last executing test programs: 2m10.412539486s ago: executing program 2 (id=2621): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x4040840) (async) sendmsg$inet(r0, 0x0, 0x240000c0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r1, 0x1) (async) unshare(0x2c020400) (async, rerun: 32) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 32) connect$unix(r2, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041810}, 0x0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, 0x0, 0x4048806) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) (async, rerun: 64) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf25030000000a000900bbc3bbbbbbbb00001e754f84b3981ba10913f856148c3df0cebc5fe363e2dba5e9887881bc9353d09f70cfed24e9803f384f52641d47ba276b5b13b4c8ee77ade16b2a4ca4b63f1411ad608d902ce95f81f81ff0901e78475b44f68de16875306c589e3e9b5911edf91b0e8c995a4865fdff0c527336168ac25e6a74dee3dfb7b106e7c917985d7c258a5e46616082dc66867bfe28291db113c45230bab222"], 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x40804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008890}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB="40005200060010"], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) 2m9.387026062s ago: executing program 2 (id=2625): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="00f3fffffffffffffd58d1a5bc9315242452babfa0bca0b2ff00000000000000", @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x20080810}, 0x80) r0 = socket(0x2b, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x40, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8], 0x26}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) connect$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x8000, @none, 0x100, 0x2}, 0xe) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r6, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r7, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20126084}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%-5lx \x00'}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, &(0x7f0000000040), &(0x7f0000000080)='syzkaller\x00', 0x8, 0x26, &(0x7f00000000c0)=""/38, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2a, r5, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xf, 0x81, 0x7}, 0x10, r7, 0xffffffffffffffff, 0x3, &(0x7f0000000480)=[r8, r9, 0x1, r10], &(0x7f00000004c0)=[{0x1, 0x1, 0x10, 0x9}, {0x0, 0x3, 0xd, 0x3}, {0x2, 0x5, 0x2, 0xb8b5ea73f60cb4f4}], 0x10, 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="24005a8020000180140003002a0009000900060057780300020002000500f8f5d596941b0134c00c2096923e548dd7d3ebcb23ac6b5a4df9bb2ed0beca96a4"], 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x2000) sendmsg$inet_sctp(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0xc6, 0x41, 0xc0, 0x7}}], 0x20, 0x4048800}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xd, 0x30, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x1e0, 0x1e0, 0x148, 0x148, 0x278, 0x318, 0x318, 0x318, 0x318, 0x318, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x41}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb4}}, 0x0) 2m7.85694268s ago: executing program 2 (id=2629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001240)={'tunl0\x00', 0x0, 0x7836, 0x8, 0x9, 0xffffff22, {{0x10, 0x4, 0x2, 0x4, 0x40, 0x67, 0x0, 0x4b, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0xe, "7194200af2fd16f3ecde0ecb"}, @timestamp_addr={0x44, 0x1c, 0xaf, 0x1, 0x6, [{@rand_addr=0x64010100, 0x8}, {@multicast1, 0x2}, {@private=0xa010100, 0xfff}]}, @noop]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', r3, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x8cffffffffffffff], 0x0, 0x0, 0x20e6}}, 0x40) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008815}, 0x2400c0b0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000100)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x240040d1}, 0x40040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)={0x40, 0x3f, 0x400, 0x70bd2b, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x17, 0x0, 0x0, @fd=r6}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0x10000004}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0xa0000001}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r6, 0x5000940e, &(0x7f00000001c0)={{r6}, "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"}) 2m6.788349986s ago: executing program 2 (id=2635): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x12, 0xff, 0x0, @empty}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x12, 0xff, 0x0, @empty}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) (async) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r2, 0x1, 0x7}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r6}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r2, 0x4, 0xb9, 0xf8, 0xffffffff, 0x6, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa0, 0x80, 0x5, 0x1800000}}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={@private1, 0x49, r7}) 2m5.948713688s ago: executing program 2 (id=2639): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="3ed7"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x16}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) 2m5.007474245s ago: executing program 2 (id=2644): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x44f3, 0x4) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) (async, rerun: 64) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10, 0x1800) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'wg1\x00', 0x1}) (async) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000040)={&(0x7f0000000000)=[{0x6, 0xbb, 0x3, 0x4}], 0x1, 0x20, 0x9, 0xff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) (async) r4 = socket$inet(0xa, 0x801, 0x86) connect$inet(r4, &(0x7f00000004c0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="ea", 0x1) (async, rerun: 32) sendmmsg$alg(r5, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) (async, rerun: 32) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @mcast1, 0x2}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x80, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000240)={0x30000000}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0xa000000d}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000090a01080000000000000000070000010900010073797a30000000000800054000000018080005400000002b08000f4000000004080007400000003008000a40000000020c000b400000000000000008080004400000000208000a4000000001140000001100010000000000000000000100000a51e707f578ef6844e970e7de593e6e07ec1e5dbfe569dbff531c421c723863efe294ada40dc341ea7325accb82ad78cc58880052ad9452b74bf2eeace175cd316abf"], 0x8c}, 0x1, 0x0, 0x0, 0x24008000}, 0x10000) (async) close(r5) 1m49.821201626s ago: executing program 32 (id=2644): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x44f3, 0x4) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) (async, rerun: 64) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10, 0x1800) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'wg1\x00', 0x1}) (async) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000040)={&(0x7f0000000000)=[{0x6, 0xbb, 0x3, 0x4}], 0x1, 0x20, 0x9, 0xff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) (async) r4 = socket$inet(0xa, 0x801, 0x86) connect$inet(r4, &(0x7f00000004c0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="ea", 0x1) (async, rerun: 32) sendmmsg$alg(r5, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) (async, rerun: 32) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @mcast1, 0x2}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x80, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000240)={0x30000000}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0xa000000d}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000090a01080000000000000000070000010900010073797a30000000000800054000000018080005400000002b08000f4000000004080007400000003008000a40000000020c000b400000000000000008080004400000000208000a4000000001140000001100010000000000000000000100000a51e707f578ef6844e970e7de593e6e07ec1e5dbfe569dbff531c421c723863efe294ada40dc341ea7325accb82ad78cc58880052ad9452b74bf2eeace175cd316abf"], 0x8c}, 0x1, 0x0, 0x0, 0x24008000}, 0x10000) (async) close(r5) 24.214284528s ago: executing program 4 (id=2968): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) unshare(0x22020400) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/user\x00') mkdirat$cgroup(r6, &(0x7f0000000000)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) (async) unshare(0x22020400) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) (async) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)) (async) syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/user\x00') (async) mkdirat$cgroup(r6, &(0x7f0000000000)='syz0\x00', 0x1ff) (async) 23.874609192s ago: executing program 4 (id=2971): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c000200657468746f6f6c"], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3700e30033a51a59c337a190a6e5abf9a0fc60d21a79aa688f43012a45095d2566bfa27f415047becbee38a4404337ede1270d9d123ca58e97cf7bec2f0827aa917b240faa5eade682070106bd5d2eca951730f1c06b7c7091a0a5cb45810f6865d57ad6178583d9cc9fb54e50479b7883e1a207813564d8efceeaac0e89f83be15301812fce5c9891ae4ef600324c292a8ae025504635f587d5d63e62564e0e52f0074c537810aaf89ff8265fd8333118685631be9543714867ffca", @ANYRES16=r2, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r3, @ANYBLOB="080026006c09000008003500010000000a00060050505050505000000a0034000202020202020000"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x40014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 23.569527185s ago: executing program 4 (id=2972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0xfffffffffffffdc3) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000180)=0x40) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf252800000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0xb, 0x47, [0xfffffffc, 0x80]}}) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r6], 0xfe33) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r3], 0x20) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000140)="58dd", 0x2}], 0x1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 21.960788723s ago: executing program 4 (id=2977): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000980)="93675fcdbff6279c44459400b41039140454da0000000000000009c625f071c57f3dc2846263eeec1f0efdf6db73a7fc7c9ed0a5cf604afd30fbba822b7cdc8e434594e33aed6d9839778959b09482dd831978fa7b97581c32b113f9dacbaeebd5b7dcbba8aa086a50ad47e3921b75b6ff2db21fc921cac1352fe648d6150dd8a1f229ce03ab3f682ad327aefe4baed38507000000000000005d290ad2716957369dbbd35b6d9d0000000000000000", 0x0, 0x11, 0x0, 0x0, 0xfffffffffffffec1, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000980)="93675fcdbff6279c44459400b41039140454da0000000000000009c625f071c57f3dc2846263eeec1f0efdf6db73a7fc7c9ed0a5cf604afd30fbba822b7cdc8e434594e33aed6d9839778959b09482dd831978fa7b97581c32b113f9dacbaeebd5b7dcbba8aa086a50ad47e3921b75b6ff2db21fc921cac1352fe648d6150dd8a1f229ce03ab3f682ad327aefe4baed38507000000000000005d290ad2716957369dbbd35b6d9d0000000000000000", 0x0, 0x11, 0x0, 0x0, 0xfffffffffffffec1, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$MRT6(r2, 0x29, 0xd0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000540)=""/95, 0x5f}, 0x0) (async) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000000540)=""/95, 0x5f}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f00000000c0)={0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x2, @private1, 0x200000}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x2, @private1, 0x200000}, 0x1c) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x7, [0x7ff, 0x4, 0x2, 0x0, 0x5, 0xff0, 0x1b0]}, &(0x7f0000000140)=0x12) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000ff7f000000000000be00000018110000", @ANYRES32, @ANYBLOB="00000000000097891b4a5b5e8c6400000000cd511c774a4f86164e227d000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bfd1000000000000b7020000020000008500000085000000"], &(0x7f0000000a40)='GPL\x00', 0x6, 0x14, &(0x7f0000000a80)=""/20, 0x41100, 0x5, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x1, 0x0, 0x7fff, 0x400000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000ff7f000000000000be00000018110000", @ANYRES32, @ANYBLOB="00000000000097891b4a5b5e8c6400000000cd511c774a4f86164e227d000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bfd1000000000000b7020000020000008500000085000000"], &(0x7f0000000a40)='GPL\x00', 0x6, 0x14, &(0x7f0000000a80)=""/20, 0x41100, 0x5, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x1, 0x0, 0x7fff, 0x400000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) shutdown(r3, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(r5, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/196, 0xc4}], 0x1) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3801000010000100feffffbffedbdf2500000000000000000000000000000000fe880000000000000000000000000101000103944e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000260000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff000000fd00001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000e00"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x24045094) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3801000010000100feffffbffedbdf2500000000000000000000000000000000fe880000000000000000000000000101000103944e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000260000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff000000fd00001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000e00"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x24045094) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$l2tp(0x2, 0x2, 0x73) 20.791116879s ago: executing program 4 (id=2985): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) 20.324278296s ago: executing program 4 (id=2989): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) (async, rerun: 32) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r1, 0x0, 0xffffffffffffff2b, 0x0, &(0x7f0000000180)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.758087656s ago: executing program 1 (id=3060): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x34000083}, 0x90) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c050}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x1, 0x9, 0xf, 0x5}, {0x8, 0x10, 0x2, 0x3}]}, 0x10) 4.554206186s ago: executing program 1 (id=3064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xc, 0x0, 0xe, 0x4, 0x800}}]}}}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xc, 0x0, 0xe, 0x4, 0x800}}]}}}]}, 0x80}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) 4.180191508s ago: executing program 1 (id=3067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) unshare(0x20000400) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xffffffff, 0x8, 0x8, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e20, @remote}], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x27, r9}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000000) unshare(0x4000000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r12 = socket$packet(0x11, 0x1, 0x300) r13 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f00000004c0)=[{r12, 0x80f6}, {r13, 0x40c1}, {r4, 0x480}, {r3}, {r10, 0x11}, {r8, 0x10}, {r5, 0x20a1}, {r5}, {r1, 0x10a0}], 0x9, &(0x7f0000000600)={0x0, 0x3938700}, &(0x7f0000000640)={[0x200]}, 0x8) 4.091731612s ago: executing program 5 (id=3068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff1d000000bfa200200000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800020072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) unshare(0x20000400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="f93c653e1968"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES8], 0x5) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$FIONCLEX(r6, 0x5450) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'pimreg\x00', 0x3}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r10, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r11, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x35, 0x0, &(0x7f0000000600)="48f49dd7d4b7f0e4c1b430b571a8ddd6a0421444cee7bd8622bbb33679040bb917612bbcfd7ca912ecb8f6dd6a1d71847a1139275e", &(0x7f0000000600)}, 0x50) 3.91304517s ago: executing program 3 (id=3069): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xab, &(0x7f0000000000)=""/171, 0x41100, 0x40}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x20000890) 3.515417806s ago: executing program 3 (id=3070): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="02ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 3.086554164s ago: executing program 0 (id=3071): ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5d1e, '\x00', 0x0, r2, 0x4, 0x3, 0x3}, 0x50) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x2, '\x00', 0x0, r2, 0x2, 0x5, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 2.781409459s ago: executing program 3 (id=3072): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x2, 0x2, 0x3}, {0x20000000, 0x3, 0x200000000000}, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x2, 0x2b}, 0x0, @in6=@local, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r2 = socket(0x840000000002, 0x3, 0xff) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000340)="82f750e625d3c8d9d65198c3bd00fd", 0xf}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 2.715231202s ago: executing program 0 (id=3073): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x840) 2.392967165s ago: executing program 0 (id=3074): socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 2.389945601s ago: executing program 5 (id=3075): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x3, 0x1, 0x9, 0x9, 0x100}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x0, 0x3, 0x4, 0x6, 0x9, 0x80, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x600000, 0xf8, &(0x7f0000000280)=""/248, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x0, 0x0, 0x1}, 0x10, 0x0, r1, 0x3, 0x0, &(0x7f00000003c0)=[{0x1, 0x1, 0x10, 0x2}, {0x2, 0x2, 0xa, 0xb}, {0x5, 0x1, 0xc, 0xc}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRES32=0x0], 0x0, 0x0, 0x34, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) socket$kcm(0x23, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) recvmmsg(r4, 0x0, 0x0, 0x300, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0x0, 0x6, 0x41, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x87ff, 0xb, 0x7}}) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x5c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) pipe(&(0x7f0000000500)) (async) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x3, 0x1, 0x9, 0x9, 0x100}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x0, 0x3, 0x4, 0x6, 0x9, 0x80, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x600000, 0xf8, &(0x7f0000000280)=""/248, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x0, 0x0, 0x1}, 0x10, 0x0, r1, 0x3, 0x0, &(0x7f00000003c0)=[{0x1, 0x1, 0x10, 0x2}, {0x2, 0x2, 0xa, 0xb}, {0x5, 0x1, 0xc, 0xc}], 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRES32=0x0], 0x0, 0x0, 0x34, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) close(r4) (async) socket$kcm(0x23, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) recvmmsg(r4, 0x0, 0x0, 0x300, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0x0, 0x6, 0x41, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x87ff, 0xb, 0x7}}) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x5c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) 2.077498652s ago: executing program 0 (id=3076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r5, 0x2000000) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x2bea0b92b4f18163, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x2bea0b92b4f18163, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000002000010026bd7000fbdbdf2502101000090000060f000100080002"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) socket(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xfdb5, 0x0, &(0x7f0000000180)="e02742e8680d85ff9782762f86dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000040)=',.