last executing test programs: 5.330579444s ago: executing program 4 (id=4558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000880)={{r0, &(0x7f0000000100)='\x00', 0xac1, &(0x7f0000000180)={@align=0x7, {0x100, 0x8, 0x2, 0x2}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x5}, 0x6, &(0x7f00000007c0)=[{0x2, 0xf, &(0x7f00000002c0)='GPL\x00', &(0x7f0000000300)="f8617593e45e2e9660135e54be9fab851b92810f6d25a38f11bfbede5b20b202ce68f7db86810d7d9c3e1b87929f282c5e8d1f9a523112b1377459443e106054dba5093aef6db21c7e340736595907452760321982afd629b621e84ffa18e6215fc6c360df90581f98c29fcdcf225c7a3266b300c7f0f7ff057a811ae6b7524cd1069f8f6c25c41f76c1f700203f12abc0accf3cb594b2f2049331b5c62dbc50180818c4ac9fac2019996234d8eb37f4af16c28953494ab0798964922c7bf7bd217daf06a5180fc42bb491eeafea66f112e603389061359a3486809e6d0fc8a53c545cb6b4", 0xe5, 0x10}, {0x3, 0x6, &(0x7f0000000400)='^!@$!\x87^\x00', &(0x7f0000000440)="02acc89883dcfe7a4d1d1ebb633edb2bebd48d8dbf259434559ee4be9ba1bb054217616f3560c03b081c6887ecf7d5ccb3cdfa68b76f73a3d80133179f1f3cf7904b1989b0018bb03f2264caed072e7717bd", 0x52, 0x3a}, {0x2, 0x6, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="1b23a86984f1fe48542429c2d648212044a2b38a541d2493b75fa38f4cb1575d030d79831d18403b919734c71ec9e17bee09974fde1c9a9a1dbe28c5f4b45b", 0x3f, 0x18}, {0x2, 0x9, &(0x7f0000000540)=']%(^/\')&\xf5&\'\xca&&\x00', &(0x7f0000000580)="dd4b9a71e606ee397a40423e5e6929135ea3617c7117bf27ffa9d321771332b2f9dccab898f442e1d1aee2184dd92c9202635386565f5fb808c7d8d42e63c1348e882b740ad8f041ec7c88a457db7bc345cfbb223e575339754d495d5f2276437afe44e6e9dfd583772942c6cd229dd80ca70242b4204965f06d3843", 0x7c, 0x20}, {0x2, 0x5, &(0x7f0000000600)='GPL\x00', &(0x7f0000000640)="7a67d661362f8c6030a5f68f305d581301697c22c354e7b0b60a53a0e44f31c3ea67c0ebe80618db93d42af615a17c792b75ddc18793812b8a0bac0c293fa3c715796d087934a0aa699b9fa562f177a435", 0x51, 0x8}, {0x1, 0xa18, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="ada5cdb23729e7e2dad3a87bebe20f24da2ae7b7d38d929fd4edba31b767c2ded36fba56264b910da9069581dcebdc9097820bdd054499fc145b19ce8e7767524c4f28167e68e65f1908095f89e671581fbe86a45e9f0346721ecef0d87d47fe0c752390292dcf10afbeaaa3d87b98b24a9c5f0cea0ec756fdbf3406fd90e7b6046eb2a2af2a97313b36975204080091293d855a848aeff5ba19d9", 0x9b, 0x2}]}) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r2, 0x20, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRES32=r0, @ANYBLOB="00000000000006000100000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704ed5a5dc4e4a17f0000000000008535"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 5.169803598s ago: executing program 4 (id=4559): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002780)=ANY=[], 0xfb5) (async) write$tun(r2, &(0x7f0000002780)=ANY=[], 0xfb5) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030000480"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.103517615s ago: executing program 1 (id=4560): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 4.926250191s ago: executing program 1 (id=4562): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}}, 0x20040040) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010101}, 0x10) 4.279039004s ago: executing program 3 (id=4565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) (async) write$tun(r0, &(0x7f0000001300)={@val={0x0, 0x9100}, @void, @llc={@snap={0x0, 0x1, "be50", "78090e", 0x9100, "ee79b0794966d33581b72032740b520d63d56ee59aa92a74e7dae60f7efd097dadc9fb7575057c2db02c072cdd798ee57d2ced3f722ad7ee8e335dca7d82ee72c675a5520f19f67e810c625204fb511277b67d4f0f1e041719e4c031a0785d5f66f5706d3549c8d6d630f595bb50edd7a3b78f9e6ba92d38e7f7782622fcbc33a7d2afda066a025f14bbbe0aa8faa92ec9f54f4a40f3c55de2b745912e539da10572f4862314781e6287bf1ed5f79c630bfbb5db63e8491e3e6588352370a05ef16a70dfba1baa847333a291ff95d25a0944834926ad4970dd9a3fa5e56453dff5248696853bc0d351d18585a956ec649a32f676eba122633288ac5380f49180df0ba0d26f5b3f4a0513528d06b20876b0810bacf12dbed76a765911121a2975f0c5586f202b2ee0a17f99a80b4f7383ca0e66b3363025ef7d522e346e833b230bb176dd42c0a30206f80b056ae4e7dca1486acd9e8e3990efdad41236fc147ee01c197ff2909f5f4512afb88a1d5c423f5cee3a5d2716f4d8eab399874407b7466182779107f30a51a6a0191f680bf964d4b3ab8008a65180e473286c33d8cb3e0adfe08c697ef3ff8da7cbdc4afa261ca3daf6ed49366d6b7da0aa3381b07b00bdbe1ba3ffc870fd22c212e425df9bf5a5c7918781211eeea8a0d477cae131b2bc779089c48bfc9ecd6c3f3b88c750045f31b89c1a4f81c40d57ca74ecb1ed26fd98dc5d2117dc645cdb910d6bbe62728f11f4e32de1d6ebbb876f26f79a21fd0c1959b9210bc3ec7a812bc4d2512f85c9484852351c85c0026b176b06ab38307d183a659dabfba9f26462d11aa8e9eeca0213440739ac104f2e824bc70cd55551c1b33372c4bb48100d491d890978534e01b3281d0486392c212eb6949a0a0b3ad26440d954c621e0179013162984e333a1f4a168f6813daf701d9b0ddad26e0a27c2c57787275de2377723be465082bb5aeffe908098d7c0bf484339a9601b8c100f40b6200d9d61135cfb215854328f5b2ac4d037b0687649e50fa058876da57fcefc8ae135daacb248ce20f9aa260206b7844f216eb4e45f9b92d82accc2f8e555cc1539b208842b2cc1104fbde9dbd8fbc4a6405542ed91ff01aecab0cce26ecb0f8db255098d4d8705f852a46681563f070391e85d2b1f668f18b146530c60ce8312096e564588146e576b456a27f404db8801dd835545e456629a87f58e9c726f84523ebf62dd3535533ebd5760feb2e0f14a2e32a1211f6347fefa3dacbe22de56fda606d2d52d7d2918651972ee089565c8d219501585144f3935365a10e3b5446afc7a48b4da0182e97c1ad9d7c551ff08760132f56e74383c266d9b3a4d7f9eefc6aa86794965a07be8bc0ac76d3656abf9f751fb9aa002d89fb6b506ed31b7db8856088f684d1b99bc5c205000d6a2db611a4ed41f7ba7ec37b506e29321024221fc5caf3be58cfe46709cefd39f0382a52fa92e5fad728c4f7ba8f77cfa8d173e7805007524e149c0559374f64d30aca0fda962c451e62a0560dd11df0393ff2fb6c96b5bef5668b5a685c4fde8d393ce7bad0ffc012045914303035126f36466395fe7535014c40d1706837fa0505a3df947d2032dcf753bca70bab8d4ecb436a8b4cce6f2b57684c486f41057fbdbbea871ea4034296248e231ac53a6406172c47db2e69fbc3828ff396d55ebeef17b4ca9cbffa20e573ecedb8d0a3815bb50860e7b13f77eb090746f4f636a842529f2ccb52fde00aa87238f6f07478b1dccda0ee20eb1ca86bcd357a9a85627391838c7262a7528ed08c683e316775dca384451c6f8ddc1f76ef310f5e124a19b19e1bba4f3758eec1ad380ab3089c0101f074305298006c6bedfd7d2bb4d323e80b4c1ea0f167d69b765d46170802e66874daff131e54a9051076794952f2502b4131665fd3319232aae8bda911222869c52a7dad10d51dd2f6d1cfec8f86649a654ca5ee9011bc490f086d2920d53a564cb47ced7fb8073dbbc20b0c1bc65d41262c81a5bffa3fcca902454782361693203308659989f6ecd70d73687dba81de5c80a6209483a442eb79cabdcda3d2db1de29de0052e0cbae9fcc8e6dfc8244eef1a82edf5af578ee3c32912db9672a2bfcc8fa3359f665c3f91197046d0f5d361def93f65debffbd16e43b5fedc024b361eca128ad5ea507e29e4934167fd4cc6a39bf3a3119e7640a2d5d747f146845a05b050a93f077a9259aeee28735b9077002dea62c59a67c73e6c4047328bb9489442a382ab03ac5d8b6d438135c9080d522ce6dd8d2824657eafab5987146fe10c2514a8a326093c79e5e7a9495c8b6458106884399a158d86498f95510a4c1ab544083ca4bdc1a24647c20c3b9f3a30d2d0b1fbe2685d4b8cd00b454bb958bdccd2309b26759a25055213d4cb62fe5df132d8779dd31b2d073285d7a3f0f5644af5db31d0d475c343a1b4b2d357b27f8b12d0cd0c71c961f59856259b1b8eda2bd8f2094d1793c753143e9299525d29de6082e5cbb3f48f5a5643e45ce8222b4d0d533b39614fff6833a264ede3c705d2deb4437059d73e36fa8814ad2cf5adbe64cb7b9e2aa5cd35991c7f9a43d5b11558ae30a3d789b3995a2366da401941652118f71b31579d41d8e1a2bad41f35baf6f9f6118b80148bbcc4c95de94d4d29b1bac2ecf4075564dcc1f57338a28bab4b5c6d9764d331473cee83aa5b4cff94aab878e0a57802faa20e52b9390598396645601340241ee86d5fd4f2a404152ff5ff16a4f778d3c4d622fd95670a9a141ca5723d592072e2be63460d252818cbae53ad9570d9ecece3c21c4c3e66321a3985ecfe29e37e206cd299ed399466ec688298c44a3d8b6cf1b41c72ec31ab5bc198ec4919b0a61caa9664a92c729032340a0cdcb89af1f2c2d40e662b34a2c17d91e6df8c4cb9ba26014637b8f1a9a3c2e3e2503b43d4071dca4048ec0c10309c5a7ac31d0e68e64874b2f23d039230c88e4da6f0171acd1990f45cbdb1f83aa496f7a71702b5d0f7d7bdb4f61a3dffdd81cfe061f9b9f92f0e3cb69aaff0e92d64cc615344ba3b3c14b33c0782a84c0be49b7502073cd0355551df4ac25d1d7f1d7e03486cb66f4ae940ee628199dadce8e063bfadaf7c3bee959dfab1663216c37c3ed95cf773703faa12055806bf38b548a836959a68da57bc928889802934228d37ab0e50266c79131688592b8612763a9abfcc29c5f2791e29276a7747ae6474f11195ca6b78370fd5cba9fe8d9c6ccf51d33ec5f8208f51d7978a73d31abb97efe7d59224889a780f6b9f8fa89caf62bb454f906b7ee8d49dfa288ccc748fe054199d396c6d33656bd7c627f922a5a78266d4617d14db0e055f66e202c3ae4a019b8f617110fdfddc8ed90ef59ddfc058e7067af9735cb5a17c0bed0ca420f219c7a020a47133bb59bc486e55b498f2e707207a4347bbbf0701b8a800fa4c8872feb59086f39c3fa1f88c378e266628af5ae5be9f50eda414fd983c90c4d2fa6bf3c4396c40f53c7eeb47db27ece9b070462eb1c43565a2e2c49103521ba65cbd8b77dcc7575df207ef781e3ae1bd1322bfbdf90234cf225c1c208281cb72897acecea48715d76bb23d3c9a7d36b5196c69f55a909e75dc66d055ce0b231eaa28725611746b768c770fb0561226b84108c9d4b285e6a4d6b6659db9b93e899d8c9ec3700d4e08d61e225104e55f1d543a91a4fa3b2079b6519d8321f9920eeec1330ce10c1389843a87ffa9160cd08af29c8d7224451f64191131aa7c8774af5ca5a0c090fac9947ea325bfafe096712d5d9bb73e7ec17c9765dc78fab02f6c1ff57006b2b7fabdec1aa3f9608f37e3888a1982aa27f7f8fd63f0c6dc251e1d3fa210c6a6671ea2aa3f2b881a1294c36c65adbd586a7dbbd72edc21088ca94b13b4f059fdd8f891ba756cdd1f46b72b5eb4b848021cb93d4cda4c959d485fb06b9f661d43eb75ad94edb5fb6f7abbe639186e4ae065ab655663a36eb140b2e3e2b95168cad04887d1ced714f6c07bb6e0be0cbeebcc180915008fe99a34a3fffc071a0b2f0f09bb6f0f9123cc2f69245d58c88962765c31fd78a9a8b359c40e75c05c107262205f81fb8c00be665150c1fff8f5118b75512bb4fbc2b3d194b072d83eb20acebd1ecfb890da371bfa3ff49c461c3f89df578ea72fe2343fd0fa9aba97081471e43d546d9dc5aba067a1d2f456ed2b9db6000d42fca6bd1ed9397f07eb8a939815c477d662e664abf57704462d0a3a031cc02ea61c383c3b04ae8b1c86423e8c15d7682f8d31d5a18f9042343f33a1a9980fa3631d7dc75bdf2a2a14554f4bae5c5b35c901dabbf370ff1b414df57e319f8aab2d2a56c0427527da0d41ca8bd5a22a409e4ecb5b9af1232a017b15ae30832b4c72d23930ad1d2932589ad41649ce2ff88d2ebacb4747d6afaa001c3ffe3165d78f8222ef4eb8e3e31c0d4f9f39d20e7f3a1316df686320786b2afcaee84e972fe7b99723dd1079d328117d509817ec50dc1b1de96c22ad7a478ab4a8af9563846d625a08b0b986ceb80c435a485fed89efbc153141841b8c4fb4c2289e2835cad78f9757aa9f28e4efe55300b511f087fcfc12b38d99dbd60c8a1fcfb30c3ee5b970df7de95b422cb506cdf4f3a79b635465cc28c2bc320c16d3c4c10008bd3d349887f2051d9f85b24ae1fbac57742a576c8dfd0f3f57a433a6ff67339749bf269fedffda10a0a12c07f45c8cd439b9c6b534695505e18d87caaa35098189492ccf5757f4d604e82a6b68fea6c23d90b94fe17ff7c87bedfaa0ace0cf870afa3512bbf31af7a36605c75407a5abc6439d8af1ad9b34e20c4166edb54aaf387212a8c457925c45e9d9d3e5ccf7601056070cb067af83f137efe70d3978a12cfcd0c5a5429d5c2eb49442b9c3b26af46325813e8971e506df87417ec9a67a5d5623886f6f054ff9ebd850273448edaa2156d84dfdb90b6128edd4f6ee76063da583cfaff4584e0ca404ce84de8cc1cbf78683a7fb68195fde62c14647c45b3632933699fbf9bd46eca31ee846a53d5d1adb0a342869a6e083dcaf768fb1ac64c7170e19acd648be6f9fce3a978d081f10220cf499e55124e6ce264207794cf2efd5fee17f7e03910e13da09265ae0f9a8d65ea4f8d7851849176e0d1286a675a0be27173d4f11f2904339ec4b4d1abcd40c1fdebf641a02f4b40b3585972046f37de44b4412b30eff5e1be2b35774ffc6c0edf46f48c5765754ef72164012ac9338304d6d74d8c649c2b3fd47079899aa1b9b90ec9a73fbc8c4a072a7f5183283f548708d3255c822dcd6d0b89bb4f987793a67c7c225c86506c50f0f72d01d81eafe0c1b0e32ee893a5b359ef6625719b091b91c2705c8543ec9673463f0563969e09c68a4eee807eab62b8e97a1d525eea877db80154996a16547866edb0834aa6261eec7828bd0693fa02ba1a23461b339b1a746a21ecae9af9deda3cbfdc890f18addf5277dd9fd9c1b45af14b05745a217b42bb01fa7d1e89b193f082e2e315e50aa16771ada840959b97a0ac0cd0d4c24167ca6b6363742a12fd286d9e363fa0fb8d014bb3efcb867c269d0ea1da8a25da04a044096b9f840fc44d0be1c961835f9355dada0b2bdee18e87db365d319b03535f0c6b0fa6fa4bcde1292deccd78ebbe44dda018018b81843bb6bc00ef6e60bb224521989ba8c2b57c4370c303d81fa14180f9238ec91f67f9336149eab55abaf0f6ace603794be30135f37ef65e4466845ba5c96e88"}}}, 0x100d) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x3ed, 0x400, 0x70bd2c, 0x25dfdbfc, "0c3f9ddeb22ef0d2ff95a362fc256a0d31059514c0f1bb8544ee435a01c16265e5e63676b9012953e5b9ebcad0f1b0055410", ["", "", ""]}, 0x44}}, 0x40000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r4 = accept4$ax25(r1, &(0x7f0000000140)={{0x3, @null}, [@netrom, @default, @remote, @default, @netrom, @null, @bcast]}, &(0x7f0000000240)=0x48, 0x80000) accept$ax25(r4, &(0x7f0000000280)={{0x3, @default}, [@remote, @netrom, @null, @default, @remote, @default, @null, @default]}, &(0x7f0000000340)=0x48) 2.850995093s ago: executing program 2 (id=4566): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x80, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r10, 0x8927, &(0x7f0000000040)={0x6, 'wlan0\x00'}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r10, 0x8934, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r13, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r16, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r15, @ANYBLOB="000000001712250e826265295ccdfc92ccd672b8407d0283d6a0d92d9a3987723d539ddcc92af7eb28b292deb00633e2fdf77ed7bb1ce699a959e0a44dc96f1e3323f5f4d5504940c00f5f85eb1f9baa76ca14cea15d22c2cb53f2b3d480a4960df830f0dbc4b4a8de9c9cd118090f1ced2a4647e1832e95e062269db79503f2fb87ddac43d8ea4d57aeb30b88da4b64919ecf9e3b8eb47ee7650cd28d89a9b56a8af88b27526775178c55"], 0x18, 0x20008880}}], 0x2, 0x4c054) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010029bd7000000300000000000000008300", @ANYRES32=r17, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040014) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8821000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="35fe25d3aad2a4e4010000", @ANYRES16=r14, @ANYBLOB="00042abd7000ffdbdf253a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x20801}, 0x24004004) (async) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000a0601010000000d0000000000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.849854512s ago: executing program 1 (id=4567): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006cef770aaa898bfffddb23aed73c6f6164"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000007c0)) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) close(0x4) syz_emit_ethernet(0x337, &(0x7f0000000080)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0x400}], @ipv6=@dccp_packet={0xd, 0x6, "55a628", 0x2fd, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[@fragment={0x2b, 0x0, 0x7, 0x1, 0x0, 0x18, 0x67}, @srh={0x6, 0xc, 0x4, 0x6, 0xa5, 0x0, 0x6, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback]}, @srh={0x0, 0x2, 0x4, 0x1, 0xb0, 0x8, 0x4, [@mcast2]}, @fragment={0x8, 0x0, 0x40, 0x0, 0x0, 0xa, 0x66}, @dstopts={0x2c, 0x20, '\x00', [@generic={0x8, 0xad, "803f2e5e93e5c2a81cc798480a429bb691eaccd167d94d31444cd6feacfa5ecb8f179ffa028888421b9184d570854cfd50bae75c743b46422f3e1a7396254394f1a7d0d9957a51bca38ff0dd55f1a43f483b9cb46a8b6eeffd9e29f9334a3c90a2eda20f7ef61cc123e973570741650320027af0c4d14f453ae421b508b92a1a685b4c9df1c8dbe673c4c66dc494e36ec35e53223ed0903e0a89af53da64e0d7652a7a42c9a42058bb2c30ddf2"}, @generic={0x7, 0x16, "7e4f3e3181c494b989aa5e8ac5362e1df415fb6ef056"}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x101}]}, @srh={0x8, 0xa, 0x4, 0x5, 0xb, 0x0, 0x6, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x2b, 0x14, 0x4, 0xa, 0xe, 0x20, 0x2, [@dev={0xfe, 0x80, '\x00', 0x2b}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast1, @mcast2, @empty, @private0]}, @fragment={0x3a, 0x0, 0x8, 0x0, 0x0, 