mode [ 298.191042][T13523] netlink: 'syz.3.2088': attribute type 1 has an invalid length. [ 298.314079][T13523] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 298.379666][ T1110] net_ratelimit: 12 callbacks suppressed [ 298.379688][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 298.548692][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 298.691414][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 298.795835][T13550] gtp0: entered promiscuous mode [ 298.810374][T13550] gtp0: entered allmulticast mode [ 298.850054][T13554] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 298.889570][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 299.010921][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 299.087185][T13565] __nla_validate_parse: 4 callbacks suppressed [ 299.087206][T13565] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2101'. [ 299.129445][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 299.130741][T13568] netlink: 'syz.4.2103': attribute type 24 has an invalid length. [ 299.194508][T13573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2104'. [ 299.237005][T13573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2104'. [ 299.289792][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 299.408706][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 299.516496][T13589] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 299.528665][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 299.641957][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 299.666078][T13597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2113'. [ 299.798793][T13600] bond0: option ad_select: unable to set because the bond device is up [ 299.898785][T13605] netlink: 'syz.3.2116': attribute type 1 has an invalid length. [ 299.927025][T13609] team0: Mode changed to "loadbalance" [ 299.969707][T13609] netlink: 'syz.4.2117': attribute type 1 has an invalid length. [ 300.050016][T13610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2117'. [ 300.421674][T13616] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2119'. [ 300.464853][T13616] syzkaller0: entered promiscuous mode [ 300.497785][T13616] syzkaller0: entered allmulticast mode [ 300.554614][T13623] nbd: couldn't find a device at index 1048580 [ 300.576333][T13624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2123'. [ 300.588061][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2122'. [ 300.613311][T13623] netlink: 'syz.3.2122': attribute type 21 has an invalid length. [ 300.621617][T13623] netlink: 'syz.3.2122': attribute type 22 has an invalid length. [ 300.632090][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2122'. [ 300.644047][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 300.670835][T13629] syz_tun: left allmulticast mode [ 300.680603][T13629] bridge0: port 1(syz_tun) entered disabled state [ 301.978356][T13698] gretap1: entered promiscuous mode [ 302.000011][T13698] batman_adv: batadv0: Adding interface: gretap1 [ 302.016022][T13698] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 302.045029][T13698] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 302.395838][T13729] validate_nla: 5 callbacks suppressed [ 302.395857][T13729] netlink: 'syz.3.2154': attribute type 2 has an invalid length. [ 302.418579][T13729] netlink: 'syz.3.2154': attribute type 2 has an invalid length. [ 303.235345][T13782] netlink: 'syz.0.2169': attribute type 7 has an invalid length. [ 303.264420][T13782] erspan0: entered promiscuous mode [ 303.272291][T13782] erspan0: left promiscuous mode [ 303.448577][ T1110] net_ratelimit: 33 callbacks suppressed [ 303.448597][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 303.578609][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 303.688818][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 303.798654][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 303.908615][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 304.018819][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 304.128851][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 304.238737][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 304.348678][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 304.458681][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 308.548924][ T1114] net_ratelimit: 36 callbacks suppressed [ 308.548947][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 308.668950][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 308.779653][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 308.889372][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 308.998959][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 309.118781][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 309.238551][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 309.348642][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 309.458715][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 309.568699][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 313.638808][ T6843] net_ratelimit: 36 callbacks suppressed [ 313.638832][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 313.758779][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 313.868597][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 313.978938][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 314.089616][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 314.199444][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 314.308723][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 314.418760][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 314.528709][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 314.638774][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 318.738744][ T57] net_ratelimit: 36 callbacks suppressed [ 318.738766][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 