\\-.@].+*[\x00', &(0x7f0000000080)='*!z\xa6\x00', 0x5}) (async) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000040)=',.\\-.@].+*[\x00', &(0x7f0000000080)='*!z\xa6\x00', 0x5}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008001300000101"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008001300000101"], 0x2c}}, 0x0) 1.954455056s ago: executing program 5 (id=3077): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x240400c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.527660851s ago: executing program 5 (id=3078): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {0xffff, 0x1}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0xffffffff}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r6, 0x0, 0x18, 0x0, &(0x7f0000004500)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'bridge_slave_0\x00', @random="f9211827901a"}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r7, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r7, 0x1) setsockopt(r7, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1.477016671s ago: executing program 0 (id=3079): socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0xf}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x800002, 0xde, &(0x7f0000000880)=""/222, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write(r6, &(0x7f0000000500)="bc285497", 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r5, 0x4, r8}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000140)={0x15, {{0x29, 0x0, 0x32000000, @local, 0x6}}}, 0x88) sendmsg$nl_route(r3, 0x0, 0xc31fe084736598c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[], 0xfffffdef}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) 1.094168229s ago: executing program 5 (id=3080): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0xffffffffffffff53}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000210081dc2dbd7000030000000238000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000380)=ANY=[@ANYRES32=r4], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r10, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e22, 0x7b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff8}, 0x1c) getsockname$packet(r11, 0x0, &(0x7f00000002c0)) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x430, 0x2e0, 0x2e0, 0x430, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r13, 0x4) 1.072655409s ago: executing program 1 (id=3081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd35, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) sendto(r3, &(0x7f0000000200)="366a4ef67653b541f0b7af26fbbb77a18c939f7fe98293cbb9ea18d9e0", 0x1d, 0x4, &(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x0, 0x1, 0x3}}, 0x80) 940.662489ms ago: executing program 3 (id=3082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x4084) 546.381029ms ago: executing program 1 (id=3083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797abb0000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014500000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002400038020000080040001800c00054000000000000000490c0004400000000000000008140000001100010000000000000000000100000a"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FICLONE(r0, 0x40049409, r0) socketpair(0x3, 0x5, 0x6, &(0x7f0000000000)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000005) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r3, &(0x7f00000048c0)=[{{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x0, @private2, 0x1}}}, 0x80, 0x0}}], 0x1, 0x24050070) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="2e2002000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20000890) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x61}, 0x94) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_team\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000200)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, 'ip6gre0\x00'}}, 0x1e) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f00000004c0)={0x0, 0x121, 0x7, 0x2f, 0x6}) socket$igmp(0x2, 0x3, 0x2) 543.930653ms ago: executing program 3 (id=3084): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIONCLEX(r0, 0x5450) (async) ioctl$FIONCLEX(r0, 0x5450) 344.563577ms ago: executing program 0 (id=3085): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x64000814}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x3, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x200}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e500000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 136.439004ms ago: executing program 3 (id=3086): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, 0x4, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 35.61398ms ago: executing program 1 (id=3087): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000010100000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095", @ANYRES8, @ANYBLOB="50b9c6853fc991e85e378634a22bf3c9a5d2db5d70eb525df9014775d54164d68f7232e8bba56806f5edd91b9f7df8f8e5721882ade166c125dc3b747adb0e83961f3c546cbb51d46450dbed0131f9785f0b4e775541596374473c3363331c5cdef76e85715904b3f9d9e7439388d808312d5da749a5adb5f7e1ccda353a32521a74d6c15610ea8d1f8ce86bfe0523b4d4c7325951a8237fe24f2df0380cf48082d2530d34148f73f466efd909050991f3d90692f0d9315f630876cdef9d7f84040d6df94f1dee2d4b86f0546da8cd74cf94b19023fa54786e291787e0"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0xc4a, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) read(r5, &(0x7f0000000640)=""/199, 0xc7) r6 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x100}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0xffffff5a) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000080)=0xef0e, 0x4) 0s ago: executing program 5 (id=3088): sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), &(0x7f00000006c0), 0x4000}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000890) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x4a98}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200591214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000780)={{r1, &(0x7f0000000540)='ip6gretap0\x00', 0xc2302, &(0x7f0000000580)={@align=0xa, {0xffc0, 0xe7, 0x7fff, 0xb5}}, 0x9, &(0x7f00000005c0), &(0x7f0000000600)=0x2}, {[0x1, 0x7, 0xfff, 0x7ff]}, 0x5, 0xc, &(0x7f0000000680)=""/12}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x7, 0x700, 0x4, 0x9, {{0x12, 0x4, 0x2, 0x11, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@generic={0x44, 0xe, "7254552244e7dc582603d91f"}, @lsrr={0x83, 0x1b, 0x68, [@dev={0xac, 0x14, 0x14, 0x20}, @local, @multicast1, @empty, @loopback, @local]}, @rr={0x7, 0xb, 0x25, [@multicast1, @loopback]}]}}}}}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0c4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c2000000", 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Use struct sctp_assoc_value instead [ 284.864215][T12172] siw: device registration error -23 [ 284.924645][T12164] hsr_slave_1 (unregistering): left promiscuous mode [ 285.169277][T12194] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 285.198751][T12194] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1514'. [ 285.308920][T12203] x_tables: unsorted entry at hook 3 [ 285.568991][T12195] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 285.578581][T12195] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1514'. [ 285.913704][T12208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.000722][T12223] bond0: Error: Cannot enslave bond to itself. [ 286.192351][T12208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.208710][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1528'. [ 286.360005][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 286.511156][T12254] netlink: 'syz.1.1530': attribute type 5 has an invalid length. [ 286.549488][T12208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.605296][T12266] netlink: 'syz.3.1532': attribute type 1 has an invalid length. [ 286.702217][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.840987][ T5615] udevd[5615]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 286.999712][T12208] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 287.026472][T12208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.244554][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 287.454904][T12290] syzkaller0: entered promiscuous mode [ 287.460643][T12290] syzkaller0: entered allmulticast mode [ 287.482937][ T5964] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.532164][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 287.541857][ T5964] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.550283][ T5964] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.566555][ T5964] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.855020][T12304] ip_tables: iptables: counters copy to user failed while replacing table [ 288.030158][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 288.091001][T12313] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1550'. [ 288.128771][T12318] syzkaller0: entered promiscuous mode [ 288.154665][T12318] syzkaller0: entered allmulticast mode [ 288.209672][T12324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'. [ 288.434795][T12338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'. [ 288.456265][T12340] netlink: 'syz.2.1556': attribute type 11 has an invalid length. [ 288.470643][T12322] 8021q: adding VLAN 0 to HW filter on device bond5 [ 288.901230][T12359] netlink: 'syz.2.1564': attribute type 2 has an invalid length. [ 288.913543][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 288.931084][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 288.965401][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 288.975913][T12359] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 288.993717][T12358] netlink: 'syz.0.1561': attribute type 18 has an invalid length. [ 289.016859][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 289.048823][T12363] syzkaller0: entered promiscuous mode [ 289.054864][T12362] netlink: 'syz.0.1561': attribute type 18 has an invalid length. [ 289.100700][T12363] syzkaller0: entered allmulticast mode [ 289.298832][T12365] lo speed is unknown, defaulting to 1000 [ 289.534185][ T30] audit: type=1804 audit(1787517159.932:5): pid=12386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1566" name="/newroot/313/cgroup.controllers" dev="tmpfs" ino=1628 res=1 errno=0 [ 289.592800][ T30] audit: type=1800 audit(1787517159.932:6): pid=12386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1566" name="cgroup.controllers" dev="tmpfs" ino=1628 res=0 errno=0 [ 289.883034][T12399] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 289.939982][T12399] netlink: 'syz.0.1573': attribute type 7 has an invalid length. [ 289.971258][T12399] NCSI netlink: No device for ifindex 1073545264 [ 289.984866][T12365] lo speed is unknown, defaulting to 1000 [ 290.179718][T12411] IPv4: Oversized IP packet from 127.202.26.0 [ 290.215337][T12404] lo speed is unknown, defaulting to 1000 [ 290.369906][T12423] bridge0: port 1(vlan4) entered blocking state [ 290.377994][T12423] bridge0: port 1(vlan4) entered disabled state [ 290.385685][T12423] vlan4: entered allmulticast mode [ 290.393954][T12423] geneve0: entered allmulticast mode [ 290.484177][T12428] tipc: Bearer : already 2 bearers with priority 10 [ 290.492832][T12428] tipc: Bearer : trying with adjusted priority [ 290.500422][T12428] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 290.537617][T12404] lo speed is unknown, defaulting to 1000 [ 290.570004][T12414] smc: removing ib device syz0 [ 290.831191][T12414] smbdirect: ib_dev[syz0] removed [ 291.230547][T12438] syzkaller0: entered promiscuous mode [ 291.237399][T12438] syzkaller0: entered allmulticast mode [ 291.546439][T12448] lo speed is unknown, defaulting to 1000 [ 292.310200][T12455] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 292.310200][T12455] Please contact the netfilter-devel mailing list or update your nftables rules. [ 293.070000][T12458] __nla_validate_parse: 6 callbacks suppressed [ 293.070021][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1588'. [ 293.294882][T12462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1590'. [ 293.377951][T12467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1591'. [ 293.391565][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1594'. [ 293.416264][T12467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1591'. [ 293.437321][T12469] validate_nla: 1 callbacks suppressed [ 293.437341][T12469] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 293.438384][T12474] xt_hashlimit: overflow, try lower: 0/0 [ 293.444203][T12472] netlink: 660 bytes leftover after parsing attributes in process `syz.0.1592'. [ 293.444267][T12472] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1592'. [ 293.477381][T12469] netlink: 'syz.4.1594': attribute type 3 has an invalid length. [ 293.486315][T12469] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1594'. [ 293.521112][T12467] syzkaller1: entered allmulticast mode [ 293.692815][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 293.724085][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 293.750095][T12484] netlink: 'syz.4.1597': attribute type 2 has an invalid length. [ 293.768007][T12484] netlink: 'syz.4.1597': attribute type 2 has an invalid length. [ 294.289818][T12514] syzkaller1: entered promiscuous mode [ 294.318779][T12514] syzkaller1: entered allmulticast mode [ 294.360131][T12517] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.517920][T12519] netlink: zone id is out of range [ 294.540228][T12519] netlink: zone id is out of range [ 294.550647][T12519] netlink: get zone limit has 4 unknown bytes [ 294.752881][T12536] netlink: 'syz.4.1610': attribute type 1 has an invalid length. [ 294.876721][T12543] xt_nfacct: accounting object `syz0' does not exist [ 294.896827][T12546] netlink: Unknown conntrack attr (type=16383, max=9) [ 294.931743][T12546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.088255][T12594] syzkaller0: entered promiscuous mode [ 299.122521][T12594] syzkaller0: entered allmulticast mode [ 299.153206][T12589] lo speed is unknown, defaulting to 1000 [ 299.244774][T12617] netlink: 'syz.4.1628': attribute type 1 has an invalid length. [ 299.445457][T12622] __nla_validate_parse: 1 callbacks suppressed [ 299.445478][T12622] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1629'. [ 299.473737][T12622] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1629'. [ 299.529550][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1631'. [ 299.542387][T12624] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1631'. [ 299.897058][T12642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1636'. [ 299.924904][T12644] openvswitch: netlink: Tunnel attr 246 out of range max 16 [ 299.986625][T12638] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1634'. [ 300.006954][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 300.022937][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 300.336768][T12653] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 300.411219][T12657] syzkaller1: entered promiscuous mode [ 300.438024][T12657] syzkaller1: entered allmulticast mode [ 300.531493][T12666] netlink: 'syz.1.1639': attribute type 1 has an invalid length. [ 300.580017][T12666] netlink: 'syz.1.1639': attribute type 2 has an invalid length. [ 300.669111][T12674] tipc: Failed to remove unknown binding: 66,1,1/4284270403:1285544871/1285544873 [ 300.934814][T12682] sctp: [Deprecated]: syz.0.1645 (pid 12682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.934814][T12682] Use struct sctp_sack_info instead [ 301.352055][T12699] openvswitch: netlink: IPv6 tunnel dst address is zero [ 301.695719][T12719] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 301.799368][T12725] tun0: tun_chr_ioctl cmd 1074812118 [ 301.969976][T12734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1657'. [ 302.015807][T12734] siw: device registration error -23 [ 302.478316][T12753] netlink: 'syz.3.1663': attribute type 39 has an invalid length. [ 302.831109][T12766] Unsupported ieee802154 address type: 0 [ 303.518798][T12775] macvlan0: entered promiscuous mode [ 303.541146][T12793] IPVS: set_ctl: invalid protocol: 29 172.20.20.18:20003 [ 303.561411][T12793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.654447][T12782] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1669'. [ 303.790183][T12798] sch_fq: defrate 4294967293 ignored. [ 304.515711][T12826] __nla_validate_parse: 2 callbacks suppressed [ 304.515733][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 304.573208][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'. [ 304.685994][T12827] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 304.719292][T12834] dvmrp0: entered allmulticast mode [ 304.728116][T12835] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1681'. [ 304.744110][T12837] dvmrp1: entered allmulticast mode [ 304.751284][T12835] gretap0: entered promiscuous mode [ 304.764538][T12834] dvmrp0: left allmulticast mode [ 304.773956][T12834] dvmrp1: left allmulticast mode [ 304.810729][T12837] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20004 [ 304.837917][T12835] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 304.860187][T12838] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1681'. [ 304.874390][T12835] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 304.924934][T12838] 0ªî{X¹¦: renamed from gretap0 [ 304.957556][T12838] 0ªî{X¹¦: left promiscuous mode [ 304.971976][T12838] 0ªî{X¹¦: entered allmulticast mode [ 304.993428][T12835] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 305.005989][T12838] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 305.069633][T12835] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 305.167255][T12846] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 305.198242][T12846] bond0 (unregistering): Released all slaves [ 305.547711][T12860] netlink: 'syz.0.1691': attribute type 2 has an invalid length. [ 305.578701][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 305.687578][T12863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.789310][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'. [ 305.798579][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'. [ 