0x18, 0x68}, @srh={0x32, 0x6, 0x4, 0x3, 0xf7, 0x40, 0x6, [@local, @loopback, @private0]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x8, 0x0, 0x0, 0x8, 0x3, "f31227", 0x4, "efd323"}, "41e37be81c1811211c2538a6c2"}}}}}}}, 0x0) 2.802646764s ago: executing program 4 (id=4568): socket$netlink(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) (async) r0 = socket(0x2b, 0x80801, 0x1) accept4$tipc(r0, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x59, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x854}, 0x4000015) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x59, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x854}, 0x4000015) 2.792275699s ago: executing program 1 (id=4570): r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe0, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4) r9 = socket(0x1e, 0x5, 0x0) listen(r9, 0x0) accept4$inet6(r9, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000007f00000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r10, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r10, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10002, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601010000000000000000000000000c00078005001400020000000900020073797a3000000000050001000700000011000300686173683a69707b536fe71824fb90dcfc8ba2632c706f727400000000050005"], 0x58}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.667166189s ago: executing program 2 (id=4571): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x40890, &(0x7f00000001c0)={0xa, 0x4e23, 0x40004, @mcast1, 0x80}, 0x1c) 2.666851302s ago: executing program 4 (id=4572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r9, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYRESHEX=r9], 0x38}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg(r10, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="7334ca", 0x3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[], 0x12a0}}], 0x2, 0x4000041) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x405, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x401}, [@IFLA_IFALIAS={0x14, 0x14, 'sit0\x00'}]}, 0x34}}, 0x4008004) 2.662882711s ago: executing program 3 (id=4573): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0xfffffffc}, 0x50) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000140)=0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="da0fdb55743a8e0b36db81838b5af850", 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000300), 0x4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) 2.479444226s ago: executing program 2 (id=4576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xa}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0xfd, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r3, 0x0, 0x48000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x104, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xec, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe7ecdd7652e097f3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x40004}, 0x20040000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 2.45792541s ago: executing program 3 (id=4577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x117, 0x2}], 0x10}}], 0x1, 0x8001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) 2.372587035s ago: executing program 2 (id=4578): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000080)=""/102377, &(0x7f0000000040)=0x18fe9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000192c0)={r1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000019280)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019080), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000019100)={&(0x7f00000190c0)={0x1c, r9, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000019240)={&(0x7f0000019180)={0x10, 0x0, 0x0, 0x52c41d9548237a31}, 0xc, &(0x7f0000019200)={&(0x7f00000191c0)={0x38, 0x1410, 0x4, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80c5) 2.303355671s ago: executing program 0 (id=4579): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0xc65b, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="00154fdea6", 0x5, 0xc190, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x30, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x1, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0xac1414aa}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x102d8a11}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x94d}]}]}, 0x44}}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2.286273992s ago: executing program 3 (id=4580): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xffffffffffffff04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r3}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048010}, 0x40000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendfile(r7, r8, 0x0, 0x8) (async) setsockopt$inet6_buf(r7, 0x29, 0xcd, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async) close(0x4) 2.057432384s ago: executing program 0 (id=4581): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0xc020400) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r5, 0x8f5, 0x0) write(r3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070800000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000001e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000140003801000008008000340000001"], 0xc4}}, 0x0) 1.09976144s ago: executing program 0 (id=4582): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xb56}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, &(0x7f0000000180)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400007012bbd7000fedbdf25037c00000400c280040001800400e4642215f370a2e1d7950800"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 792.270754ms ago: executing program 0 (id=4583): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x3, 0x8, 0x0, @private0, @loopback, 0x10, 0x85114f3981c6cf72, 0xfffffffb, 0x6}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071184100000000009500000000000000169360946e31d277a5d061fa5d91cea71f14cd2b7a3db0c6e06f8c69ace0a38fdc94599ed30a9042b6c90fccb95a3c299efe9decf3b8df72e19de7d05bbe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x24}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x20000000) 375.701203ms ago: executing program 3 (id=4584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x8b4, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x888, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x3}}, @TCA_FW_POLICE={0x87c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8995}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x80000000, 0x2, 0x7, 0x7, 0x1, 0x5, 0x7fff, 0x5, 0x200, 0x10001, 0x6, 0x9, 0x6, 0x83, 0x101, 0x4, 0x7265250, 0x6, 0x7, 0x1000, 0x3, 0x1000, 0x400, 0x7, 0x5, 0x8, 0x7, 0xd, 0x9, 0x2, 0x400, 0x975, 0x51d8, 0xffff274a, 0x5c, 0x2, 0x4, 0x8, 0x7ff, 0x3, 0x1, 0x0, 0x6b4, 0x1cb, 0x2, 0x4, 0x6, 0x9, 0x1, 0x4, 0x3, 0x1ff, 0x8, 0x3, 0x2, 0x80, 0x3, 0x6, 0xa, 0x7668, 0x100, 0x4, 0x401, 0xd44, 0x80, 0x5, 0x60, 0x0, 0x8, 0x3, 0x8, 0x1, 0x8, 0x1, 0x3, 0xa, 0x8, 0x4, 0x6a, 0x0, 0x81, 0x10001, 0x3, 0x1000, 0x4, 0x1, 0xd9c, 0x9, 0xef, 0x4, 0x2, 0x8001, 0x100, 0x7, 0xfffffffa, 0x9, 0x3, 0x5, 0x7, 0x5, 0x5, 0x10, 0x9, 0x2, 0xfffffffb, 0x8, 0xd065, 0x1, 0x68b, 0x9, 0x401, 0x9, 0xf, 0x5, 0x4, 0x1, 0xfffffff7, 0x3, 0x5, 0x5, 0x6, 0x100, 0x6, 0xffffff73, 0x5, 0x2, 0x80000001, 0x8, 0x0, 0x400, 0x8, 0xe8, 0xffffffff, 0x4, 0x10001, 0x77d8, 0x6, 0xc2c, 0xff, 0x7, 0x199c0000, 0x7, 0x3, 0x5, 0x9, 0x7fff80, 0x6, 0x0, 0x5, 0x0, 0x4, 0xa7, 0x5, 0xfff, 0x6a5d, 0x2, 0x0, 0x7ff, 0x0, 0x3, 0xa72c, 0x2e, 0xfffe0, 0x8001, 0x10001, 0x7, 0x10, 0x4, 0x2, 0xee8, 0x4, 0x2, 0x1000, 0x80000001, 0xb52, 0x101, 0x8, 0x0, 0xff, 0x80, 0x77ed, 0x2, 0x0, 0xdc6, 0x9, 0xfffffff9, 0x9, 0x8, 0x0, 0x2, 0x4, 0x9, 0xba, 0x2, 0x8, 0x7, 0x6, 0x7, 0x2, 0x0, 0x0, 0x2, 0x9, 0x5, 0x634a9419, 0x40, 0x6, 0x8, 0x8000, 0xa, 0x2, 0x8c4, 0xfffffffe, 0xc6, 0xffff, 0x9, 0xa9ff, 0x126882a3, 0x7, 0x4, 0x8, 0x2, 0x0, 0x7ff, 0x8, 0x1ff, 0x7, 0x7fff, 0x0, 0x8, 0xd, 0xd58a00, 0x401, 0x4, 0x9, 0x10000, 0x40, 0x0, 0x1, 0x10000, 0x7, 0xfffffffe, 0x3, 0xffffff80, 0x8, 0x64c, 0x9, 0xfffffc00, 0x274, 0x6, 0xffffffff, 0x9, 0x1, 0xfffffffc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc0}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x753, 0x73d2, 0x6, 0xb29, 0x9, 0x7, 0x9, 0x5a7c40a1, 0x4, 0x9, 0x9, 0x1, 0x7, 0x4, 0x9, 0x80000001, 0x5, 0x10, 0x4, 0x3, 0x1, 0xfffffffc, 0xfff, 0x6, 0x5, 0x8b0, 0x1, 0x1, 0x7, 0xffffffff, 0x101, 0xfffffff7, 0x7, 0x4, 0x40, 0xffff, 0x6, 0x8, 0x9ae3, 0x9, 0x8332, 0x7, 0x6, 0x3, 0x4, 0xa52, 0x1, 0xdde, 0x140000, 0x3ff, 0x4, 0x3, 0x100000, 0x5, 0x10000, 0x5, 0x3, 0x7, 0x2, 0x7, 0x9, 0x7, 0x0, 0x7, 0x7, 0x68, 0x7b44, 0x357, 0x4, 0xc, 0xffff, 0x7, 0x3, 0x800, 0x7, 0x0, 0xff, 0x9a7, 0x5, 0x9, 0x7, 0x800, 0xfffffffc, 0x3, 0x101, 0x3b6a8ecb, 0x1, 0x3a6, 0x5, 0x1, 0x7fe3, 0x9, 0x5, 0x0, 0xa54c, 0x74, 0x9, 0x1, 0x159d, 0x8, 0x6, 0x3fc, 0x8, 0x0, 0x80, 0xf, 0x3, 0x100, 0x6f26, 0x6, 0x3, 0x6, 0x3, 0x2, 0x10, 0x59ac, 0x5, 0x2, 0x9, 0x40, 0x8, 0x100, 0x2, 0x2, 0x1, 0x8, 0xe, 0x9, 0x20b, 0x0, 0x7, 0x9, 0x8, 0x3ff, 0x7, 0x75e, 0x4, 0x9, 0x2, 0x8, 0x2, 0x0, 0xa, 0x4, 0x3, 0x0, 0x2, 0x8000, 0x401, 0x0, 0xa, 0xe, 0x4c67, 0x7128, 0xa, 0x8a, 0x4, 0x4, 0x0, 0x1, 0x1168add, 0xfffffffd, 0x5, 0x9, 0x3, 0xebde, 0x100, 0x7, 0x5, 0x7ff, 0x2, 0xfffffffd, 0x9, 0x4a, 0x4, 0x1, 0x51, 0xfffffffb, 0xfffffffb, 0x8, 0x7, 0x80, 0x4c3b5f52, 0x3, 0x5, 0xe, 0x9fa, 0x4, 0x61b80000, 0xfc, 0xc8, 0xfffffff9, 0x1, 0x10, 0x3, 0x4, 0x1, 0x6, 0x40, 0x3, 0xc, 0x7, 0x7, 0x200, 0x0, 0x2, 0x8, 0x8, 0x9, 0x4, 0x8, 0x0, 0x8001, 0x1, 0xd, 0x5, 0x8559, 0x5, 0xba3b, 0x4, 0xb947, 0x9, 0x3000, 0x3, 0x2, 0xfffffe79, 0x8, 0x2, 0x10001, 0xc, 0x3, 0xfffffffe, 0xa, 0x9, 0x200, 0x8, 0xffffffff, 0x7, 0x80, 0x8, 0xf, 0x8, 0x54, 0x8ec, 0x80000000, 0x5b1, 0xffff, 0x0, 0x3, 0x6, 0x2, 0x8, 0x1ff3, 0xbd, 0x28000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe2, 0xffffffffffffffff, 0x9, 0x1000, 0x401, {0x1, 0x2, 0x400, 0xb, 0x8, 0x5}, {0x6, 0x0, 0x6, 0x0, 0x17e}, 0x8, 0x1, 0x7}}]}]}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 346.316781ms ago: executing program 4 (id=4585): r0 = socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r2, r1, 0x80000001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000000000006"], &(0x7f0000000f40)=""/4074, 0x82, 0xfea, 0x1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xf}]}, {0x0, [0x30, 0x61, 0x5f]}}, &(0x7f00000003c0)=""/189, 0x29, 0xbd, 0x0, 0x80000000, 0x10000, @value=r2}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x7, 0x1, 0x40, 0x1042, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r6, 0x100000000000000}, 0x38) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x8, 0x0, 0x2, @vifc_lcl_ifindex, @multicast1}, 0x10) socket$igmp(0x2, 0x3, 0x2) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000000)) (async) tee(r2, r1, 0x80000001, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000000000006"], &(0x7f0000000f40)=""/4074, 0x82, 0xfea, 0x1}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x4000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xf}]}, {0x0, [0x30, 0x61, 0x5f]}}, &(0x7f00000003c0)=""/189, 0x29, 0xbd, 0x0, 0x80000000, 0x10000, @value=r2}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x7, 0x1, 0x40, 0x1042, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r6, 0x100000000000000}, 0x38) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x8, 0x0, 0x2, @vifc_lcl_ifindex, @multicast1}, 0x10) (async) 276.247662ms ago: executing program 2 (id=4586): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) (async) r1 = socket(0x1, 0x2, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) (async) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r4}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 237.43664ms ago: executing program 0 (id=4587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) write$cgroup_devices(r3, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000300)={r1, &(0x7f0000000100)='\x00', 0x8000, &(0x7f0000000140)={@_ha_fsid={[0xffffffff, 0x8001]}, {0x8, 0xbb, 0x3ff, 0x4}}, 0x8000000, &(0x7f0000000280), &(0x7f00000002c0)=0x8000}) r5 = socket$packet(0x11, 0x2, 0x300) accept4$nfc_llcp(r4, &(0x7f0000000340), &(0x7f00000003c0)=0x60, 0x0) bind$phonet(r4, &(0x7f0000000400)={0x23, 0x0, 0xb8}, 0x10) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x2, &(0x7f0000001300)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, r4}, 0x94) 216.952559ms ago: executing program 2 (id=4588): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0eed00000400000004000000024d000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0eed00000400000004000000024d000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x6c2c22fc8a659455, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x10, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x68}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x4040010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="819a8cdd2697f1488d98cb83a1bca153f4952b6c1ea0703b2ba1b168312df1f8232ac2cb771bd162e39edbce97788a5fee36"], 0x30}, 0x1, 0x0, 0x0, 0x9f9a4f4deb8f2ba6}, 0x0) 164.329084ms ago: executing program 1 (id=4589): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 101.657944ms ago: executing program 3 (id=4590): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0806000108df0604"], 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60ff690b00482f00fc0200000000ff000000000000000000ff0200000200"], 0x0) 78.624374ms ago: executing program 4 (id=4591): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x4) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280050004000100000014e006002001000000000000000000000000000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100001002dbd70000000000000000000", @ANYRES32=r11, @ANYBLOB="00000000000701001c0016801800018014000b00210d0000005f54a9550f001001000000"], 0x3c}}, 0x804) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0xfffffd75, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0xffffff81, 0x0, 0x8, 0x9215}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x80, 0x20, 0xce, 0x2, {{0x51, 0x4, 0x2, 0x0, 0x144, 0x67, 0x0, 0x2, 0x4, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x13, 0xb, [@empty, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @empty]}, @lsrr={0x83, 0x13, 0xcb, [@empty, @private=0xa010100, @rand_addr=0x64010101, @private=0xa010100]}, @timestamp={0x44, 0x2c, 0x9d, 0x0, 0x2, [0xe0ef, 0x80000000, 0xc68, 0x6, 0x101, 0x3, 0xe, 0x73, 0x8, 0x10]}, @generic={0x88, 0x3, 'R'}, @generic={0x88, 0xd, "cd23f8b99be0244d0f2864"}, @timestamp={0x44, 0x20, 0xa7, 0x0, 0xd, [0xfffffffe, 0x2, 0x2, 0x7, 0x5, 0x63, 0x1]}, @cipso={0x86, 0x52, 0x8c83d00661d48799, [{0x2, 0x10, "b7c3fd09da4b6a6c5b795312e055"}, {0x0, 0xd, "58543488cd5cbdeb4716a6"}, {0x1, 0x10, "dc3b015984c15df3b3bd23fb355d"}, {0x1, 0xd, "103293b6371768e9fc60b6"}, {0x4, 0x8, "9a771a01442b"}, {0x7, 0x4, "165c"}, {0x2, 0x2}, {0x0, 0x4, "b3d1"}]}, @timestamp_addr={0x44, 0x4c, 0x9f, 0x1, 0x0, [{@multicast2, 0x8}, {@multicast2, 0x9}, {@broadcast, 0x4}, {@multicast2, 0x4}, {@multicast2, 0xe0000000}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010102, 