318.858779][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 318.968869][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 319.078779][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 319.188546][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 319.298834][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 319.408708][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 319.518743][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 319.628703][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 319.738714][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 321.458908][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.808670][ T57] net_ratelimit: 36 callbacks suppressed [ 323.808694][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 323.928777][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 324.038781][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 324.148765][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 324.258551][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 324.368626][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 324.478775][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 324.588755][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 324.698676][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 324.808840][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 328.017128][T13831] lo: entered allmulticast mode [ 328.022938][T13829] lo: left allmulticast mode [ 328.469348][T13850] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 328.578875][T13851] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 328.602179][T13851] team0 (unregistering): Port device team_slave_0 removed [ 328.672773][T13851] team0 (unregistering): Failed to send options change via netlink (err -105) [ 328.716594][T13851] team0 (unregistering): Failed to send port change of device 26±ÿ via netlink (err -105) [ 328.728962][T13851] team0 (unregistering): Port device 26±ÿ removed [ 328.875585][ T6843] net_ratelimit: 32 callbacks suppressed [ 328.875605][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 329.054009][T13876] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 329.148692][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 329.272731][T13885] lo speed is unknown, defaulting to 1000 [ 329.273264][T13888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.280625][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 329.397284][T13895] __nla_validate_parse: 9 callbacks suppressed [ 329.397303][T13895] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2198'. [ 329.500960][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 329.551624][T13900] nbd: illegal input index 2958377 [ 329.612992][T13901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2200'. [ 329.708942][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 329.724455][T13905] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2202'. [ 329.833332][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 329.962446][T13921] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2206'. [ 330.008811][T13921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2206'. [ 330.043059][T13917] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 330.093626][T13917] bond3 (unregistering): Released all slaves [ 330.399879][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 330.434929][T13937] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 330.560037][T13938] gretap0: entered promiscuous mode [ 330.569842][T13940] netdevsim netdevsim3 : renamed from netdevsim0 [ 330.579935][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2209'. [ 330.607691][T13942] gretap0: left promiscuous mode [ 330.658675][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 330.785913][T13951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.991134][T13961] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2219'. [ 331.219607][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 331.658769][T13994] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2226'. [ 332.570562][T14035] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2241'. [ 332.606716][T14035] vlan0: entered promiscuous mode [ 333.053548][ T5626] block nbd1: Receive control failed (result -32) [ 333.140338][T14049] 8021q: adding VLAN 0 to HW filter on device bond6 [ 333.207577][T14049] bond6 (unregistering): Released all slaves [ 333.286207][T14068] tipc: Enabled bearer , priority 0 [ 333.301962][T14067] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 333.321254][T14067] raw_sendmsg: syz.4.2252 forgot to set AF_INET. Fix it! [ 333.386677][T14072] syzkaller1: entered promiscuous mode [ 333.393251][T14072] syzkaller1: entered allmulticast mode [ 333.864830][T14090] netlink: 'syz.1.2258': attribute type 29 has an invalid length. [ 333.926149][T14092] vlan3: entered allmulticast mode [ 333.938516][T14092] gretap0: entered allmulticast mode [ 333.971339][T14090] netlink: 'syz.1.2258': attribute type 29 has an invalid length. [ 333.998651][ T1110] net_ratelimit: 23 callbacks suppressed [ 333.998671][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 334.109734][T14066] tipc: Disabling bearer [ 334.259787][T14096] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 334.319565][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 334.402693][T14110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.422213][T14109] tipc: Enabling of bearer rejected, failed to enable media [ 334.432635][T14112] __nla_validate_parse: 7 callbacks suppressed [ 334.432655][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 334.478838][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 334.611838][ T186] bond0: (slave bridge5): failed to get link speed/duplex [ 334.781755][ T186] bond0: (slave bridge5): failed to get link speed/duplex [ 334.821275][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2269'. [ 