305.823780][T12867] syzkaller0: entered promiscuous mode [ 305.840173][T12867] syzkaller0: entered allmulticast mode [ 306.112067][T12884] netlink: 'syz.1.1698': attribute type 11 has an invalid length. [ 306.141095][T12884] netlink: 'syz.1.1698': attribute type 4 has an invalid length. [ 306.173441][T12884] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1698'. [ 306.276938][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 307.091234][T12924] syzkaller0: entered promiscuous mode [ 307.123705][T12924] syzkaller0: entered allmulticast mode [ 307.414946][T12948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1708'. [ 307.564991][T12952] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 307.612777][T12926] netlink: 'syz.0.1707': attribute type 11 has an invalid length. [ 307.996511][T12963] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 308.617555][ T6883] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 308.648640][ T6883] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 308.681108][ T6883] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 308.711336][ T6882] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 309.154443][T13017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.540585][T13038] __nla_validate_parse: 4 callbacks suppressed [ 309.540608][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'. [ 309.580005][T13038] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1739'. [ 309.910741][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'. [ 309.956178][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 310.029944][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 310.081890][ T5964] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.124736][ T5964] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.154122][ T5964] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.180190][ T5964] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.191041][T13057] block nbd5: server does not support multiple connections per device. [ 310.227729][T13057] block nbd5: shutting down sockets [ 310.306892][T13064] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1748'. [ 310.325190][T13064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1748'. [ 310.600498][T13077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1751'. [ 310.625384][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 310.651163][T13083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1754'. [ 310.657117][T13069] syzkaller0: entered promiscuous mode [ 310.668830][T13069] syzkaller0: entered allmulticast mode [ 310.676776][T13083] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 310.687118][T13083] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 310.696250][T13083] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 310.755396][T13079] bond6: entered allmulticast mode [ 313.970461][T13087] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 314.594183][T13136] __nla_validate_parse: 3 callbacks suppressed [ 314.668999][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 314.794844][T13126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.810272][T13148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1768'. [ 315.368807][T13165] xt_hashlimit: size too large, truncated to 1048576 [ 315.384884][T13167] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1772'. [ 315.508668][T13177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.630095][T13173] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1774'. [ 315.842407][T13197] netlink: 'syz.3.1777': attribute type 1 has an invalid length. [ 315.881869][T13197] netlink: 'syz.3.1777': attribute type 4 has an invalid length. [ 315.901405][T13197] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1777'. [ 315.924335][T13200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.937945][T13201] xt_hashlimit: size too large, truncated to 1048576 [ 316.142139][T13208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.247573][T13208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.480621][T13216] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.498384][T13218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1783'. [ 316.508232][T13214] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 316.590101][T13216] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.636483][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 316.737905][T13226] bridge0: entered allmulticast mode [ 316.818415][T13216] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.931030][T13216] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.363377][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.380206][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.426170][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.472491][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1794'. [ 317.496530][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.664780][T13255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.769455][T13264] vlan5: entered promiscuous mode [ 317.793078][T13264] macvlan0: entered promiscuous mode [ 317.913176][ T6883] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.938412][ T6883] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.099803][T13282] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1801'. [ 318.114428][T13283] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1801'. [ 318.459315][T13286] bond3 (unregistering): Released all slaves [ 318.586844][T13302] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 319.813254][T13350] __nla_validate_parse: 1 callbacks suppressed [ 319.813274][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1822'. [ 319.818396][T13346] tipc: Enabling of bearer rejected, already enabled [ 320.038857][T13362] bridge0: entered allmulticast mode [ 320.593379][T13392] netlink: 'syz.1.1831': attribute type 1 has an invalid length. [ 320.705297][T13392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.825453][T13351] pim6reg: entered allmulticast mode [ 320.884233][T13351] netlink: 'syz.0.1821': attribute type 4 has an invalid length. [ 320.973102][T13405] No such timeout policy "syz0" [ 321.527510][T13427] sctp: [Deprecated]: syz.3.1838 (pid 13427) Use of int in max_burst socket option deprecated. [ 321.527510][T13427] Use struct sctp_assoc_value instead [ 321.618307][T13434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1839'. [ 322.217778][T13468] sctp: [Deprecated]: syz.3.1847 (pid 13468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.217778][T13468] Use struct sctp_sack_info instead [ 322.265714][T13467] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 322.414195][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 322.565045][T13481] lo speed is unknown, defaulting to 1000 [ 322.680925][T13489] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1855'. [ 322.741992][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'. [ 322.785262][T13487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'. [ 322.807388][T13492] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1856'. [ 322.824636][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 323.128908][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'. [ 323.141177][T13481] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1851'. [ 323.156712][T13481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.463747][T13513] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 324.151417][T13552] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 324.280362][T13554] syzkaller0: entered promiscuous mode [ 324.287371][T13554] syzkaller0: entered allmulticast mode [ 324.352785][T13554] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 324.527136][T13568] netlink: Failed to add %pK helper -22 [ 324.538229][T13568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.879089][T13592] netlink: 'syz.1.1882': attribute type 1 has an invalid length. [ 324.898698][T13575] bond8 (unregistering): Released all slaves [ 324.906696][T13595] __nla_validate_parse: 7 callbacks suppressed [ 324.906716][T13595] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1878'. [ 325.215003][T13592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.236078][T13600] bond2: (slave veth0_to_bond): Releasing active interface [ 325.251243][T13600] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 325.707464][T13621] netlink: 'syz.1.1886': attribute type 1 has an invalid length. [ 325.814734][T13621] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.821485][T13637] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1886'. [ 325.850094][T13635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1890'. [ 326.146436][T13648] netlink: 'syz.2.1893': attribute type 4 has an invalid length. [ 326.850368][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 326.888618][T13678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1900'. [ 327.146955][T13685] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1902'. [ 327.163776][T13685] netlink: 'syz.1.1902': attribute type 1 has an invalid length. [ 327.176682][T13689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1904'. [ 328.010465][T13722] tipc: Enabling of bearer rejected, failed to enable media [ 328.657791][T13737] batman_adv: batadv0: Adding interface: gretap1 [ 328.677170][T13737] batman_adv: batadv0: The MTU of interface gretap1 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 328.743193][T13737] batman_adv: batadv0: Interface activated: gretap1 [ 329.118375][T13753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 329.178217][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 329.191546][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1921'. [ 329.238668][T13753] veth11: entered allmulticast mode [ 329.340107][T13753] bond6: (slave veth11): Enslaving as an active interface with an up link [ 329.404468][T13761] bond6 (unregistering): (slave veth11): Releasing backup interface [ 329.418531][T13761] bond6 (unregistering): Released all slaves [ 330.056238][T13795] bond8 (unregistering): Released all slaves [ 330.102387][T13800] __nla_validate_parse: 1 callbacks suppressed [ 330.102418][T13800] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1937'. [ 330.177852][T13800] tipc: Enabling of bearer rejected, media not registered [ 330.217189][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1938'. [ 330.299455][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 330.347822][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 330.599968][T13820] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 330.686129][T13820] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1943'. [ 330.838019][T13831] netlink: 'syz.4.1946': attribute type 3 has an invalid length. [ 330.867184][T13835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1947'. [ 330.923285][T13831] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1946'. [ 331.184553][T13850] tipc: Enabling of bearer rejected, failed to enable media [ 331.220436][T13853] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 331.276258][T13853] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.350170][T13859] bond8: (slave geneve5): making interface the new active one [ 331.379459][T13859] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 331.570078][T13863] bridge_slave_1: entered promiscuous mode [ 331.597704][T13863] bridge_slave_1: entered allmulticast mode [ 332.132996][T13901] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1962'. [ 332.149432][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 332.270291][T13908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1963'. [ 332.445493][T13912] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 332.665367][T13923] syzkaller0: entered promiscuous mode [ 332.690403][T13923] syzkaller0: entered allmulticast mode [ 332.966440][T13929] ip6tnl0: Caught tx_queue_len zero misconfig [ 333.246391][T13947] lo speed is unknown, defaulting to 1000 [ 333.954736][T13980] netlink: 'syz.2.1982': attribute type 2 has an invalid length. [ 333.974575][T13980] netlink: 'syz.2.1982': attribute type 11 has an invalid length. [ 335.106014][T14022] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 335.135205][T14014] syzkaller0: entered promiscuous mode [ 335.139507][T14022] __nla_validate_parse: 10 callbacks suppressed [ 335.139582][T14022] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1992'. [ 335.163459][T14014] syzkaller0: entered allmulticast mode [ 335.267018][T14027] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1993'. [ 335.599222][T14016] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.639702][T14016] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.175995][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 336.382521][T14055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2004'. [ 336.411524][T14055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2004'. [ 336.605086][T14016] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.623684][T14016] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.955225][T14016] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.988776][T14016] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.043603][T14082] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 337.084282][T14082] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 337.172526][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 337.436652][T14016] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.468474][T14016] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.911761][ T5959] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.959251][ T5959] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.144562][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.161035][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.286710][T14135] bond6 (unregistering): Released all slaves [ 338.494853][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.515647][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.552635][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.588166][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.740513][T14149] vlan2: entered allmulticast mode [ 338.753246][T14149] bond0: entered allmulticast mode [ 338.776292][T14149] bond_slave_0: entered allmulticast mode [ 338.818617][T14149] bond_slave_1: entered allmulticast mode [ 339.088860][T14163] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 339.128320][T14163] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 339.210912][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 339.257516][T14163] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 339.269478][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2032'. [ 339.296737][T14163] bond3 (unregistering): Released all slaves [ 339.672283][T14187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2039'. [ 339.702080][T14187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2039'. [ 340.226296][T14215] __nla_validate_parse: 32 callbacks suppressed [ 340.226316][T14215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2048'. [ 340.258810][T14215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2048'. [ 340.278843][T14217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2048'. [ 340.303471][T14217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2048'. [ 340.539607][T14228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2051'. [ 340.663601][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2053'. [ 340.698900][T14234] xt_nfacct: accounting object `syz0' does not exist [ 341.020956][T14245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2058'. [ 341.109630][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 341.185933][T14250] netlink: 712 bytes leftover after parsing attributes in process `syz.1.2061'. [ 341.336774][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 341.655418][T14262] netlink: 'syz.4.2064': attribute type 6 has an invalid length. [ 342.563217][T14310] netlink: 'syz.1.2081': attribute type 49 has an invalid length. [ 342.856195][T14314] bond9: option fail_over_mac: invalid value (127) [ 342.965943][T14314] bond9 (unregistering): Released all slaves [ 343.021886][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.170275][T14319] netlink: 'syz.2.2084': attribute type 16 has an invalid length. [ 343.380303][T14322] veth0_to_bond: Caught tx_queue_len zero misconfig [ 343.411459][T14326] xt_hashlimit: size too large, truncated to 1048576 [ 343.467051][T14327] @0Ù: renamed from bond_slave_1 [ 344.298139][T14357] syzkaller0: entered promiscuous mode [ 344.320658][T14357] syzkaller0: entered allmulticast mode [ 345.074475][T14395] netlink: 'syz.4.2102': attribute type 1 has an invalid length. [ 345.387906][T14406] __nla_validate_parse: 12 callbacks suppressed [ 345.387927][T14406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2104'. [ 348.516015][T14395] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 348.789205][T14425] xt_hashlimit: max too large, truncated to 1048576 [ 348.874191][T14425] xt_hashlimit: overflow, try lower: 137438953472/8 [ 348.991925][T14431] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2112'. [ 349.016482][T14435] lo speed is unknown, defaulting to 1000 [ 349.054563][T14435] lo speed is unknown, defaulting to 1000 [ 349.064442][T14436] netlink: 'syz.2.2114': attribute type 12 has an invalid length. [ 349.070814][T14431] syzkaller1: entered promiscuous mode [ 349.110412][T14431] syzkaller1: entered allmulticast mode [ 349.131750][T14435] lo speed is unknown, defaulting to 1000 [ 349.193313][T14435] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 349.262639][T14435] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 349.301185][T14435] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 349.335279][T14435] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 349.358670][T14448] batman_adv: batadv0: Adding interface: dummy0 [ 349.372042][T14448] batman_adv: batadv0: Interface activated: dummy0 [ 349.399310][T14449] batadv0: mtu less than device minimum [ 349.430763][T14449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 349.444532][T14449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 349.456505][T14449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 349.468136][T14449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 349.479787][T14449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 349.491459][T14449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 349.503104][T14449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 349.514742][T14449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 349.526404][T14449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 349.605422][T14435] lo speed is unknown, defaulting to 1000 [ 349.704686][T14435] lo speed is unknown, defaulting to 1000 [ 349.725723][T14435] lo speed is unknown, defaulting to 1000 [ 349.761364][T14435] lo speed is unknown, defaulting to 1000 [ 349.776242][T14435] lo speed is unknown, defaulting to 1000 [ 350.050632][T14471] syz.0.2123: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 350.072415][T14471] CPU: 0 UID: 0 PID: 14471 Comm: syz.0.2123 Not tainted syzkaller #0 