0xfffffe00}, {@loopback, 0x80}, {@multicast1, 0x8}]}, @lsrr={0x83, 0xf, 0x10, [@remote, @private=0xa010101, @broadcast]}]}}}}}) r17 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r17, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r17, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r18}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001200)={&(0x7f0000000000), 0xc, &(0x7f00000011c0)={&(0x7f0000000b40)={0x664, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x4, 0x7, 0x401}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4c61}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x11c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r11}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x664}, 0x1, 0x0, 0x0, 0x20020010}, 0x8004) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd26, 0xfffffffd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r19}]}, 0x44}}, 0x856) 19.570236ms ago: executing program 0 (id=4592): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x3, 0x3}, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x844) 0s ago: executing program 1 (id=4593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x277, 0x100}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): vlan: entered promiscuous mode [ 558.035369][T17427] validate_nla: 59 callbacks suppressed [ 558.035391][T17427] netlink: 'syz.3.3033': attribute type 3 has an invalid length. [ 558.097315][T17427] netlink: 'syz.3.3033': attribute type 3 has an invalid length. [ 558.163272][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3035'. [ 558.180299][T16865] veth0_macvtap: entered promiscuous mode [ 558.213357][T16865] veth1_macvtap: entered promiscuous mode [ 558.289107][T16865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.317237][T17437] sock: sock_set_timeout: `syz.3.3036' (pid 17437) tries to set negative timeout [ 558.349104][T16865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.384758][ T3032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.435223][ T3032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.459253][ T3032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.500871][ T3032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.526062][T17441] netlink: 'syz.0.3038': attribute type 2 has an invalid length. [ 558.534556][T17441] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3038'. [ 558.573039][T17439] veth1_to_bond: entered allmulticast mode [ 558.703789][T17439] veth1_to_bond: left allmulticast mode [ 558.736240][T17452] netlink: 'syz.0.3040': attribute type 1 has an invalid length. [ 558.745453][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3041'. [ 558.759493][T17452] netlink: 'syz.0.3040': attribute type 1 has an invalid length. [ 558.797165][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.829552][T17452] netlink: 'syz.0.3040': attribute type 1 has an invalid length. [ 558.868666][T17459] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.3041'. [ 558.918797][T17452] 8021q: adding VLAN 0 to HW filter on device bond11 [ 559.143244][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.177069][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.435735][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.474164][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.590746][T17479] syzkaller0: entered promiscuous mode [ 559.596294][T17479] syzkaller0: entered allmulticast mode [ 559.954895][T17502] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3051'. [ 559.984234][T17502] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3051'. [ 560.007856][T17502] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3051'. [ 560.145005][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3053'. [ 560.236611][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 560.254892][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 560.266637][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 560.277360][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 560.299053][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 560.311025][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 560.418221][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3053'. [ 560.510951][T17525] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 560.588557][T17530] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3056'. [ 560.694034][T17529] bond9: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 560.725008][T17529] bond9: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 560.758633][T17529] bond9: (slave ip6gre3): making interface the new active one [ 560.780960][T17529] bond9: (slave ip6gre3): Enslaving as an active interface with an up link [ 560.804359][T17537] bond0: option ad_select: unable to set because the bond device is up [ 560.833174][T17533] bond0: option ad_select: unable to set because the bond device is up [ 560.946359][ T9499] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.985218][ T9499] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.185006][ T9499] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.208947][ T9499] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.260063][T17561] netlink: 'syz.1.3061': attribute type 11 has an invalid length. [ 561.295672][T17561] netlink: 'syz.1.3061': attribute type 11 has an invalid length. [ 561.323972][T17565] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 561.330678][T17561] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3061'. [ 561.360092][T17567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3062'. [ 561.373982][ T9499] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.407217][ T9499] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.419457][T17567] delete_channel: no stack [ 561.521288][T17565] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 561.523638][T17571] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3063'. [ 561.544711][T17571] openvswitch: netlink: Missing key (keys=40, expected=100) [ 561.651883][ T9499] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.680024][ T9499] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.928322][T17591] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2 [ 561.954393][T17591] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @ [ 562.193961][T17514] chnl_net:caif_netlink_parms(): no params data found [ 562.228196][ T9499] dummy0: left allmulticast mode [ 562.242396][ T9499] bridge0: port 3(dummy0) entered disabled state [ 562.276393][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.348779][ T9499] bridge_slave_0: left allmulticast mode [ 562.355325][ T9499] bridge_slave_0: left promiscuous mode [ 562.369728][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.399264][ T5831] Bluetooth: hci1: command tx timeout [ 562.612884][ T9499] bond8 (unregistering): (slave ip6gretap2): Releasing active interface [ 562.840955][ T9499] bond6 (unregistering): (slave gretap1): Releasing active interface [ 562.962490][T17639] netlink: 'syz.0.3075': attribute type 1 has an invalid length. [ 563.143989][ T9499] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 563.152455][ T9499] bridge3 (unregistering): left promiscuous mode [ 563.200966][ T9499] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 563.371599][ T9499] bond0 (unregistering): (slave bridge8): Removing an active aggregator [ 563.380863][ T9499] bond0 (unregistering): (slave bridge8): Releasing backup interface [ 563.389127][ T9499] bond0 (unregistering): (slave bridge8): the permanent HWaddr of slave - 16:77:8e:87:e4:86 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 563.410165][ T9499] bridge8 (unregistering): left promiscuous mode [ 563.416806][ T9499] bridge8 (unregistering): left allmulticast mode [ 563.460861][ T9499] bond0 (unregistering): (slave bridge9): Releasing backup interface [ 563.470275][ T9499] bridge9 (unregistering): left promiscuous mode [ 563.476648][ T9499] bridge9 (unregistering): left allmulticast mode [ 563.502340][ T9499] bond7 (unregistering): (slave bridge10): Releasing backup interface [ 563.510818][ T9499] bridge10 (unregistering): left promiscuous mode [ 563.694008][ T9499] bond1 (unregistering): (slave veth3): Releasing active interface [ 563.704909][ T9499] bond1 (unregistering): Released all slaves [ 563.722308][ T9499] bond2 (unregistering): Released all slaves [ 563.741085][ T9499] bond3 (unregistering): Released all slaves [ 563.762167][ T9499] bond4 (unregistering): Released all slaves [ 563.776833][ T9499] bond5 (unregistering): Released all slaves [ 563.793513][ T9499] bond6 (unregistering): Released all slaves [ 563.813319][ T9499] bond0 (unregistering): Released all slaves [ 563.829021][ T9499] bond7 (unregistering): Released all slaves [ 563.844203][ T9499] bond8 (unregistering): Released all slaves [ 563.861139][ T9499] bond9 (unregistering): Released all slaves [ 563.879952][ T9499] bond10 (unregistering): Released all slaves [ 563.931799][T17639] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 563.947769][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 564.143155][T17649] x_tables: duplicate underflow at hook 2 [ 564.379274][T17514] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.388294][T17514] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.405416][T17514] bridge_slave_0: entered allmulticast mode [ 564.439464][T17514] bridge_slave_0: entered promiscuous mode [ 564.480533][T17514] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.487430][ T5831] Bluetooth: hci1: command tx timeout [ 564.526001][T17514] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.534011][T17514] bridge_slave_1: entered allmulticast mode [ 564.542253][T17514] bridge_slave_1: entered promiscuous mode [ 564.634623][T17677] netlink: 'syz.0.3082': attribute type 1 has an invalid length. [ 564.673656][T17674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.850172][T17677] macvlan8: entered promiscuous mode [ 564.855555][T17677] macvlan8: entered allmulticast mode [ 564.930591][T17677] bond12: entered promiscuous mode [ 564.936739][T17677] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 564.987706][T17677] bond12: left promiscuous mode [ 565.092170][T17514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.128457][T17681] bond12: (slave bridge10): Enslaving as a backup interface with a down link [ 565.279329][T17514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.295956][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 565.483299][T17514] team0: Port device team_slave_0 added [ 565.499684][T17514] team0: Port device team_slave_1 added [ 565.550107][T17716] __nla_validate_parse: 1 callbacks suppressed [ 565.550128][T17716] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3092'. [ 565.660705][T17716] veth0: entered promiscuous mode [ 565.774152][T17714] veth0: left promiscuous mode [ 565.843703][T17514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.877358][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.014372][T17514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.065123][T17741] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3096'. [ 566.147802][T17514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.157163][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.206025][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.285775][T17514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.449971][ T9499] vlan0: left allmulticast mode [ 566.454916][ T9499] veth0_vlan: left allmulticast mode [ 566.461399][ T9499] vlan0: left promiscuous mode [ 566.466901][ T9499] veth1_macvtap: left promiscuous mode [ 566.493036][ T9499] veth0_macvtap: left promiscuous mode [ 566.503935][ T9499] veth1_vlan: left promiscuous mode [ 566.510973][ T9499] veth0_vlan: left promiscuous mode [ 566.557471][ T5831] Bluetooth: hci1: command tx timeout [ 567.805820][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3 [ 567.827533][T17773] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠźu ™crµ±K:‘Ł˙ĚĄÝBŤßÝŁ| “ĽÚ [ 568.003740][T17514] hsr_slave_0: entered promiscuous mode [ 568.020440][T17514] hsr_slave_1: entered promiscuous mode [ 568.037922][T17514] debugfs: 'hsr0' already exists in 'hsr' [ 568.043729][T17514] Cannot create hsr debugfs directory [ 568.074716][T17792] netlink: 'syz.0.3106': attribute type 61 has an invalid length. [ 568.117305][T17792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3106'. [ 568.418744][ T9499] IPVS: stop unused estimator thread 0... [ 568.637083][ T5831] Bluetooth: hci1: command tx timeout [ 568.845960][T17826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3114'. [ 569.058190][ T13] tipc: Subscription rejected, illegal request [ 569.606410][T17857] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3119'. [ 569.702935][T17867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3123'. [ 569.712280][T17867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3123'. [ 569.797431][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3119'. [ 569.815859][T17868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 570.262049][T17874] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3124'. [ 570.848285][T17927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3132'. [ 570.891419][T17927] netlink: 'syz.4.3132': attribute type 1 has an invalid length. [ 570.937326][T17909] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3130'. [ 571.114076][T17904] infiniband syz1: set down [ 571.127054][T17904] infiniband syz1: added ipvlan1 [ 571.210906][T17927] bond10: entered promiscuous mode [ 571.253738][T17927] 8021q: adding VLAN 0 to HW filter on device bond10 [ 571.286103][T17904] RDS/IB: syz1: added [ 571.314983][T17904] smc: adding ib device syz1 with port count 1 [ 571.355353][T17904] smc: ib device syz1 port 1 has no pnetid [ 571.464728][T17948] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3133'. [ 571.622238][T17956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3134'. [ 571.887598][T17930] bridge8: entered promiscuous mode [ 571.893894][T17930] bridge8: entered allmulticast mode [ 571.940305][T17955] tipc: Enabled bearer , priority 10 [ 571.969859][T17514] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 571.996892][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.052575][T17514] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 572.123098][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.155948][T17514] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 572.182034][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.220816][T17514] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 572.290919][T17514] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.356543][T17968] netlink: 'syz.4.3135': attribute type 1 has an invalid length. [ 572.388669][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3135'. [ 572.595344][T17514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.614433][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 572.650021][T17514] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.660024][T17992] netlink: 'syz.4.3139': attribute type 10 has an invalid length. [ 