334.837021][T14132] sctp: [Deprecated]: syz.3.2268 (pid 14132) Use of int in maxseg socket option. [ 334.837021][T14132] Use struct sctp_assoc_value instead [ 334.875399][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 334.905995][T14137] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2270'. [ 334.928506][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 335.058818][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 335.166828][T14153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2274'. [ 335.185139][T14150] netlink: 'syz.3.2275': attribute type 1 has an invalid length. [ 335.196242][T14150] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2275'. [ 335.205580][ T57] bond0: (slave bridge5): failed to get link speed/duplex [ 335.219185][T14153] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 335.282547][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 335.309285][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2276'. [ 335.332408][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 335.370490][T14162] netlink: 'syz.1.2276': attribute type 4 has an invalid length. [ 335.371461][T14160] x_tables: unsorted underflow at hook 3 [ 335.395677][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2276'. [ 335.422678][T14160] sctp: [Deprecated]: syz.0.2277 (pid 14160) Use of int in max_burst socket option. [ 335.422678][T14160] Use struct sctp_assoc_value instead [ 335.745517][ T30] audit: type=1800 audit(1777317383.121:3): pid=14176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2282" name="memory.events" dev="tmpfs" ino=2380 res=0 errno=0 [ 336.506626][T14218] netlink: 'syz.2.2297': attribute type 1 has an invalid length. [ 336.592224][T14218] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.415134][T14261] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 337.522126][T14259] netlink: 'syz.3.2309': attribute type 39 has an invalid length. [ 337.546956][T14261] bond13: entered promiscuous mode [ 337.556847][T14261] 8021q: adding VLAN 0 to HW filter on device bond13 [ 337.571616][T14259] hsr_slave_0: left promiscuous mode [ 337.582166][T14269] netlink: 'syz.1.2312': attribute type 1 has an invalid length. [ 337.590705][T14259] hsr_slave_1: left promiscuous mode [ 337.696129][T14269] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 337.763975][T14273] 8021q: adding VLAN 0 to HW filter on device bond14 [ 337.863683][T14278] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 338.165045][T14296] netlink: 'syz.0.2320': attribute type 1 has an invalid length. [ 338.408139][T14298] bond9: entered promiscuous mode [ 339.049143][ T6843] net_ratelimit: 29 callbacks suppressed [ 339.049167][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 339.198278][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 339.328536][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 339.470523][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 339.486801][T14341] __nla_validate_parse: 22 callbacks suppressed [ 339.486820][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 339.521158][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 339.816476][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 339.938759][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 340.003813][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2334'. [ 340.040352][T14354] bond5: entered promiscuous mode [ 340.045459][T14354] bond5: entered allmulticast mode [ 340.053610][T14354] netlink: 'syz.2.2334': attribute type 21 has an invalid length. [ 340.061764][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 340.075823][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2334'. [ 340.200862][T14354] bond6: option miimon: invalid value (18446744072098971653) [ 340.229668][T14354] bond6: option miimon: allowed values 0 - 2147483647 [ 340.265004][T14354] bond6 (unregistering): Released all slaves [ 340.350182][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 340.473551][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 340.489627][T14375] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2339'. [ 340.520832][T14371] Cannot find set identified by id 0 to match [ 340.611903][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 340.947091][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2349'. [ 340.959144][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2349'. [ 341.594172][T14437] : entered promiscuous mode [ 341.845631][T14453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'. [ 341.911640][T14458] netlink: 1744 bytes leftover after parsing attributes in process `syz.3.2364'. [ 342.020584][T14461] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2365'. [ 342.219986][T14468] bond6 (unregistering): Released all slaves [ 342.275281][T14477] IPv6: sit5: Disabled Multicast RS [ 342.375381][T14491] FAULT_INJECTION: forcing a failure. [ 342.375381][T14491] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 342.405779][T14491] CPU: 1 UID: 0 PID: 14491 Comm: syz.1.2374 Not tainted syzkaller #0 PREEMPT(full) [ 342.405807][T14491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.405828][T14491] Call Trace: [ 342.405840][T14491] [ 342.405848][T14491] dump_stack_lvl+0xe8/0x150 [ 342.405879][T14491] should_fail_ex+0x412/0x560 [ 342.405909][T14491] _copy_from_user+0x2d/0xb0 [ 342.405941][T14491] ___sys_sendmsg+0x1c6/0x360 [ 342.405966][T14491] ? __lock_acquire+0x6b5/0x2cf0 [ 342.405994][T14491] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.406027][T14491] ? kstrtouint+0x6e/0xe0 [ 342.406087][T14491] ? __fget_files+0x2a/0x420 [ 342.406112][T14491] ? __fget_files+0x3a0/0x420 [ 342.406148][T14491] __sys_sendmmsg+0x27c/0x4e0 [ 342.406220][T14491] ? __pfx___sys_sendmmsg+0x10/0x10 [ 342.406247][T14491] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 342.406302][T14491] ? ksys_write+0x242/0x270 [ 