PREEMPT(full) [ 350.072449][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.072463][T14471] Call Trace: [ 350.072472][T14471] [ 350.072482][T14471] dump_stack_lvl+0xe8/0x150 [ 350.072523][T14471] warn_alloc+0x24c/0x270 [ 350.072574][T14471] ? __pfx_warn_alloc+0x10/0x10 [ 350.072599][T14471] ? xskq_create+0x56/0x220 [ 350.072742][T14471] ? xsk_setsockopt+0x52a/0x960 [ 350.072806][T14471] ? do_syscall_64+0x166/0x520 [ 350.072878][T14471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.072920][T14471] __vmalloc_node_range_noprof+0x12c/0x1730 [ 350.072979][T14471] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 350.073008][T14471] ? __kmalloc_cache_noprof+0x331/0x660 [ 350.073036][T14471] ? __kmalloc_cache_noprof+0x152/0x660 [ 350.073062][T14471] ? xskq_create+0x56/0x220 [ 350.073090][T14471] xskq_create+0x148/0x220 [ 350.073113][T14471] ? xsk_init_queue+0x8a/0xe0 [ 350.073138][T14471] xsk_init_queue+0x8a/0xe0 [ 350.073163][T14471] xsk_setsockopt+0x52a/0x960 [ 350.073197][T14471] ? __fget_files+0x2a/0x420 [ 350.073230][T14471] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.073265][T14471] ? __pfx_aa_sk_perm+0x10/0x10 [ 350.073373][T14471] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 350.073395][T14471] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.073431][T14471] do_sock_setsockopt+0x17c/0x1b0 [ 350.073503][T14471] __x64_sys_setsockopt+0x13d/0x1b0 [ 350.073553][T14471] do_syscall_64+0x166/0x520 [ 350.073578][T14471] ? trace_irq_disable+0x3b/0x140 [ 350.073609][T14471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.073632][T14471] ? clear_bhb_loop+0x70/0xc0 [ 350.073660][T14471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.073683][T14471] RIP: 0033:0x7fe0a0b9e0d9 [ 350.073705][T14471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.073725][T14471] RSP: 002b:00007fe09edf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.073749][T14471] RAX: ffffffffffffffda RBX: 00007fe0a0e25fa0 RCX: 00007fe0a0b9e0d9 [ 350.073765][T14471] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 350.073778][T14471] RBP: 00007fe0a0c35024 R08: 0000000000000004 R09: 0000000000000000 [ 350.073792][T14471] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.073805][T14471] R13: 00007fe0a0e26038 R14: 00007fe0a0e25fa0 R15: 00007fff9e034f18 [ 350.073841][T14471] [ 350.073901][T14471] Mem-Info: [ 350.351747][T14471] active_anon:5738 inactive_anon:0 isolated_anon:0 [ 350.351747][T14471] active_file:0 inactive_file:43332 isolated_file:0 [ 350.351747][T14471] unevictable:0 dirty:96 writeback:0 [ 350.351747][T14471] slab_reclaimable:11133 slab_unreclaimable:104547 [ 350.351747][T14471] mapped:29556 shmem:602 pagetables:1331 [ 350.351747][T14471] sec_pagetables:0 bounce:0 [ 350.351747][T14471] kernel_misc_reclaimable:0 [ 350.351747][T14471] free:1317915 free_pcp:11453 free_cma:0 [ 350.409776][T14489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2123'. [ 350.454425][T14471] Node 0 active_anon:23652kB inactive_anon:0kB active_file:0kB inactive_file:173124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120224kB dirty:384kB writeback:0kB shmem:2908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13268kB pagetables:5080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 350.522844][T14471] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 350.598856][T14481] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 350.605985][T14471] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.766914][T14499] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2128'. [ 350.792140][T14471] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 350.808414][T14471] Node 0 DMA32 free:1302764kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29052kB inactive_anon:0kB active_file:0kB inactive_file:173124kB unevictable:0kB writepending:384kB zspages:0kB present:3129332kB managed:2547832kB mlocked:0kB bounce:0kB free_pcp:42004kB local_pcp:26344kB free_cma:0kB [ 350.853955][T14499] 0·: renamed from hsr0 (while UP) [ 350.874424][T14471] lowmem_reserve[]: 0 0 0 0 0 [ 350.881017][T14471] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.926786][T14499] 0·: entered allmulticast mode [ 350.937994][T14499] hsr_slave_0: entered allmulticast mode [ 350.977059][T14471] lowmem_reserve[]: 0 0 0 0 0 [ 350.995045][T14471] Node 1 Normal free:3950412kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.061315][T14471] lowmem_reserve[]: 0 0 0 0 0 [ 351.071468][T14471] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 351.128810][T14471] Node 0 DMA32: 853*4kB (UE) 685*8kB (UE) 226*16kB (UME) 343*32kB (UME) 98*64kB (UME) 54*128kB (UME) 26*256kB (UM) 15*512kB (UM) 14*1024kB (UE) 8*2048kB (UME) 296*4096kB (UM) = 1294140kB [ 351.187867][T14471] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 351.239039][T14471] Node 1 Normal: 1*4kB (M) 9*8kB (UM) 8*16kB (UM) 10*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 963*4096kB (UM) = 3950412kB [ 351.286309][T14471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.310967][T14510] No such timeout policy "syz0" [ 351.327685][T14471] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.349886][T14510] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 351.367888][T14471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.400480][T14471] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.419551][T14471] 48800 total pagecache pages [ 351.447647][T14471] 0 pages in swap cache [ 351.468062][T14471] Free swap = 124996kB [ 351.493690][T14471] Total swap = 124996kB [ 351.510983][T14471] 2097051 pages RAM [ 351.538421][T14471] 0 pages HighMem/MovableOnly [ 351.557296][T14471] 428414 pages reserved [ 351.574465][T14471] 0 pages cma reserved [ 352.233626][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 352.311192][T14539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2141'. [ 352.406143][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 352.422729][T14546] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2144'. [ 352.432705][T14547] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2144'. [ 352.447121][T14546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2144'. [ 352.457521][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 352.470567][T14546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2144'. [ 352.834321][T14557] syzkaller0: entered promiscuous mode [ 352.851243][T14557] syzkaller0: entered allmulticast mode [ 352.947006][T14566] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 353.078269][T14566] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.279863][T14570] bond3: (slave geneve2): making interface the new active one [ 353.314314][T14570] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 354.127538][T14611] bridge0: entered promiscuous mode [ 354.150167][T14611] vlan4: entered promiscuous mode [ 354.166312][T14611] geneve0: entered promiscuous mode [ 354.186228][T14615] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 354.205431][T14611] bridge0: entered allmulticast mode [ 354.814664][T14648] net_ratelimit: 12 callbacks suppressed [ 354.814687][T14648] ip_tables: iptables: counters copy to user failed while replacing table [ 354.911791][T14651] nbd: must specify a size in bytes for the device [ 354.972038][T14644] syzkaller0: entered promiscuous mode [ 354.993781][T14644] syzkaller0: entered allmulticast mode [ 355.431411][T14663] netlink: 'syz.3.2179': attribute type 46 has an invalid length. [ 355.472748][T14663] __nla_validate_parse: 14 callbacks suppressed [ 355.472770][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2179'. [ 355.832871][T14676] tipc: Enabled bearer , priority 0 [ 355.859150][T14680] xt_connbytes: Forcing CT accounting to be enabled [ 355.896059][T14692] syzkaller0: entered promiscuous mode [ 355.979345][T14692] syzkaller0: entered allmulticast mode [ 356.025009][T14677] tipc: Enabling of bearer rejected, already enabled [ 356.074088][T14699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.149866][T14704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2191'. [ 356.160853][T14677] tipc: Resetting bearer [ 356.254310][T14677] tipc: Disabling bearer [ 356.328093][T14709] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 356.573608][T14709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 356.617837][T14714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2192'. [ 356.646892][T14718] syz_tun: left promiscuous mode [ 356.659086][T14718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.676426][T14718] bridge_slave_1: left promiscuous mode [ 356.684109][T14718] bridge_slave_1: left allmulticast mode [ 356.707868][T14718] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 356.757187][T14724] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 356.800622][T14724] bond4: (slave batadv2): making interface the new active one [ 356.847015][T14724] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 356.881480][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2196'. [ 357.162481][T14737] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 357.196752][T14737] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 357.426711][T14747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2202'. [ 358.011090][T14764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2205'. [ 358.284818][T14773] 8021q: VLANs not supported on vxcan1 [ 358.535996][T14775] netlink: Failed to add helper -22 [ 358.556903][T14775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.778615][T14786] sctp: [Deprecated]: syz.4.2211 (pid 14786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.778615][T14786] Use struct sctp_sack_info instead [ 358.842900][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2211'. [ 358.990352][T14801] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 360.499738][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2225'. [ 360.659202][T14844] netlink: 'syz.1.2224': attribute type 10 has an invalid length. [ 360.797325][T14825] syzkaller1: entered promiscuous mode [ 360.890576][T14825] syzkaller1: entered allmulticast mode [ 361.112107][T14857] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 361.276825][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'. [ 361.296566][T14867] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2231'. [ 361.374936][T14870] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2232'. [ 361.579753][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2235'. [ 361.613241][T14883] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2236'. [ 361.996146][T14899] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 362.304360][T14902] lo speed is unknown, defaulting to 1000 [ 362.360403][T14902] lo speed is unknown, defaulting to 1000 [ 362.557296][T14918] syzkaller1: entered promiscuous mode [ 362.564587][T14918] syzkaller1: entered allmulticast mode [ 362.829871][T14938] netlink: 'syz.4.2251': attribute type 1 has an invalid length. [ 362.930287][T14938] bond9: entered promiscuous mode [ 362.936694][T14938] 8021q: adding VLAN 0 to HW filter on device bond9 [ 363.061001][T14941] 8021q: adding VLAN 0 to HW filter on device bond9 [ 363.069519][T14941] bond9: (slave ipip0): The slave device specified does not support setting the MAC address [ 363.080294][T14941] bond9: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 363.100182][T14941] bond9: (slave ipip0): making interface the new active one [ 363.111116][T14941] ipip0: entered promiscuous mode [ 363.169401][T14941] bond9: (slave ipip0): Enslaving as an active interface with an up link [ 363.458916][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 363.801163][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 363.824486][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 363.845658][T14974] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2262'. [ 364.083366][T14976] bridge3: entered promiscuous mode [ 364.099888][T14976] bridge3: entered allmulticast mode [ 364.307712][T14992] netlink: 'syz.0.2268': attribute type 21 has an invalid length. [ 364.333285][T14990] syzkaller0: entered promiscuous mode [ 364.347709][T14990] syzkaller0: entered allmulticast mode [ 364.356296][T14992] netlink: 'syz.0.2268': attribute type 4 has an invalid length. [ 364.375502][T14992] netlink: 'syz.0.2268': attribute type 5 has an invalid length. [ 364.435956][T14990] bridge_slave_0: invalid flags given to default FDB implementation [ 364.858327][T15011] netlink: 'syz.3.2272': attribute type 13 has an invalid length. [ 365.189505][T15025] bridge3: port 1(erspan0) entered disabled state [ 365.224124][T15025] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 365.496765][T15036] ipvlan1: entered allmulticast mode [ 365.513463][T15036] veth0_vlan: entered allmulticast mode [ 365.541151][T15036] __nla_validate_parse: 9 callbacks suppressed [ 365.541251][T15036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2280'. [ 365.719019][T15061] syzkaller0: entered promiscuous mode [ 365.788076][T15061] syzkaller0: entered allmulticast mode [ 365.819598][T15062] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2279'. [ 365.912600][T15054] tipc: Enabled bearer , priority 0 [ 365.970422][T15035] tipc: Resetting bearer [ 366.074760][T15035] tipc: Disabling bearer [ 366.347449][T15075] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2285'. [ 366.355030][T15092] veth1_to_bond: Caught tx_queue_len zero misconfig [ 366.457322][T15075] openvswitch: netlink: Message has 512 unknown bytes. [ 366.565664][T15102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.690298][T15101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.979315][T15110] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 367.013286][T15110] syzkaller1: linktype set to 774 [ 367.082377][T15110] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 367.422152][T15091] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 367.563907][T15097] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 367.619419][T15097] bond0 (unregistering): Released all slaves [ 368.146678][T15162] gretap1: entered promiscuous mode [ 368.226075][T15168] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.396025][T15168] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.515239][T15168] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.648563][ T5959] IPVS: starting estimator thread 0... [ 368.667465][T15168] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.693989][T15189] syzkaller0: entered promiscuous mode [ 368.714947][T15189] syzkaller0: entered allmulticast mode [ 368.744710][T15191] IPVS: using max 32 ests per chain, 76800 per kthread [ 369.179089][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 369.407193][T15193] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 369.458109][T15218] netlink: Failed to add filter helper -22 [ 369.486208][T15218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.741395][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 370.149627][T15245] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 370.198931][T15250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2315'. [ 370.250875][T15250] ipvlan0: entered promiscuous mode [ 370.265342][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2317'. [ 370.279409][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2317'. [ 370.297046][T15250] ipvlan0: left promiscuous mode [ 370.314288][T15258] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2317'. [ 370.347593][T15255] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2317'. [ 370.457322][T15255] geneve3: entered promiscuous mode [ 370.482755][T15255] geneve3: entered allmulticast mode [ 370.512302][ T6883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.631777][ T5959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.660429][ T5959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.714406][ T5959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.049886][T15287] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 371.066868][T15287] bond10 (unregistering): Released all slaves [ 372.359948][T15331] vlan2: entered promiscuous mode [ 372.383235][T15331] macvlan0: entered promiscuous mode [ 372.773161][T15358] __nla_validate_parse: 1 callbacks suppressed [ 372.773194][T15358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2338'. [ 372.886820][T15364] bridge0: left allmulticast mode [ 373.004603][T15364] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 373.049786][T15364] veth3: left allmulticast mode [ 373.066794][T15364] bond4: left allmulticast mode [ 373.085537][T15364] batman_adv: batadv0: Interface deactivated: gretap1 [ 373.109087][T15364] geneve3: left promiscuous mode [ 373.120445][T15364] geneve3: left allmulticast mode [ 373.202096][ T6883] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.237112][ T6883] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.249764][ T6883] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.269037][ T6883] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.362608][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.395220][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.439112][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.480660][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.187537][T15418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2349'. [ 375.070767][T15455] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2353'. [ 375.131445][T15463] ip6erspan1: entered allmulticast mode [ 375.179117][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'. [ 375.238169][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2360'. [ 375.588998][T15487] ip6erspan0: entered allmulticast mode [ 376.356048][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 376.388254][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2370'. [ 376.435038][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2370'. [ 376.777304][T15504] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2364'. [ 377.025932][T15555] gretap0: entered allmulticast mode [ 377.091158][T15559] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 377.147285][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2377'. [ 377.829564][T15594] pim6reg: entered allmulticast mode [ 378.234007][T15609] __nla_validate_parse: 1 callbacks suppressed [ 378.234027][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 378.550786][T15622] pim6reg1: entered promiscuous mode [ 378.594032][T15622] pim6reg1: entered allmulticast mode [ 378.648287][T15629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2389'. [ 378.716915][T15641] blkio.reset_stats is deprecated [ 378.872890][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.941271][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2394'. [ 379.344522][T15673] tunl0: Caught tx_queue_len zero misconfig [ 379.563948][T15683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2401'. [ 379.684276][T15688] pim6reg: entered allmulticast mode [ 379.740562][T15689] pim6reg: left allmulticast mode [ 379.847958][T15694] sctp: [Deprecated]: syz.2.2403 (pid 15694) Use of int in max_burst socket option deprecated. [ 379.847958][T15694] Use struct sctp_assoc_value instead [ 