572.688308][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.695527][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.735121][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.742403][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.920162][T18002] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3141'. [ 573.061397][ T5917] tipc: Node number set to 2333573167 [ 573.164030][T18017] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3143'. [ 573.315454][T18021] pim6reg: entered allmulticast mode [ 573.384665][T18023] x_tables: duplicate underflow at hook 2 [ 573.412434][T18021] pim6reg: left allmulticast mode [ 573.466671][T18029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3146'. [ 573.628765][T17514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.714903][T18037] sctp: [Deprecated]: syz.0.3147 (pid 18037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 573.714903][T18037] Use struct sctp_sack_info instead [ 573.772586][T17514] veth0_vlan: entered promiscuous mode [ 573.808247][T17514] veth1_vlan: entered promiscuous mode [ 573.967730][T17514] veth0_macvtap: entered promiscuous mode [ 574.006255][T17514] veth1_macvtap: entered promiscuous mode [ 574.082975][T17514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.124184][T17514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.187467][T14783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.210363][T14783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.239526][T14783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.257961][T14783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.404050][T18063] bridge0: port 1(gretap0) entered blocking state [ 574.425226][T18063] bridge0: port 1(gretap0) entered disabled state [ 574.448187][T18063] gretap0: entered allmulticast mode [ 574.476427][T18063] gretap0: entered promiscuous mode [ 574.636596][T14783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.669671][T14783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.848389][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.864354][T18080] netlink: 'syz.4.3159': attribute type 1 has an invalid length. [ 574.873409][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.917437][T18080] netlink: 'syz.4.3159': attribute type 2 has an invalid length. [ 574.943853][T18080] netlink: 'syz.4.3159': attribute type 1 has an invalid length. [ 574.956497][T18084] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3160'. [ 574.988275][T18080] netlink: 'syz.4.3159': attribute type 3 has an invalid length. [ 575.738170][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 575.747974][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 575.757553][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 575.767635][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 575.775599][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 575.912889][T18121] netlink: 'syz.4.3168': attribute type 1 has an invalid length. [ 576.026573][T18121] bond11: entered promiscuous mode [ 576.037547][T18121] 8021q: adding VLAN 0 to HW filter on device bond11 [ 576.364239][T18134] netlink: 'syz.4.3171': attribute type 1 has an invalid length. [ 576.416612][T18137] __nla_validate_parse: 2 callbacks suppressed [ 576.416634][T18137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3171'. [ 577.841219][ T5145] Bluetooth: hci4: command tx timeout [ 578.003207][T18209] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3186'. [ 578.738110][T18115] chnl_net:caif_netlink_parms(): no params data found [ 579.461154][T18115] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.489727][T18115] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.508075][T18115] bridge_slave_0: entered allmulticast mode [ 579.552121][T18115] bridge_slave_0: entered promiscuous mode [ 579.590102][T18115] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.616857][T18115] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.627952][T18115] bridge_slave_1: entered allmulticast mode [ 579.637915][T18115] bridge_slave_1: entered promiscuous mode [ 579.801790][T18115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.834580][T18115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.918938][ T5145] Bluetooth: hci4: command tx timeout [ 579.971256][T18115] team0: Port device team_slave_0 added [ 579.990339][T18115] team0: Port device team_slave_1 added [ 580.044895][T18314] nft_compat: unsupported protocol 0 [ 580.051989][T18314] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3208'. [ 580.061593][T18314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3208'. [ 580.097234][T18115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.104300][T18115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.141494][T18318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3209'. [ 580.162730][T18115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.260527][T18115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.281951][T18115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.325515][T18115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.514295][T18335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'. [ 580.606377][T18115] hsr_slave_0: entered promiscuous mode [ 580.631955][T18115] hsr_slave_1: entered promiscuous mode [ 580.647140][T18115] debugfs: 'hsr0' already exists in 'hsr' [ 580.655257][T18115] Cannot create hsr debugfs directory [ 580.746640][T18349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3214'. [ 580.877202][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 580.963594][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 581.002514][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 581.505809][T18396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3225'. [ 581.520348][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 581.542774][T18115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.567841][T18115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.661215][T18387] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3223'. [ 581.778289][T18411] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3228'. [ 581.833620][T18115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.860786][T18115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.873678][T18415] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3228'. [ 581.888060][T18414] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3229'. [ 581.928786][T18416] xt_cgroup: invalid path, errno=-2 [ 581.999701][ T5145] Bluetooth: hci4: command tx timeout [ 582.089112][T18115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.113860][T18115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.126329][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3232'. [ 582.161841][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 582.167168][T18432] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 582.181488][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 582.204901][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 582.229376][T18115] bond0: (slave netdevsim0): Releasing backup interface [ 582.267594][T18115] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.287384][T18115] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.498417][T18452] netlink: 'syz.1.3236': attribute type 1 has an invalid length. [ 582.671256][T18452] 8021q: adding VLAN 0 to HW filter on device bond10 [ 582.994286][T18115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 583.012044][T18115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.023349][T18115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 583.044115][T18115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.070637][T18115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 583.113136][T18115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.129442][T18115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 583.190572][T18115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 583.237842][T18495] netlink: 'syz.4.3247': attribute type 1 has an invalid length. [ 583.250817][T18487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.488771][T18509] netlink: 'syz.3.3248': attribute type 2 has an invalid length. [ 583.626140][T18115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.689954][T18115] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.731285][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.738493][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.832109][T14783] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.839390][T14783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.080040][ T5145] Bluetooth: hci4: command tx timeout [ 584.117061][T18541] netlink: 'syz.4.3256': attribute type 21 has an invalid length. [ 584.125068][T18541] netlink: 'syz.4.3256': attribute type 22 has an invalid length. [ 584.135277][T18541] netlink: 'syz.4.3256': attribute type 23 has an invalid length. [ 584.169377][T18541] netlink: 'syz.4.3256': attribute type 25 has an invalid length. [ 584.443473][T18559] "syz.4.3260" (18559) uses obsolete ecb(arc4) skcipher [ 584.699266][T18575] netlink: 'syz.2.3263': attribute type 26 has an invalid length. [ 584.715386][T18569] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 584.722391][T18575] netlink: 'syz.2.3263': attribute type 26 has an invalid length. [ 584.806923][T18115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.919934][T18115] veth0_vlan: entered promiscuous mode [ 584.972408][T18115] veth1_vlan: entered promiscuous mode [ 585.081853][T18115] veth0_macvtap: entered promiscuous mode [ 585.135958][T18115] veth1_macvtap: entered promiscuous mode [ 585.229394][T18115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.296236][T18115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.378877][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.416151][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.469785][T18609] syzkaller0: entered promiscuous mode [ 585.475328][T18609] syzkaller0: entered allmulticast mode [ 585.523204][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.551649][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.955015][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.976794][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.106254][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.120224][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.687020][T18672] bond0: entered promiscuous mode [ 586.707067][T18672] bond_slave_0: entered promiscuous mode [ 586.740113][T18672] bond_slave_1: entered promiscuous mode [ 587.096718][T18686] tipc: Started in network mode [ 587.125638][T18686] tipc: Node identity 360dc2300075, cluster identity 4711 [ 587.158713][T18686] tipc: Enabled bearer , priority 0 [ 587.195857][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 587.211902][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 587.220692][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 587.234027][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 587.242343][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 587.431241][T18698] ipt_REJECT: TCP_RESET invalid for non-tcp [ 587.446055][T18686] syzkaller0: entered promiscuous mode [ 587.452126][T18686] syzkaller0: entered allmulticast mode [ 587.460110][T18686] tipc: Resetting bearer [ 587.564521][T18682] tipc: Resetting bearer [ 587.853539][T18718] __nla_validate_parse: 13 callbacks suppressed [ 587.853561][T18718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3298'. [ 587.873274][T18718] openvswitch: netlink: Flow key attr not present in new flow. [ 589.129708][T18682] tipc: Disabling bearer [ 589.177022][ T5815] tipc: Node number set to 913883696 [ 589.279708][ T5831] Bluetooth: hci0: command tx timeout [ 589.335541][T18721] validate_nla: 2 callbacks suppressed [ 589.335566][T18721] netlink: 'syz.1.3299': attribute type 58 has an invalid length. [ 589.376085][T18721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3299'. [ 589.385754][T18728] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 1, id = 0 [ 589.556071][T18731] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 589.730861][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3307'. [ 589.757209][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3307'. [ 589.816786][T18743] erspan0: entered promiscuous mode [ 589.829762][T18743] gretap0: entered promiscuous mode [ 589.836339][T18743] debugfs: 'hsr1' already exists in 'hsr' [ 589.864477][T18743] Cannot create hsr debugfs directory [ 590.212117][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'. [ 590.303306][T18765] hsr_slave_0 (unregistering): left promiscuous mode [ 590.329842][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'. [ 590.563310][T18691] chnl_net:caif_netlink_parms(): no params data found [ 590.594894][T18780] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 590.872806][T18691] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.897209][T18691] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.904555][T18691] bridge_slave_0: entered allmulticast mode [ 590.921352][T18691] bridge_slave_0: entered promiscuous mode [ 591.018904][T18796] batadv0: entered promiscuous mode [ 591.038201][T18796] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 591.069777][T18796] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 591.113292][T18796] batadv0: left promiscuous mode [ 591.222612][T18691] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.257275][T18691] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.285595][T18691] bridge_slave_1: entered allmulticast mode [ 591.321286][T18691] bridge_slave_1: entered promiscuous mode [ 591.367700][ T5831] Bluetooth: hci0: command tx timeout [ 591.407899][T18794] infiniband sy‡1: set down [ 591.412472][T18794] infiniband sy‡1: added bond0 [ 591.442910][T18691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.464154][T18691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.518516][T18691] team0: Port device team_slave_0 added [ 591.530027][T18691] team0: Port device team_slave_1 added [ 591.600216][T18691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.607859][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.637843][T18691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.651496][T18794] RDS/IB: sy‡1: added [ 591.653987][T18691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.673908][T18794] smc: adding ib device sy‡1 with port count 1 [ 591.697615][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.718497][T18794] smc: ib device sy‡1 port 1 has no pnetid [ 591.807447][T18691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.904879][T18795] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 592.071820][T18691] hsr_slave_0: entered promiscuous mode [ 592.095776][T18691] hsr_slave_1: entered promiscuous mode [ 592.118801][T18691] debugfs: 'hsr0' already exists in 'hsr' [ 592.142327][T18691] Cannot create hsr debugfs directory [ 592.358402][T18827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3325'. [ 592.370114][T18823] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 