342.406336][T14491] ? __pfx_ksys_write+0x10/0x10 [ 342.406387][T14491] __x64_sys_sendmmsg+0xa0/0xc0 [ 342.406417][T14491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.406438][T14491] do_syscall_64+0x15f/0xf80 [ 342.406462][T14491] ? trace_irq_disable+0x3b/0x140 [ 342.406497][T14491] ? clear_bhb_loop+0x40/0x90 [ 342.406525][T14491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.406547][T14491] RIP: 0033:0x7ff5c0d9cdd9 [ 342.406568][T14491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.406587][T14491] RSP: 002b:00007ff5c1d12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 342.406611][T14491] RAX: ffffffffffffffda RBX: 00007ff5c1015fa0 RCX: 00007ff5c0d9cdd9 [ 342.406628][T14491] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 342.406643][T14491] RBP: 00007ff5c1d12090 R08: 0000000000000000 R09: 0000000000000000 [ 342.406657][T14491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.406669][T14491] R13: 00007ff5c1016038 R14: 00007ff5c1015fa0 R15: 00007fff940f24f8 [ 342.406703][T14491] [ 342.975365][T14504] can: request_module (can-proto-0) failed. [ 343.483806][T14531] 8021q: VLANs not supported on pim6reg [ 343.586409][T14540] netlink: 'syz.3.2390': attribute type 1 has an invalid length. [ 343.624054][T14542] team0: Unable to change to the same mode the team is in [ 344.201344][ T13] net_ratelimit: 21 callbacks suppressed [ 344.201365][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 344.225697][T14582] netlink: 'syz.0.2401': attribute type 1 has an invalid length. [ 344.535177][T14599] __nla_validate_parse: 5 callbacks suppressed [ 344.535196][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'. [ 344.619929][T14586] bond10: (slave bridge6): making interface the new active one [ 344.629759][T14586] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 344.681572][T14582] macvlan3: entered promiscuous mode [ 344.701400][T14582] macvlan3: entered allmulticast mode [ 344.709715][T14582] bond10: entered promiscuous mode [ 344.727342][T14582] bridge6: entered promiscuous mode [ 344.749668][T14582] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 344.763707][T14582] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 344.783276][T14582] bond10: left promiscuous mode [ 344.788198][T14582] bridge6: left promiscuous mode [ 344.833789][T14605] netlink: 'syz.2.2407': attribute type 28 has an invalid length. [ 344.842010][T14605] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 344.850097][T14605] netlink: 'syz.2.2407': attribute type 2 has an invalid length. [ 344.868988][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 345.000302][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 345.047432][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2408'. [ 345.070932][T14620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.127769][T14619] netlink: 1928 bytes leftover after parsing attributes in process `syz.1.2410'. [ 345.145159][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 345.271957][T14633] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 345.308007][T14633] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 345.318577][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 345.360953][T14633] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 345.379357][T14633] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 345.417804][T14633] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 345.428545][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 345.446696][T14638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2416'. [ 345.458074][T14633] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 345.484502][T14637] netlink: 'syz.4.2417': attribute type 1 has an invalid length. [ 345.487987][T14633] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 345.505162][T14633] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 345.513778][T14633] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 345.560863][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 345.562539][T14642] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2419'. [ 345.648805][T14642] netlink: 582 bytes leftover after parsing attributes in process `syz.3.2419'. [ 345.698674][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 345.728085][T14649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.886780][T14660] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2425'. [ 345.947988][T14666] ipt_REJECT: ECHOREPLY no longer supported. [ 345.954645][T14660] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2425'. [ 345.979615][T14664] ipt_REJECT: ECHOREPLY no longer supported. [ 346.186491][T14670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 346.821933][T14702] syzkaller0: entered promiscuous mode [ 346.832093][T14702] syzkaller0: entered allmulticast mode [ 349.047367][T14749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2449'. [ 349.282756][ T1110] net_ratelimit: 12 callbacks suppressed [ 349.282779][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 349.442261][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 349.580335][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 349.736034][T14781] __nla_validate_parse: 1 callbacks suppressed [ 349.736053][T14781] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2457'. [ 349.794709][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'. [ 349.809609][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 349.927077][T14786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2460'. [ 349.968580][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 350.089422][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 350.230228][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 350.368605][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 350.519470][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 350.605894][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'. [ 