380.144898][T15711] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2407'. [ 380.328197][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 381.209997][T15743] netlink: 'syz.2.2411': attribute type 49 has an invalid length. [ 381.271501][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880283ccc00: rx timeout, send abort [ 381.583510][T15761] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2416'. [ 381.622510][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2416'. [ 381.697549][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 381.772060][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880283cd800: rx timeout, send abort [ 381.780702][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880283ccc00: abort rx timeout. Force session deactivation [ 382.280457][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880283cd800: abort rx timeout. Force session deactivation [ 382.296218][T15800] lo: entered promiscuous mode [ 382.306091][T15800] tunl0: entered promiscuous mode [ 382.315165][T15800] gre0: entered promiscuous mode [ 382.321158][T15800] erspan0: entered promiscuous mode [ 382.328172][T15800] ip_vti0: entered promiscuous mode [ 382.342414][T15800] ip6_vti0: entered promiscuous mode [ 382.364646][T15800] sit0: entered promiscuous mode [ 382.424274][T15800] ip6tnl0: entered promiscuous mode [ 382.441468][T15800] ip6gre0: entered promiscuous mode [ 382.475453][T15800] ip6gretap0: entered promiscuous mode [ 382.482337][T15800] bridge0: entered promiscuous mode [ 382.488153][T15800] vcan0: entered promiscuous mode [ 382.495080][T15800] bond0: entered promiscuous mode [ 382.500253][T15800] bond_slave_0: entered promiscuous mode [ 382.507748][T15800] bond_slave_1: entered promiscuous mode [ 382.515809][T15800] team0: entered promiscuous mode [ 382.579496][T15800] team_slave_0: entered promiscuous mode [ 382.617364][T15800] team_slave_1: entered promiscuous mode [ 382.654564][T15800] dummy0: entered promiscuous mode [ 382.662960][T15800] nlmon0: entered promiscuous mode [ 382.668794][T15800] batadv0: entered promiscuous mode [ 382.675365][T15800] vxcan0: entered promiscuous mode [ 382.681209][T15800] vxcan1: entered promiscuous mode [ 382.696454][T15800] veth0: entered promiscuous mode [ 382.706443][T15800] veth1: entered promiscuous mode [ 382.717273][T15800] wg0: entered promiscuous mode [ 382.726157][T15800] wg1: entered promiscuous mode [ 382.735631][T15800] wg2: entered promiscuous mode [ 382.741190][T15800] veth1_to_bridge: entered promiscuous mode [ 382.752888][T15800] veth0_to_bond: entered promiscuous mode [ 382.760683][T15800] veth1_to_bond: entered promiscuous mode [ 382.770511][T15800] veth0_to_team: entered promiscuous mode [ 382.777620][T15800] veth1_to_team: entered promiscuous mode [ 382.784678][T15800] veth0_to_batadv: entered promiscuous mode [ 382.797591][T15800] batadv_slave_0: entered promiscuous mode [ 382.805037][T15800] veth1_to_batadv: entered promiscuous mode [ 382.812424][T15800] batadv_slave_1: entered promiscuous mode [ 382.819190][T15800] xfrm0: entered promiscuous mode [ 382.825503][T15800] veth0_to_hsr: entered promiscuous mode [ 383.230462][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2431'. [ 383.449716][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2434'. [ 383.595364][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2434'. [ 383.671379][T15854] 8021q: adding VLAN 0 to HW filter on device bond10 [ 383.775789][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'. [ 383.886896][T15858] 8021q: adding VLAN 0 to HW filter on device bond11 [ 383.906635][T15858] bond10: (slave bond11): Enslaving as an active interface with an up link [ 383.928970][T15865] bond10 (unregistering): (slave bond11): Releasing backup interface [ 383.940709][T15865] bond10 (unregistering): Released all slaves [ 383.993188][T15867] tc_dump_action: action bad kind [ 384.260087][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 384.309443][T15884] netlink: 'syz.3.2438': attribute type 1 has an invalid length. [ 384.318387][T15876] openvswitch: netlink: Flow actions attr not present in new flow. [ 384.714910][T15884] bridge4: entered promiscuous mode [ 384.738935][T15904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2442'. [ 384.776744][T15884] bond6: (slave bridge4): making interface the new active one [ 384.814670][T15884] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 384.850341][T15908] Bluetooth: MGMT ver 1.23 [ 385.499602][T15928] lo speed is unknown, defaulting to 1000 [ 385.629932][T15928] lo speed is unknown, defaulting to 1000 [ 385.645273][T15942] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2454'. [ 385.677648][T15942] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2454'. [ 385.738606][T15938] dvmrp0: entered allmulticast mode [ 385.785853][T15940] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2453'. [ 385.939111][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2456'. [ 386.010203][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2456'. [ 386.175080][T15959] syzkaller0: entered promiscuous mode [ 386.196269][T15959] syzkaller0: entered allmulticast mode [ 386.847617][T15961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.163201][T15961] veth1_vlan: left allmulticast mode [ 387.275376][T15991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.333908][T15990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.391921][ T5959] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.426211][ T5959] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 387.455552][ T5959] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 387.490735][ T5959] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.509859][ T5959] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 387.532790][ T5959] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 387.591810][ T5959] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.609999][ T5959] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 387.640141][ T5959] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 387.671472][ T5959] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.693571][ T5959] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 387.727773][ T5959] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 388.189168][T16010] lo speed is unknown, defaulting to 1000 [ 388.330462][T16010] lo speed is unknown, defaulting to 1000 [ 388.437404][T16038] netlink: 'syz.3.2475': attribute type 11 has an invalid length. [ 388.960536][T16065] netlink: 'syz.1.2479': attribute type 1 has an invalid length. [ 389.070118][T16075] __nla_validate_parse: 6 callbacks suppressed [ 389.070138][T16075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2479'. [ 389.227659][T16070] veth13: entered allmulticast mode [ 389.526519][T16086] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2483'. [ 389.544801][T16088] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2483'. [ 390.244374][T16116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2489'. [ 391.176776][T16125] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2491'. [ 391.573581][T16136] netlink: 'syz.1.2491': attribute type 3 has an invalid length. [ 392.739529][T16154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2497'. [ 400.162335][T16195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 401.143398][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 403.625881][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2519'. [ 403.710623][T16253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2519'. [ 404.500056][T16262] syzkaller0: entered promiscuous mode [ 404.528530][T16262] syzkaller0: entered allmulticast mode [ 405.756909][T16274] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 405.794169][T16276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2524'. [ 405.828554][T16274] netlink: 1331 bytes leftover after parsing attributes in process `syz.2.2523'. [ 406.389722][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'. [ 406.479405][T16287] netlink: 'syz.4.2528': attribute type 30 has an invalid length. [ 406.773084][T16293] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2529'. [ 407.100054][T16286] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 407.699327][T16286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.780333][T16307] ip6gre0: left promiscuous mode [ 408.214620][T16310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2533'. [ 409.078909][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'. [ 409.615196][T16336] openvswitch: netlink: IPv4 tunnel dst address is zero [ 409.747124][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2539'. [ 410.725807][T16358] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2543'. [ 410.778341][T16355] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2545'. [ 410.871502][T16358] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2543'. [ 411.053007][T16366] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 412.390672][T16379] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2552'. [ 413.621472][T16402] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 413.682915][T16401] netlink: 'syz.3.2557': attribute type 28 has an invalid length. [ 413.707621][T16397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2555'. [ 413.719118][T16401] netlink: 'syz.3.2557': attribute type 3 has an invalid length. [ 413.787998][T16401] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2557'. [ 413.844766][T16396] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 415.589153][T16433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2565'. [ 415.681943][T16432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 415.721122][T16433] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 415.738189][T16432] netlink: 'syz.4.2566': attribute type 7 has an invalid length. [ 415.790025][T16433] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 415.815983][T16432] netlink: 'syz.4.2566': attribute type 8 has an invalid length. [ 415.849865][T16433] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 415.884599][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 415.931396][T16438] lo: entered allmulticast mode [ 415.969797][T16438] lo: left allmulticast mode [ 416.087928][T16443] netlink: 'syz.3.2569': attribute type 39 has an invalid length. [ 416.788330][T16450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.387221][T16463] netlink: 'syz.0.2573': attribute type 1 has an invalid length. [ 417.655504][T16459] bond7: invalid NS target :: specified for addition [ 417.687516][T16459] bond7: option ns_ip6_target: invalid value (18446744073709551615) [ 417.754981][T16459] bond7 (unregistering): Released all slaves [ 418.183147][T16474] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2576'. [ 418.190550][T16463] 8021q: adding VLAN 0 to HW filter on device bond6 [ 418.300039][T16470] bond6 (unregistering): Released all slaves [ 418.774686][T16478] tipc: New replicast peer: 255.255.255.255 [ 418.811128][T16478] tipc: Enabled bearer , priority 10 [ 418.828400][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'. [ 418.855894][T16478] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 418.950368][T16487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2578'. [ 419.020791][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2577'. [ 419.567669][T16478] bond7: entered promiscuous mode [ 419.595817][T16478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 419.630389][T16486] bond7: entered allmulticast mode [ 419.879403][T16492] bond7: (slave bridge0): making interface the new active one [ 419.923114][T16492] bridge0: entered promiscuous mode [ 419.950246][T16492] bridge0: entered allmulticast mode [ 420.094587][T16492] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 420.221600][ T5791] tipc: Node number set to 2524944425 [ 422.568262][T16499] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 422.634025][T16499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.194698][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2592'. [ 423.496409][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 423.574818][T16540] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 424.566611][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2599'. [ 424.779408][T16556] vlan0: entered promiscuous mode [ 425.652378][T16561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.849185][T16561] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.030138][T16561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.419888][T16561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.496242][T16561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.612008][T16561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 426.807711][T16561] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 426.834611][ T10] lo speed is unknown, defaulting to 1000 [ 426.909419][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.917699][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.981835][ T10] syz2: Port: 1 Link ACTIVE [ 427.295903][T16574] tipc: Resetting bearer [ 427.356913][T16574] tipc: Resetting bearer [ 427.885084][T16585] ±ÿ: renamed from lo (while UP) [ 428.980953][T16596] netlink: 'syz.3.2609': attribute type 1 has an invalid length. [ 429.076176][T16599] openvswitch: netlink: Missing valid actions attribute. [ 429.096499][T16599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.548830][T16596] 8021q: adding VLAN 0 to HW filter on device bond8 [ 429.562005][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'. [ 429.768779][T16611] batadv0: left promiscuous mode [ 429.828263][T16611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.888720][T16611] bond8: (slave batadv0): making interface the new active one [ 429.932590][T16611] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 429.969004][T16609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2613'. [ 430.079360][T16609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2613'. [ 432.129462][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2623'. [ 433.816801][T16678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2628'. [ 434.544904][T16690] netlink: 'syz.3.2632': attribute type 13 has an invalid length. [ 434.688326][T16690] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2632'. [ 435.776742][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 435.798382][T16719] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2639'. [ 436.209002][T16727] IPv6: addrconf: prefix option has invalid lifetime [ 436.216769][T16727] IPv6: addrconf: prefix option has invalid lifetime [ 436.347937][T16730] netlink: 'syz.0.2643': attribute type 13 has an invalid length. [ 436.490977][T16723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2638'. [ 436.549763][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 438.029224][T16759] netlink: 'syz.1.2645': attribute type 10 has an invalid length. [ 438.100301][T16759] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2645'. [ 438.166452][T16764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2645'. [ 438.287436][T16764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2645'. [ 438.378959][T16768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2647'. [ 438.401151][T16764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2645'. [ 438.555485][T16759] team0: Port device wg2 added [ 438.591803][T16768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.895009][T16768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.863792][T16787] __nla_validate_parse: 6 callbacks suppressed [ 439.863886][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2651'. [ 439.985169][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 440.314136][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.625209][T16793] =v: renamed from veth0_to_bond (while UP) [ 441.634660][T16809] geneve0: Caught tx_queue_len zero misconfig [ 441.751153][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2658'. [ 441.878522][T16820] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2661'. [ 441.993119][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2661'. [ 442.124196][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2660'. [ 442.610760][T16828] macvtap0: entered promiscuous mode [ 442.620816][T16828] bridge0: entered promiscuous mode [ 443.246180][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 443.390619][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'. [ 443.440923][T16838] xt_l2tp: missing protocol rule (udp|l2tpip) [ 443.647726][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 443.662950][ T5609] block nbd5: Receive control failed (result -32) [ 443.667936][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'. [ 444.126246][T16853] bond10: option lacp_active: invalid value (5) [ 444.126287][T16857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.197259][T16853] bond10 (unregistering): Released all slaves [ 445.056719][T16860] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 445.118766][T16867] netlink: 'syz.3.2673': attribute type 1 has an invalid length. [ 445.146355][T16860] bond8 (unregistering): Released all slaves [ 445.187216][T16867] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2673'. [ 445.305477][T16867] netlink: 'syz.3.2673': attribute type 1 has an invalid length. [ 445.389887][T16867] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.2673'. [ 445.769124][T16863] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 445.838039][T16863] bond7 (unregistering): Released all slaves [ 446.436475][T16871] lo speed is unknown, defaulting to 1000 [ 446.555060][T16871] lo speed is unknown, defaulting to 1000 [ 447.257919][T16900] netlink: 'syz.0.2676': attribute type 3 has an invalid length. [ 447.361107][T16900] netlink: 'syz.0.2676': attribute type 1 has an invalid length. [ 447.456668][T16900] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2676'. [ 447.609620][T16903] netlink: 'syz.3.2679': attribute type 15 has an invalid length. [ 447.777925][T16913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 447.789795][T16913] IPv6: NLM_F_CREATE should be set when creating new route [ 447.878008][T16871] sctp_getsockopt_maxseg: 23 callbacks suppressed [ 447.878076][T16871] sctp: [Deprecated]: syz.4.2674 (pid 16871) Use of int in maxseg socket option. [ 447.878076][T16871] Use struct sctp_assoc_value instead [ 448.532785][T16921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.540862][T16921] IPv6: NLM_F_CREATE should be set when creating new route [ 448.549264][T16921] IPv6: NLM_F_CREATE should be set when creating new route [ 451.881880][T16960] syzkaller0: entered promiscuous mode [ 451.906099][T16960] syzkaller0: entered allmulticast mode [ 452.078303][T16968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2696'. [ 452.875505][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.899487][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.918205][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.940753][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.954817][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 