592.406908][T18833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3325'. [ 592.456644][T18827] xfrm1: entered promiscuous mode [ 592.487142][T18827] xfrm1: entered allmulticast mode [ 592.505706][T18835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3325'. [ 592.594623][T18840] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 592.627403][T18840] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 592.666153][T18840] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3326'. [ 592.796175][T18840] syzkaller1: entered promiscuous mode [ 592.805151][T18840] syzkaller1: entered allmulticast mode [ 592.991548][T18849] netlink: 'syz.2.3328': attribute type 1 has an invalid length. [ 593.037908][ T5831] Bluetooth: hci1: command tx timeout [ 593.048961][T18691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.067392][T18691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.104324][T18691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 593.269602][T18851] bond1: (slave geneve2): making interface the new active one [ 593.298306][T18851] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 593.382248][T18691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.418703][T18691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.437486][ T5831] Bluetooth: hci0: command tx timeout [ 593.467914][T18691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 593.520086][T14783] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.547409][T14783] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.556364][T14783] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.794017][T14783] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.923478][T18691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.934605][T18691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.946777][T18691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 594.003589][T18878] __nla_validate_parse: 2 callbacks suppressed [ 594.003609][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'. [ 594.101716][T18691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.113023][T18691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.129215][T18691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 594.646802][T18691] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 594.675887][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 594.708369][T18691] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 594.739192][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 594.753614][T18691] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 594.791915][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 594.810834][T18691] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 594.861759][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.189524][T18936] netlink: 'syz.3.3344': attribute type 10 has an invalid length. [ 595.216857][T18936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.296858][T18936] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 595.395086][T18691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.451616][T18691] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.516098][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.523346][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.533816][ T5831] Bluetooth: hci0: command tx timeout [ 595.563313][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.570590][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.063609][T18691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.244338][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 596.374084][T18982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3352'. [ 596.401321][T18982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3352'. [ 596.448372][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3352'. [ 596.607653][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'. [ 596.830201][T18691] veth0_vlan: entered promiscuous mode [ 596.852379][T18691] veth1_vlan: entered promiscuous mode [ 596.950807][T18691] veth0_macvtap: entered promiscuous mode [ 596.977550][T19006] syzkaller0: entered promiscuous mode [ 596.988410][T19006] syzkaller0: entered allmulticast mode [ 597.002692][T18691] veth1_macvtap: entered promiscuous mode [ 597.060219][T18691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.084150][T18691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.124412][T19009] syzkaller1: entered promiscuous mode [ 597.141984][T19009] syzkaller1: entered allmulticast mode [ 597.166709][T19017] netlink: 'syz.2.3362': attribute type 29 has an invalid length. [ 597.217707][T19017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3362'. [ 597.263860][ T3561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.283739][ T3561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.334340][ T3561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.355586][ T3561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.399476][T19029] xt_nfacct: accounting object `syz1' does not exist [ 597.507607][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 597.635840][T14783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.663559][T14783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.826721][T19043] syzkaller0: entered promiscuous mode [ 597.837560][T19043] syzkaller0: entered allmulticast mode [ 598.221874][T19067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3374'. [ 599.517032][T14783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.535051][T14783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.680152][T19072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3375'. [ 599.695635][T19072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3375'. [ 599.733590][T19072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3375'. [ 599.776287][T19077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3376'. [ 599.784723][T19072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3375'. [ 599.807321][T19080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3376'. [ 599.849991][T19082] netlink: 'syz.4.3286': attribute type 1 has an invalid length. [ 599.962696][T19082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 599.988571][T19085] bond1 (unregistering): Released all slaves [ 600.168270][T19100] netlink: 'syz.3.3381': attribute type 1 has an invalid length. [ 600.212046][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'. [ 600.239490][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 600.250589][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 600.262454][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 600.285013][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 600.295855][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 600.447230][T19100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.506414][T19105] bond1: (slave bridge1): making interface the new active one [ 600.529838][T19113] netlink: 'syz.4.3384': attribute type 1 has an invalid length. [ 600.538549][T19113] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3384'. [ 600.558938][T19105] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 600.817842][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3385'. [ 601.075075][T19128] openvswitch: netlink: Flow actions attr not present in new flow. [ 601.102216][T19131] netlink: 'syz.0.3390': attribute type 24 has an invalid length. [ 601.136034][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.152243][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.355117][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.400175][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.569342][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.579903][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.118642][ T58] gretap0: left allmulticast mode [ 602.131444][ T58] gretap0: left promiscuous mode [ 602.145884][ T58] bridge0: port 1(gretap0) entered disabled state [ 602.326459][T19172] netlink: 'syz.3.3403': attribute type 1 has an invalid length. [ 602.334678][ T5831] Bluetooth: hci3: command tx timeout [ 602.485907][ T58] bond9 (unregistering): (slave ip6gre3): Releasing backup interface [ 602.844676][ T58] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 602.857261][ T58] bridge2 (unregistering): left promiscuous mode [ 602.869392][ T58] bridge2 (unregistering): left allmulticast mode [ 603.182437][ T58] bond1 (unregistering): Released all slaves [ 603.199343][ T58] bond2 (unregistering): Released all slaves [ 603.220434][ T58] bond3 (unregistering): Released all slaves [ 603.243110][ T58] bond4 (unregistering): Released all slaves [ 603.265768][ T58] bond5 (unregistering): Released all slaves [ 603.288081][ T58] bond0 (unregistering): Released all slaves [ 603.303190][ T58] bond6 (unregistering): Released all slaves [ 603.318822][ T58] bond7 (unregistering): Released all slaves [ 603.342969][ T58] bond8 (unregistering): Released all slaves [ 603.358583][ T58] bond9 (unregistering): Released all slaves [ 603.374232][ T58] bond10 (unregistering): Released all slaves [ 603.430493][T19172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 603.601635][ T58] 9: left promiscuous mode [ 603.849234][ T58] tipc: Disabling bearer [ 603.872832][ T58] tipc: Left network mode [ 603.902161][T19204] : renamed from hsr0 (while UP) [ 604.029363][T19206] 8021q: VLANs not supported on wg0 [ 604.334822][T19219] netlink: 'syz.2.3414': attribute type 1 has an invalid length. [ 604.397420][ T5831] Bluetooth: hci3: command tx timeout [ 604.425106][T19225] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 604.454915][T19222] syzkaller1: entered promiscuous mode [ 604.460810][T19228] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 604.507029][T19222] syzkaller1: entered allmulticast mode [ 604.924035][T19248] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 604.965273][T19248] __nla_validate_parse: 8 callbacks suppressed [ 604.965293][T19248] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3420'. [ 604.998803][T19248] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3420'. [ 605.007960][T19248] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 605.015829][T19248] netlink: 618 bytes leftover after parsing attributes in process `syz.4.3420'. [ 605.021251][T19254] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 605.140247][T19250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.182887][T19253] bond0: entered allmulticast mode [ 605.188554][T19253] bond_slave_0: entered allmulticast mode [ 605.194593][T19253] bond_slave_1: entered allmulticast mode [ 605.505830][T19273] sctp: [Deprecated]: syz.4.3425 (pid 19273) Use of int in maxseg socket option. [ 605.505830][T19273] Use struct sctp_assoc_value instead [ 606.480828][ T5831] Bluetooth: hci3: command tx timeout [ 606.886150][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 607.095407][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'. [ 607.136626][T19102] chnl_net:caif_netlink_parms(): no params data found [ 607.147965][T19289] openvswitch: netlink: Flow actions attr not present in new flow. [ 607.234525][T19297] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3432'. [ 608.109699][T19330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3438'. [ 608.268190][T19102] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.295979][T19102] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.320413][T19102] bridge_slave_0: entered allmulticast mode [ 608.389417][T19102] bridge_slave_0: entered promiscuous mode [ 608.431378][T19102] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.473385][T19102] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.515292][T19102] bridge_slave_1: entered allmulticast mode [ 608.557559][ T5831] Bluetooth: hci3: command tx timeout [ 608.650265][T19102] bridge_slave_1: entered promiscuous mode [ 608.972377][T19352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3441'. [ 609.017228][T19352] netlink: 'syz.2.3441': attribute type 7 has an invalid length. [ 609.046127][T19352] netlink: 'syz.2.3441': attribute type 8 has an invalid length. [ 609.075863][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3441'. [ 609.230714][T19348] bond1: (slave gretap0): Device is not bonding slave [ 609.253514][T19348] bond1: option active_slave: invalid value (gretap0) [ 609.290448][T19348] bond1 (unregistering): Released all slaves [ 609.328742][T19362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3442'. [ 609.416864][T19102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.432213][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 609.451334][T19354] syzkaller1: entered promiscuous mode [ 609.468873][T19354] syzkaller1: entered allmulticast mode [ 609.530674][T19102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.759713][T19102] team0: Port device team_slave_0 added [ 609.791509][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3446'. [ 609.818566][ T58] hsr_slave_0: left promiscuous mode [ 609.847104][ T58] 0·: left promiscuous mode [ 609.868309][ T58] veth1_vlan: left allmulticast mode [ 609.888351][ T58] veth1_macvtap: left promiscuous mode [ 609.893915][ T58] veth0_macvtap: left promiscuous mode [ 609.927144][ T58] veth1_vlan: left promiscuous mode [ 609.937092][ T58] veth0_vlan: left promiscuous mode [ 609.994542][T19382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3447'. [ 610.049377][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3448'. [ 610.310859][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 610.625431][T19407] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3449'. [ 610.637192][ T5831] Bluetooth: hci3: command tx timeout [ 610.651444][ T3561] smc: removing ib device syz0 [ 610.922107][T19102] team0: Port device team_slave_1 added [ 610.927939][ T5815] syz0: Port: 1 Link DOWN [ 610.950517][T19373] syzkaller1: entered promiscuous mode [ 610.958693][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 610.965152][T19373] syzkaller1: entered allmulticast mode [ 610.992921][T19384] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 611.205427][T19407] bond1 (unregistering): Released all slaves [ 611.452947][T19102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.472845][T19102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.562778][T19102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.609614][T19102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.657459][T19102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.758534][T19102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.883392][T19434] netlink: 'syz.4.3454': attribute type 3 has an invalid length. [ 612.203266][T19444] openvswitch: netlink: Message has 8 unknown bytes. [ 612.227227][T19444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.254292][T19102] hsr_slave_0: entered promiscuous mode [ 612.267942][T19448] sctp: [Deprecated]: syz.4.3456 (pid 19448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.267942][T19448] Use struct sctp_sack_info instead [ 612.306349][T19102] hsr_slave_1: entered promiscuous mode [ 612.356356][T19102] debugfs: 'hsr0' already exists in 'hsr' [ 612.375075][T19102] Cannot