350.649552][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 350.705355][T14814] syzkaller1: entered promiscuous mode [ 350.722353][T14814] syzkaller1: entered allmulticast mode [ 350.812894][T14830] sctp: [Deprecated]: syz.1.2470 (pid 14830) Use of int in max_burst socket option deprecated. [ 350.812894][T14830] Use struct sctp_assoc_value instead [ 351.012604][ T30] audit: type=1804 audit(1777317398.391:4): pid=14842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2475" name="/newroot/512/cgroup.controllers" dev="tmpfs" ino=2625 res=1 errno=0 [ 351.043049][ T30] audit: type=1800 audit(1777317398.421:5): pid=14842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2475" name="cgroup.controllers" dev="tmpfs" ino=2625 res=0 errno=0 [ 351.121375][ T5626] block nbd2: Receive control failed (result -32) [ 351.204384][T14851] validate_nla: 31 callbacks suppressed [ 351.204405][T14851] netlink: 'syz.4.2477': attribute type 1 has an invalid length. [ 351.218597][T14851] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2477'. [ 351.227615][T14851] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2477'. [ 351.237060][T14851] netlink: 'syz.4.2477': attribute type 1 has an invalid length. [ 351.245252][T14851] netlink: 'syz.4.2477': attribute type 8 has an invalid length. [ 351.253688][T14851] netlink: 606 bytes leftover after parsing attributes in process `syz.4.2477'. [ 351.556311][T14868] xt_TCPMSS: Only works on TCP SYN packets [ 351.672179][T14874] bridge_slave_0: left allmulticast mode [ 351.703714][T14874] bridge_slave_0: left promiscuous mode [ 351.710703][T14874] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.731731][T14874] bridge_slave_1: left allmulticast mode [ 351.744445][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'. [ 351.754457][T14874] bridge_slave_1: left promiscuous mode [ 351.763120][T14874] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.782543][T14882] xt_cluster: node mask cannot exceed total number of nodes [ 351.811827][T14874] bond0: (slave bond_slave_0): Releasing backup interface [ 351.844589][T14874] bond0: (slave bond_slave_1): Releasing backup interface [ 351.872601][T14874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.885166][T14874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.938789][T14885] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2490'. [ 352.139854][T14893] xt_hashlimit: size too large, truncated to 1048576 [ 352.845273][T14924] netlink: 'syz.1.2503': attribute type 4 has an invalid length. [ 352.945678][T14926] xt_TCPMSS: Only works on TCP SYN packets [ 353.150385][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2508'. [ 353.590400][T14958] netlink: 'syz.2.2513': attribute type 9 has an invalid length. [ 353.991589][T14976] netlink: 'syz.1.2521': attribute type 1 has an invalid length. [ 354.203233][T14984] netlink: 'syz.3.2523': attribute type 9 has an invalid length. [ 354.239422][T14984] tc_dump_action: action bad kind [ 354.330299][ T1114] net_ratelimit: 26 callbacks suppressed [ 354.330321][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 354.374439][T14990] syzkaller0: entered promiscuous mode [ 354.387184][T14990] syzkaller0: entered allmulticast mode [ 354.538569][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 354.668718][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 354.764659][T14997] can: request_module (can-proto-0) failed. [ 354.788921][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 354.881217][T15005] __nla_validate_parse: 5 callbacks suppressed [ 354.881238][T15005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2528'. [ 354.908845][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 354.933325][T15009] netlink: 'syz.3.2528': attribute type 10 has an invalid length. [ 355.029517][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 355.164838][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 355.255742][T15029] netlink: 'syz.2.2532': attribute type 1 has an invalid length. [ 355.459561][T15029] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.525300][T15040] xt_cgroup: xt_cgroup: no path or classid specified [ 355.540882][T15031] bond6: (slave veth7): Enslaving as an active interface with a down link [ 355.551773][T15048] s5ÿÿø: renamed from vlan1 [ 355.580940][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2536'. [ 355.608878][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 355.696485][T15055] netlink: 'syz.2.2539': attribute type 11 has an invalid length. [ 355.711523][T15055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2539'. [ 355.741473][T15051] ipvlan1: entered promiscuous mode [ 355.789858][T15052] veth0: entered promiscuous mode [ 355.830199][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 355.922936][T15054] veth0: left promiscuous mode [ 355.978479][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 356.066659][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2543'. [ 356.147156][T15081] netlink: 776 bytes leftover after parsing attributes in process `syz.4.2544'. [ 356.205726][T15077] syzkaller0: entered promiscuous mode [ 356.217616][T15077] syzkaller0: entered allmulticast mode [ 356.384480][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'. [ 356.453281][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'. [ 356.855246][T15107] validate_nla: 4 callbacks suppressed [ 356.855268][T15107] netlink: 'syz.4.2551': attribute type 10 has an invalid length. [ 357.047082][T15124] xt_socket: unknown flags 0x8 [ 358.821933][T15107] batman_adv: batadv0: Interface deactivated: dummy0 [ 358.838194][T15107] batman_adv: batadv0: Removing interface: dummy0 [ 358.872047][T15107] team0: Port device dummy0 added [ 358.893529][T15140] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2560'. [ 358.911524][T15140] xt_ecn: cannot match TCP bits for