453.203585][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.237965][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.247736][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.276133][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.305133][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 453.560771][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2699'. [ 453.563420][T16985] vlan2: entered promiscuous mode [ 453.986049][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2702'. [ 454.150544][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2702'. [ 454.200356][T17005] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2702'. [ 455.279208][T17008] syzkaller0: entered promiscuous mode [ 455.403243][T17008] syzkaller0: entered allmulticast mode [ 455.424113][ T5609] Bluetooth: hci5: command tx timeout [ 455.662828][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.296942][T17035] netlink: 'syz.3.2708': attribute type 30 has an invalid length. [ 457.147037][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2711'. [ 457.203763][T17048] tipc: Invalid UDP bearer configuration [ 457.203901][T17048] tipc: Enabling of bearer rejected, failed to enable media [ 457.423810][T17044] tipc: Invalid UDP bearer configuration [ 457.423977][T17044] tipc: Enabling of bearer rejected, failed to enable media [ 457.503437][ T5609] Bluetooth: hci5: command tx timeout [ 458.159898][T16742] syz_tun (unregistering): left allmulticast mode [ 458.332816][T16742] bond0: (slave syz_tun): Releasing backup interface [ 458.567713][T17069] netlink: 'syz.4.2715': attribute type 13 has an invalid length. [ 458.929937][T17073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2716'. [ 459.219156][T16978] lo speed is unknown, defaulting to 1000 [ 459.311102][T16978] lo speed is unknown, defaulting to 1000 [ 459.459747][T17082] openvswitch: netlink: Flow key attr not present in new flow. [ 459.583638][ T5609] Bluetooth: hci5: command tx timeout [ 459.850779][T17091] IPVS: Unknown mcast interface: virt_wifi0 [ 460.168668][T17098] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 460.972725][T17132] netlink: 'syz.0.2725': attribute type 2 has an invalid length. [ 461.043734][T17132] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2725'. [ 461.329252][T17133] lo speed is unknown, defaulting to 1000 [ 461.390200][T17133] lo speed is unknown, defaulting to 1000 [ 461.664309][ T5609] Bluetooth: hci5: command tx timeout [ 461.824950][T17148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2728'. [ 462.011105][T17148] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2728'. [ 462.566080][T16978] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.575719][T16978] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.602683][T16978] bridge_slave_0: entered allmulticast mode [ 462.635162][T16978] bridge_slave_0: entered promiscuous mode [ 462.693125][T16978] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.719860][T16978] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.729962][T16978] bridge_slave_1: entered allmulticast mode [ 462.757488][T16978] bridge_slave_1: entered promiscuous mode [ 462.984475][T16978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.287615][T17174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2732'. [ 463.427947][T17163] syzkaller0: entered promiscuous mode [ 463.486892][T17163] syzkaller0: entered allmulticast mode [ 463.528049][T16978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.156916][T16978] team0: Port device team_slave_0 added [ 470.241502][T16978] team0: Port device team_slave_1 added [ 470.588420][T16978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.644426][T16978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.788343][T16978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.890972][T16978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.947411][T16978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.010429][T16978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.195438][T17222] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 471.231446][T17220] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2739'. [ 471.270578][T17222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.665273][T17217] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 471.730872][T16978] hsr_slave_0: entered promiscuous mode [ 471.739159][T16978] hsr_slave_1: entered promiscuous mode [ 471.760435][T16978] debugfs: 'hsr0' already exists in 'hsr' [ 471.767902][T16978] Cannot create hsr debugfs directory [ 472.205344][T17229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2742'. [ 472.237783][T17229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2742'. [ 473.679647][T17252] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 473.714184][T17252] bond10 (unregistering): Released all slaves [ 474.274941][T17267] tc_dump_action: action bad kind [ 476.834571][T16978] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.934079][T16978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.970708][T16978] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.077302][T16978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.114335][T16978] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.167619][T16978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.213234][T16978] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.336599][T16978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.543556][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2760'. [ 478.781188][T17325] lo speed is unknown, defaulting to 1000 [ 478.916984][T17330] ieee802154 phy0 wpan0: encryption failed: -90 [ 478.947433][T17325] lo speed is unknown, defaulting to 1000 [ 479.010773][T16978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.966082][T16978] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.096979][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.105459][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.317791][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.326210][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.694658][T17375] tc_dump_action: action bad kind [ 482.850769][T17378] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2772'. [ 485.791034][T17411] netlink: 'syz.3.2780': attribute type 9 has an invalid length. [ 485.830036][T17411] netlink: 'syz.3.2780': attribute type 5 has an invalid length. [ 486.086017][T16978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.438298][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'. [ 487.496727][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2784'. [ 488.459610][T17448] netlink: 'syz.4.2786': attribute type 5 has an invalid length. [ 488.848844][T17462] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 490.059229][T17474] veth1_to_bond: entered allmulticast mode [ 490.098331][T17478] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2794'. [ 490.115329][T17473] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 490.186538][T17474] veth1_to_bond: entered promiscuous mode [ 490.207672][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 490.254007][T17479] ipt_REJECT: TCP_RESET invalid for non-tcp [ 490.307906][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 490.350088][T17473] veth1_to_bond (unregistering): left allmulticast mode [ 490.454877][T17473] veth1_to_bond (unregistering): left promiscuous mode [ 490.861320][T16978] veth0_vlan: entered promiscuous mode [ 491.081554][T16978] veth1_vlan: entered promiscuous mode [ 491.515187][T16978] veth0_macvtap: entered promiscuous mode [ 491.590389][T16978] veth1_macvtap: entered promiscuous mode [ 491.837469][T16978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.925614][T16978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.967101][T17509] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 492.408997][T17509] veth1_vlan: left promiscuous mode [ 492.419097][T17509] veth0_vlan: left promiscuous mode [ 492.444973][T17509] veth0_vlan: entered promiscuous mode [ 492.461420][T17509] veth1_vlan: entered promiscuous mode [ 492.535182][T17509] veth1_macvtap: left promiscuous mode [ 492.575559][T17509] veth0_macvtap: left promiscuous mode [ 492.656364][T17509] veth0_macvtap: entered promiscuous mode [ 492.724056][T17509] veth1_macvtap: entered promiscuous mode [ 492.985302][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.089408][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.166647][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.203087][T17540] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2808'. [ 493.227302][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.428665][T17509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.549588][T17509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.036497][T17509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.110031][T17509] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 494.135168][T17509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.347996][T17509] 8021q: adding VLAN 0 to HW filter on device bond5 [ 494.358183][T17509] batman_adv: batadv0: Interface activated: gretap1 [ 494.436614][T17509] 8021q: adding VLAN 0 to HW filter on device bond6 [ 494.468618][T17509] 8021q: adding VLAN 0 to HW filter on device bond7 [ 494.509095][T17509] 8021q: adding VLAN 0 to HW filter on device bond9 [ 494.954223][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.997606][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.802319][ T5962] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.832078][ T5962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.878835][T17579] openvswitch: netlink: EtherType 200 is less than min 600 [ 496.308698][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.743217][ T6882] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.794069][ T6882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.965294][ T5962] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.967885][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.008085][ T5962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.066972][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.216695][T17595] netlink: 'syz.1.2819': attribute type 62 has an invalid length. [ 497.282038][ T1173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.310977][ T1173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.622696][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.704460][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.764918][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.115034][T17609] netlink: 'syz.1.2822': attribute type 1 has an invalid length. [ 498.680195][T17619] ip_tables: iptables: counters copy to user failed while replacing table [ 499.648869][T17629] netlink: 'syz.4.2826': attribute type 10 has an invalid length. [ 499.729518][T17634] Cannot find add_set index 0 as target [ 500.080649][T17637] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2828'. [ 500.172821][T17637] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2828'. [ 500.277019][T17637] netlink: 'syz.5.2828': attribute type 4 has an invalid length. [ 500.331023][T17642] netlink: 'syz.5.2828': attribute type 4 has an invalid length. [ 501.511991][T17665] ªªªªªª: renamed from vlan0 (while UP) [ 501.746285][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.779220][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2834'. [ 501.953715][T17671] netlink: 'syz.1.2834': attribute type 1 has an invalid length. [ 502.456618][T17670] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2834'. [ 503.743326][T17695] netlink: 'syz.1.2841': attribute type 29 has an invalid length. [ 503.869421][T17695] netlink: 'syz.1.2841': attribute type 39 has an invalid length. [ 503.949238][T17696] af_packet: tpacket_rcv: packet too big, clamped from 200 to 4294967272. macoff=96 [ 504.258519][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2844'. [ 504.324428][T17703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.829155][T17703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.046743][T17713] openvswitch: netlink: Missing key (keys=40, expected=100) [ 506.139862][T17725] netlink: 'syz.5.2849': attribute type 7 has an invalid length. [ 506.180420][T17725] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2849'. [ 506.885976][T17731] lo speed is unknown, defaulting to 1000 [ 507.064104][T17731] lo speed is unknown, defaulting to 1000 [ 508.334278][T17745] pimreg: entered allmulticast mode [ 508.644315][T17756] x_tables: unsorted entry at hook 4 [ 508.867402][T17759] xt_hashlimit: size too large, truncated to 1048576 [ 508.877316][T17750] v: renamed from veth0_vlan (while UP) [ 509.506810][T17766] netlink: 660 bytes leftover after parsing attributes in process `syz.3.2860'. [ 509.547462][T17769] tunl0: Caught tx_queue_len zero misconfig [ 509.566325][T17766] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2860'. [ 510.846898][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.868420][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.890341][T17809] netlink: 'syz.0.2870': attribute type 1 has an invalid length. [ 510.892413][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.914830][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.928618][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.002904][T17809] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2870'. [ 511.113572][T17809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2870'. [ 511.127327][T17811] ip6gretap0: left promiscuous mode [ 511.172516][T17121] lo speed is unknown, defaulting to 1000 [ 511.183535][T17121] syz0: Port: 1 Link ACTIVE [ 511.907313][T17838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2875'. [ 512.056518][T17837] syzkaller1: entered promiscuous mode [ 512.066483][T17837] syzkaller1: entered allmulticast mode [ 512.135662][T17837] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2874'. [ 512.167116][T17844] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 512.283911][T17848] netlink: 'syz.4.2877': attribute type 5 has an invalid length. [ 512.315346][T17844] tipc: Enabled bearer , priority 0 [ 512.324083][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2877'. [ 512.335926][T17844] syzkaller0: entered promiscuous mode [ 512.342827][T17848] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2877'. [ 512.356216][T17844] syzkaller0: entered allmulticast mode [ 512.576341][T17855] netlink: 'syz.4.2878': attribute type 1 has an invalid length. [ 512.585479][T17855] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2878'. [ 512.657711][T17854] tipc: Resetting bearer [ 512.729935][T17843] tipc: Resetting bearer [ 512.793864][T17843] tipc: Disabling bearer [ 513.022354][ T5609] Bluetooth: hci0: command tx timeout [ 513.065382][T17808] lo speed is unknown, defaulting to 1000 [ 513.203615][T17808] lo speed is unknown, defaulting to 1000 [ 513.807088][T17897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2887'. [ 513.977975][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2888'. [ 513.989229][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2888'. [ 514.000719][T17899] netlink: 'syz.5.2888': attribute type 11 has an invalid length. [ 514.010379][T17899] netlink: 'syz.5.2888': attribute type 14 has an invalid length. [ 514.484555][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2892'. [ 515.101776][ T5609] Bluetooth: hci0: command tx timeout [ 515.238563][T17808] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.272112][T17808] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.280459][T17808] bridge_slave_0: entered allmulticast mode [ 515.330304][T17808] bridge_slave_0: entered promiscuous mode [ 515.382220][T17808] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.414688][T17808] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.452070][T17808] bridge_slave_1: entered allmulticast mode [ 515.516113][T17808] bridge_slave_1: entered promiscuous mode [ 515.668419][ T30] audit: type=1800 audit(1787517386.062:7): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2898" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=91 res=0 errno=0 [ 515.899353][T17952] Cannot find set identified by id 0 to match [ 515.927921][T17808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.949246][T17808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.195898][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2903'. [ 516.310620][T17808] team0: Port device team_slave_0 added [ 516.332842][T17977] netlink: 'syz.3.2906': attribute type 61 has an invalid length. [ 516.348040][T17808] team0: Port device team_slave_1 added [ 516.539995][T17808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.552794][T17808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.630784][T17808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.674887][T17808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.689957][T17808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.769572][T17808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.004165][T17808] hsr_slave_0: entered promiscuous mode [ 517.025971][T17808] hsr_slave_1: entered promiscuous mode [ 517.049128][T17808] debugfs: 'hsr0' already exists in 'hsr' [ 517.072756][T17808] Cannot create hsr debugfs directory [ 517.183299][ T5609] Bluetooth: hci0: command tx timeout [ 517.254289][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2912'. [ 517.329067][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2912'. [ 518.250158][T18000] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.261026][T18000] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.060988][T18000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.261931][ T5609] Bluetooth: hci0: command tx timeout [ 520.301166][T18028] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2917'. [ 520.393636][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2917'. [ 520.424545][ T1173] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.452785][ T1173] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.592016][ T6882] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.632069][ T6882] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.915331][T18048] netlink: 550 bytes leftover after parsing attributes in process `syz.0.2922'. [ 521.077995][T17808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 521.108490][T17808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 521.137405][T17808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.237413][T18054] netlink: 'syz.0.2923': attribute type 11 has an invalid length. [ 521.317442][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2923'. [ 521.538170][T18061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2926'. [ 521.573355][T17808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 521.586840][T17808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 521.604275][T18064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2925'. [ 521.613836][T17808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.660305][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 521.887161][T17808] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 521.906018][T17808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 