create hsr debugfs directory [ 613.575316][T19489] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3464'. [ 613.847825][T19492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3464'. [ 613.933751][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3 [ 613.961587][T19489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3464'. [ 613.982749][T19496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3465'. [ 614.114438][T19495] syzkaller0: entered promiscuous mode [ 614.122940][T19495] syzkaller0: entered allmulticast mode [ 614.315665][T19513] netlink: 'syz.0.3470': attribute type 1 has an invalid length. [ 614.372193][T19513] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3470'. [ 614.614013][ T58] IPVS: stop unused estimator thread 0... [ 614.858728][T19535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3475'. [ 615.154530][T19543] __nla_validate_parse: 1 callbacks suppressed [ 615.154551][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3478'. [ 615.175187][T19543] openvswitch: netlink: Flow actions attr not present in new flow. [ 615.244591][T19545] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3479'. [ 615.414949][ T5917] IPVS: starting estimator thread 0... [ 615.425311][T19553] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 615.537946][T19554] IPVS: using max 30 ests per chain, 72000 per kthread [ 615.714693][T19102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 615.783091][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.801399][T19102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 615.814994][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.816691][T19571] netlink: 'syz.0.3485': attribute type 1 has an invalid length. [ 615.895308][T19102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 615.921123][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.957886][T19102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 616.000520][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.221658][T19584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3488'. [ 616.236869][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3490'. [ 616.300334][T19584] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3488'. [ 616.460363][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058cce000: rx timeout, send abort [ 616.532644][T19102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.627293][T19102] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.661580][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.668841][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.737948][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.745256][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.765751][T19625] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 616.818274][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3494'. [ 616.865699][T19625] syzkaller0: entered promiscuous mode [ 616.872535][T19625] syzkaller0: entered allmulticast mode [ 616.960509][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d0dc000: rx timeout, send abort [ 616.970077][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058cce000: abort rx timeout. Force session deactivation [ 617.128760][T19641] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20002 [ 617.156785][T19638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.260731][T19640] bond0: (slave batadv0): Releasing backup interface [ 617.314663][T19640] bridge_slave_0: left allmulticast mode [ 617.324960][T19640] bridge_slave_0: left promiscuous mode [ 617.355914][T19640] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.403831][T19640] bridge_slave_1: left allmulticast mode [ 617.422226][T19640] bridge_slave_1: left promiscuous mode [ 617.436494][T19640] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.468843][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d0dc000: abort rx timeout. Force session deactivation [ 617.480539][T19640] bond0: (slave bond_slave_0): Releasing backup interface [ 617.502727][T19640] bond0: (slave bond_slave_1): Releasing backup interface [ 617.530129][T19640] team0: Port device team_slave_0 removed [ 617.544841][T19640] team0: Port device team_slave_1 removed [ 617.558920][T19640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.583151][T19640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.601451][T19640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.611459][T19640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.650758][T19640] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 617.676281][T19659] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3501'. [ 617.719793][T19653] tc_dump_action: action bad kind [ 617.779778][T19662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3502'. [ 617.782070][T19102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.871756][T19667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3502'. [ 618.069824][T19102] veth0_vlan: entered promiscuous mode [ 618.076776][T19677] Bluetooth: MGMT ver 1.23 [ 618.158926][T19102] veth1_vlan: entered promiscuous mode [ 618.198029][T19686] xt_CONNSECMARK: invalid mode: 0 [ 618.262087][T19102] veth0_macvtap: entered promiscuous mode [ 618.306953][T19102] veth1_macvtap: entered promiscuous mode [ 618.354961][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3508'. [ 618.378849][T19102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.413251][T19102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.563189][ T9499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.581640][ T9499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.629574][ T9499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.687592][ T9499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.995724][T14784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.031683][T14784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.189909][ T9499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.215038][ T9499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.828503][T19762] netlink: 'syz.4.3524': attribute type 11 has an invalid length. [ 619.988692][T19776] syzkaller0: entered promiscuous mode [ 620.004813][T19776] syzkaller0: entered allmulticast mode [ 620.035993][T19768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.853334][T19772] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 620.878246][T19772] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 620.895917][T19772] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 621.205932][T19807] __nla_validate_parse: 2 callbacks suppressed [ 621.205956][T19807] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3532'. [ 621.247693][T19808] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3532'. [ 621.328200][T19815] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 621.453099][T19815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 621.489210][T19815] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 621.503254][T19820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3535'. [ 621.576695][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3537'. [ 621.751426][ T1147] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.780156][ T1147] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.818344][ T1147] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.851003][ T1147] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.934050][T19839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3541'. [ 622.087642][T19850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3543'. [ 622.109318][T19850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3543'. [ 622.214080][T19854] netlink: 'syz.0.3544': attribute type 1 has an invalid length. [ 622.769371][T19876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3551'. [ 622.840341][T19879] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3553'. [ 622.923052][T19891] netlink: 209764 bytes leftover after parsing attributes in process `syz.2.3554'. [ 623.239083][T19902] bond3: entered promiscuous mode [ 623.244203][T19902] bond3: entered allmulticast mode [ 623.250335][T19902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 623.376409][T19915] netlink: 'syz.0.3562': attribute type 1 has an invalid length. [ 623.398543][T19903] bond4: entered promiscuous mode [ 623.416413][T19903] bond4: entered allmulticast mode [ 623.429350][T19903] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.491375][T19910] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 623.519630][T19910] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 623.568710][T19919] tipc: Enabling of bearer rejected, media not registered [ 624.081264][T19938] syzkaller1: entered promiscuous mode [ 624.087005][T19938] syzkaller1: entered allmulticast mode [ 624.101141][T19938] netlink: 'syz.3.3568': attribute type 30 has an invalid length. [ 624.289425][T19947] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 624.348052][T19947] team1: entered promiscuous mode [ 624.354140][T19947] team1: entered allmulticast mode [ 624.382549][T19952] ip6tnl0: mtu less than device minimum [ 624.929656][T19991] syzkaller0: entered promiscuous mode [ 624.935418][T19991] syzkaller0: entered allmulticast mode [ 624.944302][T19993] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.238513][T20003] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 625.332338][T20010] netlink: 'syz.1.3592': attribute type 1 has an invalid length. [ 625.359407][T20011] netlink: 'syz.1.3592': attribute type 1 has an invalid length. [ 625.454801][T20017] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 625.500186][T20017] bond4 (unregistering): Released all slaves [ 625.700646][T20030] xt_l2tp: wrong L2TP version: 0 [ 625.722244][T20011] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 625.806389][T20033] netlink: 'syz.2.3598': attribute type 3 has an invalid length. [ 625.868768][T20035] netlink: 'syz.2.3598': attribute type 3 has an invalid length. [ 626.232885][T20061] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 626.305830][T20054] syzkaller0: entered promiscuous mode [ 626.332044][T20054] syzkaller0: entered allmulticast mode [ 626.617527][T20086] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 626.727315][T20091] __nla_validate_parse: 12 callbacks suppressed [ 626.727337][T20091] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3614'. [ 628.739599][T20126] netlink: 'syz.4.3620': attribute type 21 has an invalid length. [ 628.773570][T20126] IPv6: NLM_F_CREATE should be specified when creating new route [ 628.787888][T20126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 628.795189][T20126] IPv6: NLM_F_CREATE should be set when creating new route [ 628.802568][T20126] IPv6: NLM_F_CREATE should be set when creating new route [ 628.809874][T20126] IPv6: NLM_F_CREATE should be set when creating new route [ 628.820626][T20128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3622'. [ 628.952019][T20143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3624'. [ 630.051533][T20187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.074586][T20187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.284407][T20188] can: request_module (can-proto-0) failed. [ 630.611584][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3641'. [ 630.702211][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 630.721647][T20220] netlink: 'syz.0.3642': attribute type 16 has an invalid length. [ 630.732563][T20221] 8021q: VLANs not supported on ip_vti0 [ 630.768819][T20220] netlink: 'syz.0.3642': attribute type 17 has an invalid length. [ 630.819876][T20227] Cannot find set identified by id 0 to match [ 630.901266][T20220] bond0: left promiscuous mode [ 630.906137][T20220] bond_slave_0: left promiscuous mode [ 630.929177][T20220] bond_slave_1: left promiscuous mode [ 630.934916][T20220] bond0: left allmulticast mode [ 630.956636][T20220] bond_slave_0: left allmulticast mode [ 630.963479][T20220] bond_slave_1: left allmulticast mode [ 630.988287][T20220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.011277][T20220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.430963][T20252] veth1_to_bond: entered allmulticast mode [ 631.453117][T20252] veth1_to_bond: left allmulticast mode [ 631.651205][T20259] xt_hashlimit: size too large, truncated to 1048576 [ 631.839135][T20270] netlink: 'syz.1.3656': attribute type 3 has an invalid length. [ 632.315700][T20293] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3662'. [ 632.404668][T20293] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3662'. [ 632.428032][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3662'. [ 632.459452][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3662'. [ 632.479769][T20293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3662'. [ 632.494643][T20300] netlink: 'syz.2.3664': attribute type 1 has an invalid length. [ 632.730925][T20308] veth0_to_team: entered allmulticast mode [ 632.978217][T20327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 632.985498][T20327] IPv6: NLM_F_CREATE should be set when creating new route [ 632.992881][T20327] IPv6: NLM_F_CREATE should be set when creating new route [ 633.000194][T20327] IPv6: NLM_F_CREATE should be set when creating new route [ 633.072471][T20324] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3673'. [ 633.370034][T20342] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3679'. [ 633.481648][T20343] syzkaller0: entered promiscuous mode [ 633.488836][T20343] syzkaller0: entered allmulticast mode [ 633.503315][T20350] tipc: Enabled bearer , priority 0 [ 633.511266][T20346] syzkaller0: entered promiscuous mode [ 633.516806][T20346] syzkaller0: entered allmulticast mode [ 633.574060][T20353] netlink: 152336 bytes leftover after parsing attributes in process `syz.1.3681'. [ 633.669094][T20354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3680'. [ 633.812042][T20364] netlink: 'syz.4.3684': attribute type 1 has an invalid length. [ 635.377895][T20364] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 635.391708][T20371] tipc: Resetting bearer [ 635.497439][T20345] tipc: Resetting bearer [ 635.559293][T20345] tipc: Disabling bearer [ 635.659004][T20382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3687'. [ 635.682344][T20382] macvtap1: entered promiscuous mode [ 635.700238][T20382] batadv0: entered promiscuous mode [ 635.706281][T20382] macvtap1: entered allmulticast mode [ 635.758791][T20384] netlink: 'syz.3.3687': attribute type 83 has an invalid length. [ 635.779124][T20382] batadv0: entered allmulticast mode [ 635.786107][T20382] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 635.841361][T20384] macvtap2: entered promiscuous mode [ 635.846790][T20384] macvtap2: entered allmulticast mode [ 635.879277][T20387] veth1_macvtap: left promiscuous mode [ 635.884878][T20387] macsec0: entered promiscuous mode [ 635.891713][T20387] macsec0: entered allmulticast mode [ 635.925089][T20389] netem: incorrect ge model size [ 635.947569][T20389] netem: change failed [ 635.963862][T20390] netem: incorrect ge model size [ 635.991433][T20390] netem: change failed [ 636.017872][T20391] veth1_macvtap: entered promiscuous mode [ 636.042475][T20391] veth1_macvtap: entered allmulticast mode [ 636.057276][T20391] macsec0: left promiscuous mode [ 636.090513][T20391] macsec0: left allmulticast mode [ 636.113017][T20391] veth1_macvtap: left allmulticast mode [ 636.746105][T20431] netlink: 'syz.1.3694': attribute type 6 has an invalid length. [ 636.848803][T20438] openvswitch: netlink: Message has 48 unknown bytes. [ 636.848817][T20442] openvswitch: netlink: Message has 48 unknown bytes. [ 638.031376][T20397] batadv0: left allmulticast mode [ 638.036487][T20397] batadv0: left promiscuous mode [ 638.125659][T20439] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 638.127677][ T3032] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.179814][ T3032] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.191187][ T3032] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.232691][ T3032] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.352346][T20451] netlink: 'syz.2.3700': attribute type 1 has an invalid length. [ 638.371740][T20451] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 638.483348][T20462] syzkaller0: entered promiscuous mode [ 638.528182][T20462] syzkaller0: entered allmulticast mode [ 638.545043][T20467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.559229][T20462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.591460][T20468] veth0: entered promiscuous mode [ 638.627164][T20466] veth0: left promiscuous mode [ 638.748313][T20477] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 638.807732][T20481] __nla_validate_parse: 5 callbacks suppressed [ 638.807755][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3709'. [ 638.883227][T20486] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3711'. [ 638.915885][ T5831] block nbd4: Receive control failed (result -107) [ 639.101137][T20499] tipc: Started in network mode [ 639.147062][T20499] tipc: Node identity c29e24a177a7, cluster identity 4711 [ 639.158186][T20499] tipc: Enabled bearer , priority 0 [ 639.182049][T20498] tipc: Disabling bearer [ 639.202781][T20501] syzkaller0: entered promiscuous mode [ 639.211359][T20501] syzkaller0: entered allmulticast mode [ 639.244475][T20501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.465609][T20520] netlink: 'syz.4.3720': attribute type 83 has an invalid length. [ 639.708969][T20486] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 639.715010][T20486] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 639.777825][T20517] netlink: 'syz.2.3719': attribute type 1 has an invalid length. [ 639.823319][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3719'. [ 640.067442][T20529] syz_tun: refused to change device tx_queue_len [ 640.074169][T20532] veth0_to_team: entered allmulticast mode [ 640.336550][T20486] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 640.363403][T20486] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 640.394987][T20486] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 640.411529][T20486] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 640.450176][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3726'. [ 640.463381][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3726'. [ 640.551457][T20486] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 640.576971][T20486] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 640.780793][T20553] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 640.883182][T20486] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 640.897075][T20486] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 641.378280][T20582] tipc: Started in network mode [ 641.383849][T20582] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 641.407237][T20582] tipc: Enabled bearer , priority 10 [ 641.425472][T20582] syzkaller0: entered promiscuous mode [ 641.442463][T20582] syzkaller0: entered allmulticast mode [ 642.368596][T20610] netlink: 'syz.3.3738': attribute type 7 has an invalid length. [ 642.401988][T20610] netlink: 'syz.3.3738': attribute type 7 has an invalid length. [ 642.410986][T20426] tipc: Node number set to 10136234 [ 642.897629][T20623] xt_SECMARK: invalid mode: 9 [ 643.029452][T20632] syzkaller1: entered promiscuous mode [ 643.053722][T20632] syzkaller1: entered allmulticast mode [ 643.070646][T20635] netlink: 'syz.3.3742': attribute type 2 has an invalid length. [ 643.118512][T20635] netlink: 'syz.3.3742': attribute type 2 has an invalid length. [ 643.512177][T20657] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 643.595210][T20657] bond5: (slave lo): Enslaving as an active interface with an up link [ 643.633784][T20657] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 643.683313][T20673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 643.799763][T20680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3749'. [ 643.934116][T20688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3750'. [ 644.000083][T20686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3751'. [ 644.092116][T20692] xt_hashlimit: size too large, truncated to 1048576 [ 644.183843][T20697] netlink: 'syz.1.3754': attribute type 1 has an invalid length. [ 644.207137][T20700] netlink: 'syz.2.3755': attribute type 1 has an invalid length. [ 644.215015][T20697] netlink: 'syz.1.3754': attribute type 3 has an invalid length. [ 644.247524][T20697] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3754'. [ 644.296043][T20697] NCSI netlink: No device for ifindex 813332851 [ 644.493040][T20700] bond4: entered promiscuous mode [ 644.577662][T20700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 644.633299][T20705] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 644.674090][T20705] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 644.699419][T20705] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 645.599594][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'. [ 645.791516][T20757] netlink: 'syz.1.3769': attribute type 21 has an invalid length. [ 645.809577][T20757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3769'. [ 645.862354][T20757] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3769'. [ 646.023104][T20767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3773'. [ 646.091231][T20772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3773'. [ 646.211735][ T5889] IPVS: starting estimator thread 0... [ 646.250938][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3775'. [ 646.327030][T20781] IPVS: using max 34 ests per chain, 81600 per kthread [ 646.359124][T20786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3777'. [ 646.692628][T20796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 646.877561][T20804] block nbd0: Unsupported socket: should be TCP or UNIX. [ 646.886356][T20804] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 648.252275][T20871] netlink: 'syz.3.3803': attribute type 10 has an invalid length. [ 648.285827][T20871] bond0: (slave wlan1): Opening slave failed [ 648.332230][T20870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.361849][T20873] bridge_slave_0: left allmulticast mode [ 648.367803][T20873] bridge_slave_0: left promiscuous mode [ 648.373763][T20873] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.410163][T20873] bridge_slave_1: left allmulticast mode [ 648.429494][T20873] bridge_slave_1: left promiscuous mode [ 648.463153][T20873] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.531000][T20873] bond0: (slave bond_slave_0): Releasing backup interface [ 648.563611][T20873] bond0: (slave bond_slave_1): Releasing backup interface [ 648.629515][T20873] team0: Port device team_slave_0 removed [ 648.649616][T20873] team0: Port device team_slave_1 removed [ 648.657940][T20873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.665452][T20873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.691458][T20873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.701053][T20873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.721095][T20873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 648.738766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.777283][T20883] syz_tun: entered allmulticast mode [ 648.782809][T20884] lo: entered allmulticast mode [ 648.942024][T20884] syz_tun: left allmulticast mode [ 649.185069][T20907] __nla_validate_parse: 7 callbacks suppressed [ 649.185094][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3811'. [ 649.257125][T20910] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 649.368823][T20907] bond6: option xmit_hash_policy: invalid value (64) [ 649.396256][T20910] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3815'. [ 649.460324][T20907] bond6 (unregistering): Released all slaves [ 649.975068][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3821'. [ 650.504450][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3825'. [ 650.524951][T20953] netlink: 'syz.4.3825': attribute type 1 has an invalid length. [ 650.554313][T20953] netlink: 'syz.4.3825': attribute type 2 has an invalid length. [ 650.845223][T20968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 650.855199][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 650.922018][T20974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3831'. [ 651.007448][T20978] netlink: 'syz.1.3834': attribute type 1 has an invalid length. [ 651.050260][T20978] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3834'. [ 651.182062][T20991] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3837'. [ 651.292593][T21002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3840'. [ 651.738545][T21036] netlink: 'syz.1.3849': attribute type 4 has an invalid length. [ 651.759008][T21032] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003 [ 652.590114][T21080] syzkaller0: entered promiscuous mode [ 652.595684][T21080] syzkaller0: entered allmulticast mode [ 652.634327][T21080] netlink: 'syz.3.3861': attribute type 1 has an invalid length. [ 653.003508][T21092] xt_limit: Overflow, try lower: 604147548/4200216962 [ 653.683542][T21129] tipc: Started in network mode [ 653.689854][T21129] tipc: Node identity 06955d50bafe, cluster identity 4711 [ 653.697862][T21129] tipc: Enabled bearer , priority 0 [ 653.749832][T21129] syzkaller0: entered promiscuous mode [ 653.755523][T21129] syzkaller0: entered allmulticast mode [ 653.763044][T21129] tipc: Resetting bearer [ 653.834667][T14783] tipc: Resetting bearer [ 653.846688][T21128] tipc: Resetting bearer [ 655.522795][T21128] tipc: Disabling bearer [ 655.558201][T20420] tipc: Node number set to 3161152848 [ 655.758644][T21170] SET target dimension over the limit! [ 655.886341][T21179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.030153][T21186] __nla_validate_parse: 15 callbacks suppressed [ 656.030174][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3897'. [ 656.115638][T21193] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3898'. [ 656.311473][T21206] netlink: 'syz.3.3901': attribute type 9 has an invalid length. [ 656.358277][T21212] netlink: 'syz.1.3902': attribute type 1 has an invalid length. [ 656.392366][T21212] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 656.564469][T21224] syzkaller0: entered promiscuous mode [ 656.581354][T21224] syzkaller0: entered allmulticast mode [ 656.602168][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'. [ 656.640575][T21225] tc action pedit 'at' offset 257 out of bounds [ 656.647303][T21225] tc action pedit 'at' offset 257 out of bounds [ 656.653646][T21225] tc action pedit 'at' offset 257 out of bounds [ 656.659993][T21225] tc action pedit 'at' offset 257 out of bounds [ 656.666272][T21225] tc action pedit 'at' offset 257 out of bounds [ 656.672597][T21225] tc action pedit 'at' offset 257 out of bounds [ 656.678952][T21225] tc action pedit 'at' offset 257 out of bounds [ 656.685241][T21225] tc action pedit 'at' offset 257 out of bounds [ 656.691626][T21225] tc action pedit 'at' offset 257 out of bounds [ 656.697966][T21225] tc action pedit 'at' offset 257 out of bounds [ 656.704351][T21225] 0: reclassify loop, rule prio 0, protocol 800 [ 656.829233][T21236] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3908'. [ 657.133721][T21245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3913'. [ 657.278406][T21261] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 657.308196][T21261] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 657.339912][T21266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3916'. [ 657.512538][T21279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3920'. [ 657.578356][T21286] netlink: 'syz.3.3922': attribute type 29 has an invalid length. [ 657.595714][T21282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.625700][T21286] netlink: 'syz.3.3922': attribute type 29 has an invalid length. [ 657.713464][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3922'. [ 657.724977][T21290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3923'. [ 657.763975][T21286] netlink: 'syz.3.3922': attribute type 32 has an invalid length. [ 657.777732][T21290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3923'. [ 658.403358][T21341] netlink: 'syz.2.3935': attribute type 6 has an invalid length. [ 658.430822][T21343] vlan2: entered promiscuous mode [ 658.435943][T21343] gretap0: entered promiscuous mode [ 658.589808][T21350] netlink: 'syz.0.3938': attribute type 1 has an invalid length. [ 658.737655][T21350] bond3: entered promiscuous mode [ 658.743205][T21350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 658.770641][T21353] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 658.789387][T21367] xt_hashlimit: size too large, truncated to 1048576 [ 658.806340][T21353] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 658.898816][T21353] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 659.104143][T21378] ipvlan2: entered allmulticast mode [ 659.113104][T21378] syz_tun: entered allmulticast mode [ 659.639945][T21406] netlink: 'syz.0.3952': attribute type 7 has an invalid length. [ 660.156577][T21433] bond1: option miimon: invalid value (18446744073709551585) [ 660.207050][T21433] bond1: option miimon: allowed values 0 - 2147483647 [ 660.218430][T21433] bond1 (unregistering): Released all slaves [ 660.332422][T21442] x_tables: duplicate underflow at hook 1 [ 660.472790][T21445] delete_channel: no stack [ 660.571603][T21452] vlan1: entered allmulticast mode [ 660.581224][T21452] bond0: entered allmulticast mode [ 660.588971][T21452] bond_slave_0: entered allmulticast mode [ 660.594822][T21452] bond_slave_1: entered allmulticast mode [ 660.603004][T21452] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 660.631580][T21454] netlink: 'syz.3.3965': attribute type 2 has an invalid length. [ 660.690462][T21454] netlink: 'syz.3.3965': attribute type 1 has an invalid length. [ 660.711720][T21455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.726615][T21455] bond_slave_0: left allmulticast mode [ 660.757445][T21455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.773806][T21455] bond_slave_1: left allmulticast mode [ 