non-tcp packets [ 358.985212][T15140] gtp1: entered promiscuous mode [ 359.004156][T15140] gtp1: entered allmulticast mode [ 359.150846][T15146] syzkaller0: entered promiscuous mode [ 359.159947][T15146] syzkaller0: entered allmulticast mode [ 359.207724][T15146] tipc: Enabled bearer , priority 0 [ 359.237337][T15152] netlink: 'syz.2.2565': attribute type 3 has an invalid length. [ 359.271924][T15144] tipc: Resetting bearer [ 359.277763][T15152] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 359.357036][T15144] tipc: Disabling bearer [ 359.438120][T15150] "syz.2.2565" (15150) uses obsolete ecb(arc4) skcipher [ 359.449423][ T13] net_ratelimit: 6 callbacks suppressed [ 359.449442][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 359.466127][T15159] sctp: [Deprecated]: syz.3.2568 (pid 15159) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.466127][T15159] Use struct sctp_sack_info instead [ 359.513006][T15159] sctp: [Deprecated]: syz.3.2568 (pid 15159) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.513006][T15159] Use struct sctp_sack_info instead [ 359.611824][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 359.645456][T15167] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 359.670415][T15171] netlink: 'syz.4.2571': attribute type 24 has an invalid length. [ 359.705685][T15174] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2573'. [ 359.720911][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 359.734739][T15169] netlink: 'syz.2.2572': attribute type 30 has an invalid length. [ 359.769882][T15176] netlink: 'syz.3.2574': attribute type 1 has an invalid length. [ 359.799532][T15181] netlink: 'syz.2.2572': attribute type 30 has an invalid length. [ 359.827265][T15185] x_tables: duplicate underflow at hook 1 [ 359.844737][T15176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.877498][T15176] bond3: option mode: unable to set because the bond device is up [ 359.889929][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 360.027601][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 360.148485][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 360.288552][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 360.450812][T15217] __nla_validate_parse: 3 callbacks suppressed [ 360.450832][T15217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2582'. [ 360.460448][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 360.518766][T15217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2582'. [ 360.577129][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 360.687590][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 360.710578][T15228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2582'. [ 360.778952][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2583'. [ 360.957869][T15225] tipc: Enabling of bearer rejected, failed to enable media [ 360.971608][T15230] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2584'. [ 360.978702][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 360.993151][T15230] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2584'. [ 361.133657][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 361.208945][T15243] syzkaller0: entered promiscuous mode [ 361.220436][T15243] syzkaller0: entered allmulticast mode [ 361.265599][T15243] simple: basic_1 [ 361.269126][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 361.273159][T15243] simple: basic_2 [ 361.281258][T15243] simple: basic_3 [ 361.284983][T15243] simple: basic_4 [ 361.288708][T15243] simple: basic_5 [ 361.292377][T15243] simple: basic_6 [ 361.296048][T15243] simple: basic_7 [ 361.299776][T15243] simple: basic_8 [ 361.303472][T15243] simple: basic_9 [ 361.307145][T15243] simple: basic_10 [ 361.310924][T15243] simple: basic_11 [ 361.314679][T15243] simple: basic_12 [ 361.318480][T15243] simple: basic_13 [ 361.322231][T15243] simple: basic_14 [ 361.325979][T15243] simple: basic_15 [ 361.329761][T15243] simple: basic_16 [ 361.333543][T15243] simple: basic_17 [ 361.812581][T15249] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2590'. [ 362.028662][T15260] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2595'. [ 362.079793][T15263] netlink: 'syz.0.2596': attribute type 7 has an invalid length. [ 363.324275][ T5626] block nbd5: Receive control failed (result -32) [ 363.421228][T15306] netlink: 'syz.3.2606': attribute type 1 has an invalid length. [ 363.616952][T15309] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 363.776764][T15328] netlink: 'syz.3.2612': attribute type 32 has an invalid length. [ 364.373091][T15331] netlink: 'syz.3.2612': attribute type 32 has an invalid length. [ 364.466892][T15369] netlink: 'syz.0.2622': attribute type 1 has an invalid length. [ 364.502400][ T1110] net_ratelimit: 26 callbacks suppressed [ 364.502434][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 364.605704][T15373] veth0_to_bond: entered allmulticast mode [ 364.699133][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 364.818529][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 364.971379][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 365.076707][T15398] netlink: 'syz.0.2630': attribute type 1 has an invalid length. [ 365.105744][T15398] netlink: 'syz.0.2630': attribute type 2 has an invalid length. [ 365.113850][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 365.139707][T15398] netlink: 'syz.0.2630': attribute type 2 has an invalid length. [ 365.168936][T15398] netlink: 'syz.0.2630': attribute type 2 has an invalid length. [ 365.259670][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 365.390351][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 365.510126][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 365.519987][T15417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.673527][T15424] netlink: 'syz.2.2635': attribute type 1 has an invalid length. [ 