521.919616][T17808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 521.946788][T17808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.174963][T17808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 522.198533][T17808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 522.232508][T17808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.325452][T18088] lo: Caught tx_queue_len zero misconfig [ 522.346415][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'. [ 522.404038][T18088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2931'. [ 522.938048][T18102] netlink: 'syz.0.2934': attribute type 11 has an invalid length. [ 522.990283][T18100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 523.048928][T18102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.077606][T18102] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 523.124879][T18102] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 523.139048][T18102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.220810][T18102] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 523.257936][T18102] 8021q: adding VLAN 0 to HW filter on device bond6 [ 523.641467][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2938'. [ 524.004580][T18124] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2940'. [ 529.035245][T18150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2943'. [ 529.044607][T18150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2943'. [ 533.271312][T18132] tipc: Enabling of bearer rejected, failed to enable media [ 533.473188][T17808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 533.536065][T17808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.738901][T18177] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2947'. [ 533.805293][T18163] bond10: option min_links: invalid value (18446744073709551612) [ 533.815388][T18163] bond10: option min_links: allowed values 0 - 2147483647 [ 533.836032][T18163] bond10 (unregistering): Released all slaves [ 533.891330][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 533.930474][T18184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'. [ 533.974920][T18184] netlink: 'syz.0.2946': attribute type 12 has an invalid length. [ 533.997249][T17808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 534.052410][T17808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.185644][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 534.215624][T17808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 534.227779][T18184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'. [ 534.281240][T17808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.296687][T18184] netlink: 'syz.0.2946': attribute type 12 has an invalid length. [ 534.315858][T17808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 534.406296][T17808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.623045][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'. [ 535.119043][T18216] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2956'. [ 535.363904][T17808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.405556][T18219] netlink: 'syz.4.2957': attribute type 9 has an invalid length. [ 535.469028][T17808] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.545225][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.552563][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.597885][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.605293][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.371735][T18248] netlink: 'syz.3.2965': attribute type 30 has an invalid length. [ 536.523164][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2965'. [ 536.637066][T18255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2966'. [ 536.648927][T18248] bond10: option arp_missed_max: invalid value (0) [ 536.657327][T18248] bond10: option arp_missed_max: allowed values 1 - 255 [ 536.694424][T18248] bond10 (unregistering): Released all slaves [ 537.108117][T18250] lo speed is unknown, defaulting to 1000 [ 537.146704][T18250] lo speed is unknown, defaulting to 1000 [ 537.603255][T18275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2969'. [ 537.982972][T18290] ip_tables: iptables: counters copy to user failed while replacing table [ 538.691674][T17808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.808678][T18288] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.2972'. [ 538.838425][ T5959] IPVS: starting estimator thread 0... [ 538.845398][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 538.852506][T18308] IPVS: fo: FWM 3 0x00000003 - no destination available [ 538.884867][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 538.900798][T18308] IPVS: fo: FWM 3 0x00000003 - no destination available [ 538.934277][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 538.958133][T18308] IPVS: fo: FWM 3 0x00000003 - no destination available [ 538.974866][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 538.991847][T18308] IPVS: fo: FWM 3 0x00000003 - no destination available [ 539.005758][T18309] IPVS: using max 31 ests per chain, 74400 per kthread [ 539.018361][T18308] IPVS: fo: FWM 3 0x00000003 - no destination available [ 539.053725][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.068704][T18308] IPVS: fo: FWM 3 0x00000003 - no destination available [ 539.078934][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.097010][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.114332][T18308] IPVS: fo: FWM 3 0x00000003 - no destination available [ 539.140218][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.161462][T18308] IPVS: fo: FWM 3 0x00000003 - no destination available [ 539.179047][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.194133][T17808] veth0_vlan: entered promiscuous mode [ 539.206108][T18310] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2975'. [ 539.218765][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.228172][T18308] IPVS: fo: FWM 3 0x00000003 - no destination available [ 539.243388][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.292646][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.315203][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.346501][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.379602][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.414331][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.427847][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.444752][T17808] veth1_vlan: entered promiscuous mode [ 539.458661][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.480081][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.495888][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.524614][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.536180][T17808] veth0_macvtap: entered promiscuous mode [ 539.543417][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.557703][T17808] veth1_macvtap: entered promiscuous mode [ 539.564773][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.576246][T18306] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 539.634794][T17808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.746211][T17808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.965773][ T6883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.231164][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.242889][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.261452][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.272614][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.347870][T18338] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2984'. [ 540.391219][T18339] netlink: 'syz.0.2983': attribute type 1 has an invalid length. [ 540.400389][ T5961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.430351][T18338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2984'. [ 540.609593][ T5961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.660950][ T5961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.863883][T18347] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2986'. [ 540.943924][T18352] netlink: 'syz.3.2988': attribute type 1 has an invalid length. [ 541.187932][T18362] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 541.311061][T18362] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2990'. [ 541.905951][T18370] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2993'. [ 542.072543][ T4928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 542.088112][ T4928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 542.103571][ T4928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 542.118436][ T4928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 542.136206][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 542.369926][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 542.413935][T18375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2992'. [ 542.415991][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 542.485900][T18380] netlink: 'syz.0.2992': attribute type 1 has an invalid length. [ 542.532267][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 543.019858][T18385] bond7: (slave veth5): Enslaving as an active interface with a down link [ 543.032583][T18388] 8021q: adding VLAN 0 to HW filter on device bond7 [ 543.406051][T18424] tipc: Enabling of bearer rejected, failed to enable media [ 543.476903][T18424] IPVS: length: 188 != 8 [ 543.637393][T18432] C: renamed from veth1_to_team (while UP) [ 543.687948][T18432] netlink: 'syz.1.3006': attribute type 1 has an invalid length. [ 543.731151][T18432] net_ratelimit: 59 callbacks suppressed [ 543.731170][T18432] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 543.753526][T18435] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 544.223879][ T5609] Bluetooth: hci3: command tx timeout [ 544.300121][T18458] __nla_validate_parse: 36 callbacks suppressed [ 544.300144][T18458] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3013'. [ 544.424024][T18465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3014'. [ 544.490821][T18465] tipc: Bearer : already 2 bearers with priority 10 [ 544.513552][T18465] tipc: Bearer : trying with adjusted priority [ 544.520828][T18465] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3014'. [ 544.534074][T18465] tipc: Invalid UDP bearer configuration [ 544.534134][T18465] tipc: Enabling of bearer rejected, failed to enable media [ 544.585383][T18469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.619514][ T5962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.650559][ T5962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.739528][T18379] lo speed is unknown, defaulting to 1000 [ 544.777515][T18379] lo speed is unknown, defaulting to 1000 [ 544.808599][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 544.850625][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'. [ 545.132353][T18481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3019'. [ 545.965956][T18507] bond8: option tlb_dynamic_lb: invalid value (128) [ 546.013904][T18507] bond8 (unregistering): Released all slaves [ 546.164542][T18524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3029'. [ 546.203615][T18510] netlink: 'syz.0.3027': attribute type 1 has an invalid length. [ 546.296066][T18379] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.303387][ T5609] Bluetooth: hci3: command tx timeout [ 546.337364][T18379] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.357480][T18379] bridge_slave_0: entered allmulticast mode [ 546.376460][T18379] bridge_slave_0: entered promiscuous mode [ 546.445861][T18379] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.487064][T18379] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.530272][T18379] bridge_slave_1: entered allmulticast mode [ 546.574152][T18379] bridge_slave_1: entered promiscuous mode [ 546.767337][T18542] netlink: 'syz.3.3034': attribute type 6 has an invalid length. [ 546.897914][T18379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.939006][T18379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.967446][T18549] netlink: 'syz.1.3035': attribute type 13 has an invalid length. [ 546.985348][T18549] netlink: 'syz.1.3035': attribute type 17 has an invalid length. [ 546.987286][T18534] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3032'. [ 547.039347][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'. [ 547.110873][T18549] gretap0: refused to change device tx_queue_len [ 547.119175][T18549] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 547.195551][T18379] team0: Port device team_slave_0 added [ 547.234063][T18379] team0: Port device team_slave_1 added [ 547.305672][T18379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.329219][T18379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.431102][T18379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.460782][T18555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3036'. [ 547.474085][T18379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.481297][T18379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.521078][T18379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.714384][T18379] hsr_slave_0: entered promiscuous mode [ 547.729958][T18379] hsr_slave_1: entered promiscuous mode [ 547.744952][T18379] debugfs: 'hsr0' already exists in 'hsr' [ 547.754978][T18379] Cannot create hsr debugfs directory [ 548.158404][T18574] netlink: 'syz.5.3042': attribute type 4 has an invalid length. [ 548.209007][T18575] netlink: 'syz.5.3042': attribute type 4 has an invalid length. [ 548.382416][ T5609] Bluetooth: hci3: command tx timeout [ 548.570772][T18587] netlink: 'syz.0.3046': attribute type 1 has an invalid length. [ 548.747566][T18587] 8021q: adding VLAN 0 to HW filter on device bond8 [ 548.878579][T18595] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 549.007698][T18587] bond8 (unregistering): (slave gretap2): Releasing backup interface [ 549.039006][T18587] bond8 (unregistering): Released all slaves [ 549.270386][T18604] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.277968][T18604] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.287348][T18604] bridge0: entered allmulticast mode [ 549.305085][T18606] bridge_slave_1: left allmulticast mode [ 549.310954][T18606] bridge_slave_1: left promiscuous mode [ 549.317859][T18606] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.347378][T18606] bridge_slave_0: left allmulticast mode [ 549.354143][T18606] bridge_slave_0: left promiscuous mode [ 549.360071][T18606] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.572892][T18610] syzkaller0: entered promiscuous mode [ 549.588743][T18610] syzkaller0: entered allmulticast mode [ 549.744637][T18617] netlink: 'syz.1.3053': attribute type 21 has an invalid length. [ 549.816304][T18622] __nla_validate_parse: 69 callbacks suppressed [ 549.816324][T18622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3053'. [ 550.462038][ T5609] Bluetooth: hci3: command tx timeout [ 554.852156][T18619] netlink: 'syz.1.3053': attribute type 6 has an invalid length. [ 554.905075][T18628] sit1: entered promiscuous mode [ 555.221268][T18637] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 555.326232][T18637] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 555.449299][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3055'. [ 555.607642][ T5962] IPVS: starting estimator thread 0... [ 555.620913][T18658] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3058'. [ 555.681269][T18658] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3058'. [ 555.696163][T18662] netlink: 'syz.1.3060': attribute type 17 has an invalid length. [ 555.710544][T18658] netlink: 'syz.5.3058': attribute type 5 has an invalid length. [ 555.722489][T18662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3060'. [ 555.734926][T18658] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3058'. [ 555.744541][T18659] IPVS: using max 30 ests per chain, 72000 per kthread [ 555.794779][T18663] xt_hashlimit: max too large, truncated to 1048576 [ 555.946483][T18379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 555.960041][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 555.969482][T18379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 555.989339][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 555.999861][T18379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 556.044528][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.067829][T18379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 556.104563][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.581066][T18678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3063'. [ 556.825508][T18687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3064'. [ 556.870076][T18379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.010474][T18379] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.107480][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.114757][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.232782][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.240064][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.289365][T18693] vxcan0: tx address claim with dest, not broadcast [ 557.330127][T18694] netlink: 'syz.0.3065': attribute type 1 has an invalid length. [ 557.489337][T18694] 8021q: adding VLAN 0 to HW filter on device bond8 [ 557.544454][T18699] bond8: (slave veth9): Enslaving as an active interface with a down link [ 557.616833][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 557.700042][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 557.777047][T18699] netlink: 460 bytes leftover after parsing attributes in process `syz.0.3065'. [ 557.893025][T18702] lo speed is unknown, defaulting to 1000 [ 557.948293][T18710] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 557.985935][T18710] bond8: (slave batadv2): making interface the new active one [ 558.019652][T18710] batadv2: entered promiscuous mode [ 558.055652][T18710] bond8: (slave batadv2): Enslaving as an active interface with an up link [ 558.324060][T18702] lo speed is unknown, defaulting to 1000 [ 558.693825][T18723] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 559.034374][T18729] xt_hashlimit: size too large, truncated to 1048576 [ 559.042535][T18729] xt_hashlimit: max too large, truncated to 1048576 [ 559.500315][T18740] block nbd0: reconnected socket [ 559.544975][T18741] syzkaller0: entered promiscuous mode [ 559.569443][T18741] syzkaller0: entered allmulticast mode [ 559.683059][ T5609] block nbd0: Receive control failed (result -32) [ 559.994150][T18753] ip_tables: iptables: counters copy to user failed while replacing table [ 560.326880][T18379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.410742][T18763] netlink: 'syz.1.3081': attribute type 13 has an invalid length. [ 560.965894][T18379] veth0_vlan: entered promiscuous mode [ 561.005444][T18379] veth1_vlan: entered promiscuous mode [ 561.106091][T18379] veth0_macvtap: entered promiscuous mode [ 561.129395][T18379] veth1_macvtap: entered promiscuous mode [ 561.203058][T18379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.258613][T18379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.373579][ T6883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.399266][ T6883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.457119][T18788] [ 561.459549][T18788] ====================================================== [ 561.466614][T18788] WARNING: possible circular locking dependency detected [ 561.473689][T18788] syzkaller #0 Not tainted [ 561.478147][T18788] ------------------------------------------------------ [ 561.485205][T18788] syz.1.3087/18788 is trying to acquire lock: [ 561.491490][T18788] ffff88801c2b7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 561.502117][T18788] [ 561.502117][T18788] but task is already holding lock: [ 561.509521][T18788] ffffffff8e9e76f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 561.519745][T18788] [ 561.519745][T18788] which lock already depends on the new lock. [ 561.519745][T18788] [ 561.530190][T18788] [ 561.530190][T18788] the existing dependency chain (in reverse order) is: [ 561.539343][T18788] [ 561.539343][T18788] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 561.547154][T18788] cpus_read_lock+0x42/0x160 [ 561.552326][T18788] static_key_slow_inc+0x12/0x30 [ 561.557865][T18788] nbd_genl_reconfigure+0x1301/0x1e80 [ 561.563914][T18788] genl_family_rcv_msg_doit+0x233/0x340 [ 561.570139][T18788] genl_rcv_msg+0x614/0x7a0 [ 561.575236][T18788] netlink_rcv_skb+0x226/0x4a0 [ 561.580579][T18788] genl_rcv+0x28/0x40 [ 561.585155][T18788] netlink_unicast+0x7bd/0x940 [ 561.590586][T18788] netlink_sendmsg+0x813/0xb40 [ 561.595931][T18788] sock_sendmsg_nosec+0x13a/0x180 [ 561.601617][T18788] ____sys_sendmsg+0x54e/0x850 [ 561.606972][T18788] ___sys_sendmsg+0x2a5/0x360 [ 561.612238][T18788] __x64_sys_sendmsg+0x1b1/0x290 [ 561.617771][T18788] do_syscall_64+0x166/0x520 [ 561.622938][T18788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.629406][T18788] [ 561.629406][T18788] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 561.637118][T18788] __mutex_lock+0x19d/0x1550 [ 561.642374][T18788] nbd_queue_rq+0x373/0x1150 [ 561.647537][T18788] blk_mq_dispatch_rq_list+0x499/0x1990 [ 561.653739][T18788] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 561.660708][T18788] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 561.667261][T18788] blk_mq_run_work_fn+0x16c/0x300 [ 561.672933][T18788] process_scheduled_works+0xa88/0x14c0 [ 561.679050][T18788] worker_thread+0xa47/0xfb0 [ 561.684213][T18788] kthread+0x38b/0x480 [ 561.688872][T18788] ret_from_fork+0x514/0xb70 [ 561.694040][T18788] ret_from_fork_asm+0x1a/0x30 [ 561.699380][T18788] [ 561.699380][T18788] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 561.706640][T18788] __mutex_lock+0x19d/0x1550 [ 561.711808][T18788] nbd_queue_rq+0xc1/0x1150 [ 561.716929][T18788] blk_mq_dispatch_rq_list+0x499/0x1990 [ 561.723059][T18788] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 561.729959][T18788] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 561.736549][T18788] blk_mq_run_work_fn+0x16c/0x300 [ 561.742148][T18788] process_scheduled_works+0xa88/0x14c0 [ 561.748275][T18788] worker_thread+0xa47/0xfb0 [ 561.753443][T18788] kthread+0x38b/0x480 [ 561.758098][T18788] ret_from_fork+0x514/0xb70 [ 561.763271][T18788] ret_from_fork_asm+0x1a/0x30 [ 561.768606][T18788] [ 561.768606][T18788] -> #4 (set->srcu){.+.+}-{0:0}: [ 561.775871][T18788] __synchronize_srcu+0xc9/0x2f0 [ 561.781395][T18788] elevator_switch+0x1e8/0x7b0 [ 561.786917][T18788] elevator_change+0x2fa/0x480 [ 561.792297][T18788] elevator_set_default+0x375/0x440 [ 561.798083][T18788] blk_register_queue+0x3f3/0x4e0 [ 561.803796][T18788] __add_disk+0x6cb/0xe30 [ 561.808696][T18788] add_disk_fwnode+0x100/0x3a0 [ 561.814026][T18788] nbd_dev_add+0x733/0xb60 [ 561.819012][T18788] nbd_init+0x15f/0x1e0 [ 561.823735][T18788] do_one_initcall+0x250/0x870 [ 561.829077][T18788] do_initcall_level+0x10a/0x1a0 [ 561.834579][T18788] do_initcalls+0x59/0xa0 [ 561.839483][T18788] kernel_init_freeable+0x29d/0x3e0 [ 561.845246][T18788] kernel_init+0x22/0x1d0 [ 561.850155][T18788] ret_from_fork+0x514/0xb70 [ 561.855322][T18788] ret_from_fork_asm+0x1a/0x30 [ 561.860671][T18788] [ 561.860671][T18788] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 561.868557][T18788] __mutex_lock+0x19d/0x1550 [ 561.873767][T18788] elevator_change+0x1af/0x480 [ 561.879107][T18788] elevator_set_none+0xb5/0x140 [ 561.884545][T18788] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 561.890923][T18788] nbd_start_device+0x189/0xb30 [ 561.896348][T18788] nbd_genl_connect+0x1597/0x1c10 [ 561.901962][T18788] genl_family_rcv_msg_doit+0x233/0x340 [ 561.908095][T18788] genl_rcv_msg+0x614/0x7a0 [ 561.913179][T18788] netlink_rcv_skb+0x226/0x4a0 [ 561.918522][T18788] genl_rcv+0x28/0x40 [ 561.923082][T18788] netlink_unicast+0x7bd/0x940 [ 561.928430][T18788] netlink_sendmsg+0x813/0xb40 [ 561.933770][T18788] sock_sendmsg_nosec+0x13a/0x180 [ 561.939378][T18788] ____sys_sendmsg+0x54e/0x850 [ 561.944745][T18788] ___sys_sendmsg+0x2a5/0x360 [ 561.950005][T18788] __x64_sys_sendmsg+0x1b1/0x290 [ 561.955528][T18788] do_syscall_64+0x166/0x520 [ 561.960689][T18788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.967158][T18788] [ 561.967158][T18788] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 561.975846][T18788] blk_alloc_queue+0x544/0x690 [ 561.981194][T18788] __blk_mq_alloc_disk+0x194/0x390 [ 561.986882][T18788] nbd_dev_add+0x494/0xb60 [ 561.991895][T18788] nbd_init+0x15f/0x1e0 [ 561.996630][T18788] do_one_initcall+0x250/0x870 [ 562.001978][T18788] do_initcall_level+0x10a/0x1a0 [ 562.007494][T18788] do_initcalls+0x59/0xa0 [ 562.012392][T18788] kernel_init_freeable+0x29d/0x3e0 [ 562.018164][T18788] kernel_init+0x22/0x1d0 [ 562.023071][T18788] ret_from_fork+0x514/0xb70 [ 562.028243][T18788] ret_from_fork_asm+0x1a/0x30 [ 562.033596][T18788] [ 562.033596][T18788] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 562.040872][T18788] fs_reclaim_acquire+0x71/0x100 [ 562.046403][T18788] kmem_cache_alloc_noprof+0x64/0x5f0 [ 562.052345][T18788] __kernfs_iattrs+0xdd/0x380 [ 562.057617][T18788] kernfs_iop_setattr+0xe6/0x3f0 [ 562.063144][T18788] notify_change+0xbba/0xea0 [ 562.068311][T18788] do_truncate+0x1c2/0x250 [ 562.073313][T18788] path_openat+0x15b5/0x1d60 [ 562.078472][T18788] do_file_open+0x23e/0x4a0 [ 562.083545][T18788] do_sys_openat2+0x115/0x200 [ 562.088815][T18788] __x64_sys_openat+0x138/0x170 [ 562.094246][T18788] do_syscall_64+0x166/0x520 [ 562.099410][T18788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.106054][T18788] [ 562.106054][T18788] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 562.114626][T18788] __lock_acquire+0x1520/0x2cf0 [ 562.120068][T18788] lock_acquire+0x106/0x350 [ 562.125155][T18788] down_read+0x4a/0x330 [ 562.129881][T18788] kernfs_iop_permission+0x7f/0x430 [ 562.135660][T18788] inode_permission+0x3de/0x5f0 [ 562.141177][T18788] cgroup_attach_permissions+0x28e/0x9f0 [ 562.147391][T18788] __cgroup_procs_write+0x24b/0x320 [ 562.153172][T18788] cgroup_threads_write+0x24/0x50 [ 562.158784][T18788] cgroup_file_write+0x331/0x8f0 [ 562.164293][T18788] kernfs_fop_write_iter+0x3a4/0x540 [ 562.170152][T18788] vfs_write+0x612/0xba0 [ 562.174969][T18788] ksys_write+0x150/0x270 [ 562.179876][T18788] do_syscall_64+0x166/0x520 [ 562.185046][T18788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.191508][T18788] [ 562.191508][T18788] other info that might help us debug this: [ 562.191508][T18788] [ 562.201782][T18788] Chain exists of: [ 562.201782][T18788] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 562.201782][T18788] [ 562.215845][T18788] Possible unsafe locking scenario: [ 562.215845][T18788] [ 562.223333][T18788] CPU0 CPU1 [ 562.228741][T18788] ---- ---- [ 562.234155][T18788] rlock(cpu_hotplug_lock); [ 562.238794][T18788] lock(&nsock->tx_lock); [ 562.245779][T18788] lock(cpu_hotplug_lock); [ 562.252854][T18788] rlock(&root->kernfs_iattr_rwsem); [ 562.258277][T18788] [ 562.258277][T18788] *** DEADLOCK *** [ 562.258277][T18788] [ 562.266458][T18788] locks held by syz.1.3087/18788: 5, last CPU#1: [ 562.272855][T18788] #0: ffff88804204dcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 562.281999][T18788] #1: ffff8880360e2460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 562.290968][T18788] #2: ffff8880645bd080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 562.300883][T18788] #3: ffffffff8eb99ca0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 562.310713][T18788] #4: ffffffff8e9e76f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 562.321820][T18788] [ 562.321820][T18788] stack backtrace: [ 562.327781][T18788] CPU: 1 UID: 0 PID: 18788 Comm: syz.1.3087 Not tainted syzkaller #0 PREEMPT(full) [ 562.327812][T18788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.327831][T18788] Call Trace: [ 562.327842][T18788] [ 562.327855][T18788] dump_stack_lvl+0xe8/0x150 [ 562.327894][T18788] print_circular_bug+0x2e1/0x300 [ 562.327922][T18788] check_noncircular+0x12e/0x150 [ 562.327949][T18788] __lock_acquire+0x1520/0x2cf0 [ 562.327986][T18788] ? __lock_acquire+0x683/0x2cf0 [ 562.328017][T18788] ? __bfs+0x153/0x290 [ 562.328048][T18788] ? __pfx_hlock_conflict+0x10/0x10 [ 562.328083][T18788] ? kernfs_iop_permission+0x7f/0x430 [ 562.328116][T18788] lock_acquire+0x106/0x350 [ 562.328147][T18788] ? kernfs_iop_permission+0x7f/0x430 [ 562.328182][T18788] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 562.328219][T18788] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 562.328253][T18788] down_read+0x4a/0x330 [ 562.328281][T18788] ? kernfs_iop_permission+0x7f/0x430 [ 562.328315][T18788] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 562.328350][T18788] kernfs_iop_permission+0x7f/0x430 [ 562.328386][T18788] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 562.328419][T18788] inode_permission+0x3de/0x5f0 [ 562.328449][T18788] cgroup_attach_permissions+0x28e/0x9f0 [ 562.328484][T18788] __cgroup_procs_write+0x24b/0x320 [ 562.328517][T18788] cgroup_threads_write+0x24/0x50 [ 562.328544][T18788] ? __pfx_cgroup_threads_write+0x10/0x10 [ 562.328570][T18788] cgroup_file_write+0x331/0x8f0 [ 562.328594][T18788] ? kernfs_fop_write_iter+0x22b/0x540 [ 562.328624][T18788] ? __pfx_cgroup_file_write+0x10/0x10 [ 562.328648][T18788] ? __kmalloc_noprof+0x39a/0x720 [ 562.328674][T18788] ? vfs_write+0x22b/0xba0 [ 562.328704][T18788] ? __kmalloc_noprof+0x1af/0x720 [ 562.328741][T18788] ? __pfx_cgroup_file_write+0x10/0x10 [ 562.328765][T18788] kernfs_fop_write_iter+0x3a4/0x540 [ 562.328794][T18788] vfs_write+0x612/0xba0 [ 562.328829][T18788] ? __pfx_vfs_write+0x10/0x10 [ 562.328865][T18788] ? __fget_files+0x2a/0x420 [ 562.328898][T18788] ksys_write+0x150/0x270 [ 562.328932][T18788] ? __pfx_ksys_write+0x10/0x10 [ 562.328968][T18788] do_syscall_64+0x166/0x520 [ 562.328992][T18788] ? trace_irq_disable+0x3b/0x140 [ 562.329023][T18788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.329044][T18788] ? clear_bhb_loop+0x70/0xc0 [ 562.329068][T18788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.329090][T18788] RIP: 0033:0x7f19b319e0d9 [ 562.329110][T18788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.329130][T18788] RSP: 002b:00007f19b40e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 562.329153][T18788] RAX: ffffffffffffffda RBX: 00007f19b3425fa0 RCX: 00007f19b319e0d9 [ 562.329168][T18788] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000005 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 562.329182][T18788] RBP: 00007f19b3235024 R08: 0000000000000000 R09: 0000000000000000 [ 562.329194][T18788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.329208][T18788] R13: 00007f19b3426038 R14: 00007f19b3425fa0 R15: 00007fff6da85898 [ 562.329233][T18788] [ 562.784823][T18802] netlink: 'syz.0.3089': attribute type 4 has an invalid length. [ 562.832723][ T6883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.854210][ T6883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.203628][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.367961][ T6882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.490200][ T6882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.555361][T18802] tipc: Resetting bearer [ 563.611336][T18802] tipc: Resetting bearer [ 563.617691][T18802] team0: Port device syz_tun removed [ 563.678276][T18802] team0: Port device vlan3 removed [ 563.698602][T18802] tipc: Disabling bearer [ 563.791969][ T6882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.895053][ T6882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.473469][ T6882] bridge_slave_1: left allmulticast mode [ 564.480622][ T6882] bridge_slave_1: left promiscuous mode [ 564.487875][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.500141][ T6882] bridge_slave_0: left allmulticast mode [ 564.506542][ T6882] bridge_slave_0: left promiscuous mode [ 564.513434][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.605849][ T6882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.617277][ T6882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.634607][ T6882] bond0 (unregistering): Released all slaves [ 564.736273][ T6882] hsr_slave_0: left promiscuous mode [ 564.744292][ T6882] hsr_slave_1: left promiscuous mode [ 564.751403][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.763467][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.774834][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.784348][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.800141][ T6882] veth1_macvtap: left promiscuous mode [ 564.806825][ T6882] veth0_macvtap: left promiscuous mode [ 564.813277][ T6882] veth1_vlan: left promiscuous mode [ 564.819116][ T6882] veth0_vlan: left promiscuous mode [ 565.083485][ T6882] team0 (unregistering): Port device team_slave_1 removed [ 565.116153][ T6882] team0 (unregistering): Port device team_slave_0 removed [ 565.227617][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 565.519609][ T6882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.579155][ T6882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.654023][ T6882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.714923][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 565.748393][ T6882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.259300][ T6882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.271715][ T6882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.329170][ T6882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.340412][ T6882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.354693][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 566.426658][ T6882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.437854][ T6882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.517336][ T6882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.528803][ T6882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.708316][ T6882] bridge_slave_1: left allmulticast mode [ 566.715685][ T6882] bridge_slave_1: left promiscuous mode [ 566.734463][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.746608][ T6882] bridge_slave_0: left allmulticast mode [ 566.753464][ T6882] bridge_slave_0: left promiscuous mode [ 566.760046][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.779315][ T6882] bridge_slave_1: left allmulticast mode [ 566.786169][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.822343][ T6882] batman_adv: batadv0: Interface deactivated: gretap1 [ 567.142898][ T6882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.155575][ T6882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.166594][ T6882] bond0 (unregistering): Released all slaves [ 567.329969][ T6882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.339969][ T6882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.351046][ T6882] bond0 (unregistering): Released all slaves [ 567.528214][ T6882] batman_adv: batadv0: Removing interface: gretap1 [ 567.680373][ T6882] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 567.722548][ T6882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.732311][ T6882] bond_slave_0: left allmulticast mode [ 567.740319][ T6882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.750145][ T6882] bond_slave_1: left allmulticast mode [ 567.757671][ T6882] bond0 (unregistering): Released all slaves [ 567.768665][ T6882] bond1 (unregistering): Released all slaves [ 567.782712][ T6882] bond2 (unregistering): Released all slaves [ 567.796328][ T6882] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 567.806815][ T6882] bond3 (unregistering): Released all slaves [ 567.818904][ T6882] bond4 (unregistering): Released all slaves [ 567.835977][ T6882] bond5 (unregistering): Released all slaves [ 567.850182][ T6882] bond6 (unregistering): Released all slaves [ 567.868581][ T6882] bond7 (unregistering): Released all slaves [ 567.882705][ T6882] bond8 (unregistering): (slave batadv0): Releasing active interface [ 567.892436][ T6882] bond8 (unregistering): Released all slaves [ 567.906507][ T6882] bond9 (unregistering): Released all slaves [ 567.924127][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 568.114191][ T6882] tipc: Left network mode [ 568.615459][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 568.890749][ T6882] hsr_slave_0: left promiscuous mode [ 568.899509][ T6882] hsr_slave_1: left promiscuous mode [ 568.911071][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.923913][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.932494][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.940686][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.960122][ T6882] hsr_slave_0: left promiscuous mode [ 568.969318][ T6882] hsr_slave_1: left promiscuous mode [ 568.977368][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.993021][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.000513][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.017796][ T6882] veth1_macvtap: left promiscuous mode [ 569.024833][ T6882] veth0_macvtap: left promiscuous mode [ 569.030507][ T6882] veth1_vlan: left promiscuous mode [ 569.037933][ T6882] veth0_vlan: left promiscuous mode [ 569.044940][ T6882] veth1_macvtap: left promiscuous mode [ 569.050534][ T6882] veth0_macvtap: left promiscuous mode [ 569.057263][ T6882] veth1_vlan: left promiscuous mode [ 569.367580][ T6882] team0 (unregistering): Port device team_slave_1 removed [ 569.382680][ T6882] team0 (unregistering): Port device team_slave_0 removed [ 569.573026][ T6882] team0 (unregistering): Port device team_slave_1 removed [ 569.586929][ T6882] team0 (unregistering): Port device team_slave_0 removed [ 569.844820][ T6882] team0 (unregistering): Port device team_slave_1 removed [ 569.859848][ T6882] team0 (unregistering): Port device team_slave_0 removed [ 569.974532][T17117] lo speed is unknown, defaulting to 1000 [ 569.980830][ T57] smbdirect: ib_dev[syz2] removed [ 569.985989][T17117] syz2: Port: 1 Link DOWN [ 569.989718][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 570.465530][ T57] batadv2: left promiscuous mode [ 570.609025][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 570.848841][ T6882] IPVS: stop unused estimator thread 0... [ 570.863680][ T6882] IPVS: stop unused estimator thread 0... [ 571.126536][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8