365.848771][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 365.856239][T15435] __nla_validate_parse: 15 callbacks suppressed [ 365.856258][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2636'. [ 365.882830][T15414] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2633'. [ 366.002257][T15438] 8021q: adding VLAN 0 to HW filter on device bond11 [ 366.111120][T15438] bond11: (slave veth0_to_bond): making interface the new active one [ 366.135633][T15438] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 366.157083][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2638'. [ 366.174125][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2638'. [ 366.403353][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2641'. [ 366.473331][T15468] netlink: 'syz.1.2643': attribute type 11 has an invalid length. [ 366.498145][T15467] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 366.782835][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2647'. [ 366.813540][T15477] 8021q: adding VLAN 0 to HW filter on device bond10 [ 366.830256][T15484] macsec1: entered promiscuous mode [ 366.835598][T15484] bridge0: entered promiscuous mode [ 366.844000][T15484] macsec1: entered allmulticast mode [ 366.850221][T15484] bridge0: entered allmulticast mode [ 366.856212][T15484] bridge0: port 1(macsec1) entered blocking state [ 366.863621][T15484] bridge0: port 1(macsec1) entered disabled state [ 366.864326][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2648'. [ 366.889334][T15478] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2647'. [ 366.916489][T15487] xt_hashlimit: size too large, truncated to 1048576 [ 366.924431][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2648'. [ 367.240538][T15484] bridge0: left allmulticast mode [ 367.245836][T15484] bridge0: left promiscuous mode [ 367.264718][T15483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2650'. [ 367.516626][T15511] validate_nla: 2 callbacks suppressed [ 367.516645][T15511] netlink: 'syz.1.2657': attribute type 1 has an invalid length. [ 367.578595][T15512] netlink: 'syz.1.2657': attribute type 1 has an invalid length. [ 368.048711][T15533] netlink: 'syz.3.2664': attribute type 8 has an invalid length. [ 368.165038][T15542] netlink: 'syz.0.2669': attribute type 1 has an invalid length. [ 368.201061][T15545] x_tables: duplicate underflow at hook 2 [ 368.329355][T15542] 8021q: adding VLAN 0 to HW filter on device bond12 [ 368.425234][T15549] bond12: (slave syz_tun): Enslaving as a backup interface with an up link [ 369.002171][T15578] netlink: 'syz.2.2680': attribute type 1 has an invalid length. [ 369.264088][T15590] netlink: 'syz.2.2684': attribute type 9 has an invalid length. [ 369.372642][T15593] smc: net device team0 applied user defined pnetid SYZ2 [ 369.552059][T15606] netlink: 'syz.4.2689': attribute type 1 has an invalid length. [ 369.618574][ T13] net_ratelimit: 23 callbacks suppressed [ 369.618594][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 369.799002][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 369.920254][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 370.059266][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 370.157183][T15634] GUP no longer grows the stack in syz.4.2697 (15634): 200000003000-20000000a000 (200000001000) [ 370.189549][T15634] CPU: 1 UID: 0 PID: 15634 Comm: syz.4.2697 Not tainted syzkaller #0 PREEMPT(full) [ 370.189579][T15634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.189596][T15634] Call Trace: [ 370.189610][T15634] [ 370.189619][T15634] dump_stack_lvl+0xe8/0x150 [ 370.189650][T15634] __get_user_pages+0x2378/0x2720 [ 370.189682][T15634] ? __gup_longterm_locked+0xc4e/0x1630 [ 370.189728][T15634] ? __gup_longterm_locked+0xc4e/0x1630 [ 370.189755][T15634] ? down_read_killable+0x1bb/0x340 [ 370.189811][T15634] __gup_longterm_locked+0xdcf/0x1630 [ 370.189853][T15634] ? lock_acquire+0x106/0x350 [ 370.189912][T15634] gup_fast_fallback+0x1d84/0x20d0 [ 370.189998][T15634] ? __pfx_gup_fast_fallback+0x10/0x10 [ 370.190028][T15634] ? is_valid_gup_args+0x11f/0x200 [ 370.190059][T15634] ? get_user_pages_fast+0x4d/0xb0 [ 370.190089][T15634] __iov_iter_get_pages_alloc+0x370/0xa10 [ 370.190131][T15634] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 370.190168][T15634] iov_iter_get_pages2+0x5e/0xa0 [ 370.190205][T15634] __se_sys_vmsplice+0x7c7/0x1620 [ 370.190257][T15634] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 370.190289][T15634] ? __pfx_futex_wait+0x10/0x10 [ 370.190334][T15634] ? lockdep_hardirqs_on+0x7a/0x110 [ 370.190420][T15634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.190447][T15634] do_syscall_64+0x15f/0xf80 [ 370.190471][T15634] ? trace_irq_disable+0x3b/0x140 [ 370.190504][T15634] ? clear_bhb_loop+0x40/0x90 [ 370.190532][T15634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.190555][T15634] RIP: 0033:0x7f659c39cdd9 [ 370.190576][T15634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.190596][T15634] RSP: 002b:00007f659d281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 370.190619][T15634] RAX: ffffffffffffffda RBX: 00007f659c615fa0 RCX: 00007f659c39cdd9 [ 370.190637][T15634] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 370.190651][T15634] RBP: 00007f659c432d69 R08: 0000000000000000 R09: 0000000000000000 [ 370.190665][T15634] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 370.190678][T15634] R13: 00007f659c616038 R14: 00007f659c615fa0 R15: 00007ffcf8ae27b8 [ 370.190715][T15634] [ 370.491636][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 370.608587][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 370.737277][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 371.068559][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 371.167260][T15669] __nla_validate_parse: 9 callbacks suppressed [ 371.167280][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 371.196960][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'. [ 371.206522][ T6851] bond0: (slave bridge5): failed to get link speed/duplex [ 371.215309][T15669] netlink: 'syz.3.2707': attribute type 18 has an invalid length. [ 371.216573][T15672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2708'. [ 371.224805][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 371.248946][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'. [ 371.258588][T15669] netlink: 'syz.3.2707': attribute type 18 has an invalid length. [ 371.273595][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 371.298558][T15676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.376235][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'. [ 371.386330][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'. [ 371.754669][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2716'. [ 371.754708][T15698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2716'. [ 371.940939][T15704] syzkaller0: entered promiscuous mode [ 371.953709][T15704] syzkaller0: entered allmulticast mode [ 372.572066][T15725] lo speed is unknown, defaulting to 1000 [ 374.179921][T15810] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 374.205897][T15811] [ 374.208615][T15811] ============================= [ 374.214508][T15811] WARNING: suspicious RCU usage [ 374.219468][T15811] syzkaller #0 Not tainted [ 374.223930][T15811] ----------------------------- [ 374.228924][T15811] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 374.237536][T15811] [ 374.237536][T15811] other info that might help us debug this: [ 374.237536][T15811] [ 374.248019][T15811] [ 374.248019][T15811] rcu_scheduler_active = 2, debug_locks = 1 [ 374.256374][T15811] 1 lock held by syz.0.2749/15811: [ 374.261679][T15811] #0: ffffffff8e95cf58 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 374.272773][T15811] [ 374.272773][T15811] stack backtrace: [ 374.279756][T15811] CPU: 0 UID: 0 PID: 15811 Comm: syz.0.2749 Not tainted syzkaller #0 PREEMPT(full) [ 374.279786][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.279800][T15811] Call Trace: [ 374.279808][T15811] [ 374.279817][T15811] dump_stack_lvl+0xe8/0x150 [ 374.279848][T15811] lockdep_rcu_suspicious+0x13f/0x1d0 [ 374.279882][T15811] get_callchain_entry+0x2b6/0x3c0 [ 374.279914][T15811] get_perf_callchain+0xd5/0x880 [ 374.279947][T15811] ? __pfx_get_perf_callchain+0x10/0x10 [ 374.279982][T15811] ? __pfx___resched_curr+0x10/0x10 [ 374.280014][T15811] __bpf_get_stack+0x445/0xab0 [ 374.280050][T15811] ? __pfx___bpf_get_stack+0x10/0x10 [ 374.280081][T15811] ? __lock_acquire+0x6b5/0x2cf0 [ 374.280110][T15811] bpf_get_stack+0x33/0x50 [ 374.280133][T15811] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 374.280156][T15811] bpf_get_stack_raw_tp+0x1a9/0x220 [ 374.280195][T15811] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 374.280217][T15811] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 374.280266][T15811] bpf_prog_test_run_syscall+0x318/0x4c0 [ 374.280298][T15811] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 374.280325][T15811] ? __fget_files+0x2a/0x420 [ 374.280358][T15811] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 374.280388][T15811] bpf_prog_test_run+0x2c7/0x340 [ 374.280414][T15811] __sys_bpf+0x643/0x950 [ 374.280458][T15811] ? __pfx___sys_bpf+0x10/0x10 [ 374.280514][T15811] ? rcu_is_watching+0x15/0xb0 [ 374.280549][T15811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.280573][T15811] __x64_sys_bpf+0x7c/0x90 [ 374.280604][T15811] do_syscall_64+0x15f/0xf80 [ 374.280628][T15811] ? trace_irq_disable+0x3b/0x140 [ 374.280660][T15811] ? clear_bhb_loop+0x40/0x90 [ 374.280688][T15811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.280710][T15811] RIP: 0033:0x7f3050d9cdd9 [ 374.280730][T15811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.280749][T15811] RSP: 002b:00007f304efee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.280771][T15811] RAX: ffffffffffffffda RBX: 00007f3051015fa0 RCX: 00007f3050d9cdd9 [ 374.280787][T15811] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 374.280802][T15811] RBP: 00007f3050e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 374.280815][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.280828][T15811] R13: 00007f3051016038 R14: 00007f3051015fa0 R15: 00007ffe8c858228 [ 374.280863][T15811] [ 374.718567][ T47] net_ratelimit: 21 callbacks suppressed [ 374.718589][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 374.848641][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 374.958576][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 375.078662][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 375.188554][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 375.298586][ T1110] bond0: (slave bridge5): failed to get link speed/duplex [ 375.418536][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 375.528555][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 375.638588][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 375.758780][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 379.788877][ T1114] net_ratelimit: 35 callbacks suppressed [ 379.788914][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 379.908835][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 380.028651][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 380.138565][ T47] bond0: (slave bridge5): failed to get link speed/duplex [ 380.258649][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 380.368696][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 380.478654][ T13] bond0: (slave bridge5): failed to get link speed/duplex [ 380.588550][ T6843] bond0: (slave bridge5): failed to get link speed/duplex [ 380.708563][ T1114] bond0: (slave bridge5): failed to get link speed/duplex [ 380.828622][ T47] bond0: (slave bridge5): failed to get link speed/duplex