660.791478][T21455] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 660.893417][T21455] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 660.903058][T21455] bond0 (unregistering): Released all slaves [ 660.916204][T21457] veth0_macvtap: left promiscuous mode [ 661.344116][T21480] validate_nla: 1 callbacks suppressed [ 661.344141][T21480] netlink: 'syz.1.3975': attribute type 1 has an invalid length. [ 661.421795][T21480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.464579][T21480] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 661.628839][T21480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.641160][T21480] bond0: (slave bond1): Enslaving as an active interface with a down link [ 661.650052][T21497] __nla_validate_parse: 8 callbacks suppressed [ 661.650073][T21497] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3980'. [ 661.666237][T21497] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3980'. [ 661.679512][T21497] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3980'. [ 661.692350][T21497] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3980'. [ 661.703261][T21497] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3980'. [ 661.713262][T21497] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3980'. [ 661.723425][T21497] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3980'. [ 661.733480][T21497] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3980'. [ 661.743435][T21497] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3980'. [ 661.753581][T21497] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3980'. [ 661.978618][T21514] netlink: 'syz.0.3984': attribute type 4 has an invalid length. [ 662.015999][T21514] netlink: 'syz.0.3984': attribute type 83 has an invalid length. [ 662.556671][T21550] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 662.691083][T21550] bond2: entered promiscuous mode [ 662.696665][T21550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 662.743346][T21563] bond5: entered promiscuous mode [ 662.819032][T21570] netlink: 'syz.0.4000': attribute type 1 has an invalid length. [ 662.836190][T21550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 662.853503][T21550] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 662.864524][T21550] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 662.880027][T21550] bond2: (slave ip6gre2): making interface the new active one [ 662.887889][T21550] ip6gre2: entered promiscuous mode [ 662.895254][T21550] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 663.109940][T21575] netlink: 'syz.1.4004': attribute type 29 has an invalid length. [ 663.219146][T21585] ip6t_srh: unknown srh invflags 4000 [ 663.850827][T21618] netlink: 'syz.3.4020': attribute type 1 has an invalid length. [ 664.137066][T21633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.333202][T21644] vlan1: entered allmulticast mode [ 664.338726][T21644] bond0: entered allmulticast mode [ 664.344110][T21644] bond_slave_0: entered allmulticast mode [ 664.350674][T21644] bond_slave_1: entered allmulticast mode [ 664.388448][T14783] smc: removing ib device sy‡1 [ 664.395014][T21646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.426706][T21654] IPVS: stopping master sync thread 18728 ... [ 664.439245][T21646] bond_slave_0: left allmulticast mode [ 664.452111][T21646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.465146][T21646] bond_slave_1: left allmulticast mode [ 664.473257][T21646] bond0 (unregistering): Released all slaves [ 664.687531][T21661] openvswitch: netlink: Message has 8 unknown bytes. [ 665.320066][T21679] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 665.346256][T21679] bond6 (unregistering): Released all slaves [ 665.613671][T21691] netlink: 'syz.1.4043': attribute type 2 has an invalid length. [ 665.736430][T21697] delete_channel: no stack [ 665.838848][T21700] netlink: 'syz.1.4045': attribute type 1 has an invalid length. [ 666.475731][T21719] syzkaller0: entered promiscuous mode [ 666.482005][T21719] syzkaller0: entered allmulticast mode [ 666.759164][T21725] __nla_validate_parse: 73 callbacks suppressed [ 666.759187][T21725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4053'. [ 666.807668][T21731] "syz.2.4054" (21731) uses obsolete ecb(arc4) skcipher [ 666.822163][T21726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4053'. [ 667.287842][T21748] sctp: [Deprecated]: syz.4.4060 (pid 21748) Use of int in maxseg socket option. [ 667.287842][T21748] Use struct sctp_assoc_value instead [ 667.446807][T21749] veth0_to_bond: entered allmulticast mode [ 667.794444][T21774] netlink: 'syz.2.4067': attribute type 1 has an invalid length. [ 667.867127][T21781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.885984][T21774] bond6: entered promiscuous mode [ 667.895304][T21774] 8021q: adding VLAN 0 to HW filter on device bond6 [ 667.916063][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4069'. [ 667.935679][T21778] vlan1: entered allmulticast mode [ 667.944448][T21778] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 668.200734][T21793] syzkaller0: entered promiscuous mode [ 668.216560][T21793] syzkaller0: entered allmulticast mode [ 668.260361][T21793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4072'. [ 668.507378][T21812] netlink: 'syz.0.4076': attribute type 1 has an invalid length. [ 668.566517][T21812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.642420][T21812] bond0: (slave bridge1): making interface the new active one [ 668.686453][T21812] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 668.763044][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4079'. [ 668.776300][T21822] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 668.955661][T21832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4083'. [ 669.004924][T21834] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4084'. [ 669.049225][T21834] netlink: 'syz.4.4084': attribute type 16 has an invalid length. [ 669.070692][T21834] netlink: 'syz.4.4084': attribute type 17 has an invalid length. [ 669.156671][T21834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.620493][T21863] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4095'. [ 669.629882][T21863] 0·: renamed from hsr_slave_1 (while UP) [ 669.682329][T21863] 0·: entered allmulticast mode [ 669.691349][T21863] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 669.724883][T21860] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 669.855020][T21864] syzkaller1: entered promiscuous mode [ 669.867084][T21864] syzkaller1: entered allmulticast mode [ 670.291297][T21891] netlink: 'syz.3.4102': attribute type 25 has an invalid length. [ 670.328539][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4102'. [ 670.385234][T21891] netlink: 'syz.3.4102': attribute type 25 has an invalid length. [ 670.407790][ T75] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.409852][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4102'. [ 670.434358][ T75] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.456488][ T75] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.495258][ T75] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.570109][T21897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 670.626845][T14783] syzkaller0: tun_net_xmit 76 [ 670.637701][T14783] syzkaller0: tun_net_xmit 48 [ 670.650104][T20420] syzkaller0: tun_net_xmit 76 [ 671.500066][T21937] xt_hashlimit: overflow, rate too high: 0 [ 671.748316][T21946] syzkaller0: entered promiscuous mode [ 671.773235][T21946] syzkaller0: entered allmulticast mode [ 671.958330][T21957] __nla_validate_parse: 2 callbacks suppressed [ 671.958356][T21957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'. [ 672.007034][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4121'. [ 672.040921][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4121'. [ 672.069314][ T75] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.098982][ T75] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.111863][ T75] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.133402][ T75] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.338241][T21971] pimreg: entered allmulticast mode [ 672.421107][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4125'. [ 672.504890][T21980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.596627][T21980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.782457][T21990] x_tables: duplicate underflow at hook 1 [ 673.221977][T22007] netlink: 'syz.0.4138': attribute type 2 has an invalid length. [ 673.398106][T22014] bond5: (slave lo): Releasing backup interface [ 673.419812][T22014] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 673.442509][T22014] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 673.460294][T22020] team0: Mode changed to "random" [ 673.568552][T22025] netlink: 'syz.4.4143': attribute type 1 has an invalid length. [ 673.721865][T22029] bond1: (slave gretap2): making interface the new active one [ 673.730548][T22029] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 673.789512][T22033] netlink: 'syz.3.4145': attribute type 1 has an invalid length. [ 673.945320][T22046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4147'. [ 674.372329][T22068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4156'. [ 674.372833][T22066] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4154'. [ 674.412819][T22068] gre0: entered promiscuous mode [ 674.430222][T22068] gre0: entered allmulticast mode [ 674.454304][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4156'. [ 674.552142][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4156'. [ 674.622584][T22080] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 674.636697][T22080] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 675.517571][T22104] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4169'. [ 675.598637][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.470828][ T1147] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.516414][ T1147] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.670468][ T1147] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.705894][ T1147] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.060740][T22132] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 677.116043][T22132] bond0: (slave lo): Error: Device can not be enslaved while up [ 677.203864][T22170] netlink: 'syz.2.4186': attribute type 1 has an invalid length. [ 677.281676][T22170] 8021q: adding VLAN 0 to HW filter on device bond7 [ 677.350263][T22170] __nla_validate_parse: 6 callbacks suppressed [ 677.350288][T22170] netlink: 186448 bytes leftover after parsing attributes in process `syz.2.4186'. [ 677.572018][T22178] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4188'. [ 677.583746][T22178] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.591237][T22178] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.732489][T22185] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 677.824456][T22188] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4192'. [ 677.981823][T22196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4195'. [ 678.062587][T22198] syzkaller1: entered promiscuous mode [ 678.088919][T22198] syzkaller1: entered allmulticast mode [ 678.114969][T22196] syzkaller0: entered promiscuous mode [ 678.120958][T22196] syzkaller0: entered allmulticast mode [ 678.138234][T22206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4198'. [ 678.164612][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4197'. [ 678.209430][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4197'. [ 678.262358][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4197'. [ 678.313270][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4197'. [ 678.351622][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4197'. [ 678.522921][T22225] tipc: Enabling of bearer rejected, failed to enable media [ 678.596404][T22227] netlink: 'syz.0.4200': attribute type 9 has an invalid length. [ 679.095694][T22250] tipc: Failed to remove unknown binding: 66,0,0/10136234:517136074/517136075 [ 679.105247][T22250] tipc: Failed to remove unknown binding: 66,0,0/10136234:517136074/517136075 [ 679.121801][T22254] syzkaller0: entered promiscuous mode [ 679.127566][T22254] syzkaller0: entered allmulticast mode [ 679.281149][T22260] syzkaller0: entered promiscuous mode [ 679.286703][T22260] syzkaller0: entered allmulticast mode [ 679.419564][T22272] openvswitch: netlink: IP tunnel dst address not specified [ 679.703328][T22290] nftables ruleset with unbound set [ 681.147175][T22297] tunl0: entered promiscuous mode [ 681.152468][T22297] netlink: 'syz.3.4221': attribute type 3 has an invalid length. [ 681.664760][T22326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.752854][T22334] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 682.521435][T22370] __nla_validate_parse: 70 callbacks suppressed [ 682.521457][T22370] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.4244'. [ 682.559618][T22368] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.615134][T22371] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.622431][T22371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.629134][T22368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4243'. [ 682.832065][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4249'. [ 682.847150][T22384] netlink: 'syz.1.4249': attribute type 5 has an invalid length. [ 682.855521][T22384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4249'. [ 682.944011][ T1147] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.957236][ T1147] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.976272][ T1147] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.020817][ T1147] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.071275][T22395] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 683.128802][T22398] netlink: 'syz.1.4254': attribute type 1 has an invalid length. [ 683.214499][T22403] netlink: 'syz.0.4255': attribute type 11 has an invalid length. [ 683.363540][T22398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 683.414942][T22404] bond3: (slave geneve2): making interface the new active one [ 683.437881][T22404] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 683.456853][T22413] vcan0: entered allmulticast mode [ 683.473261][T22413] netlink: 'syz.0.4257': attribute type 1 has an invalid length. [ 683.683987][T22421] xt_TPROXY: Can be used only with -p tcp or -p udp [ 683.801455][T22425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.862576][T22434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.928691][T22437] netlink: 'syz.3.4265': attribute type 1 has an invalid length. [ 683.992618][T22441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4265'. [ 684.003953][T22441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4265'. [ 684.040531][T22437] bond6: entered promiscuous mode [ 684.046655][T22437] 8021q: adding VLAN 0 to HW filter on device bond6 [ 684.088153][T22445] bond6: (slave bridge3): making interface the new active one [ 684.095703][T22445] bridge3: entered promiscuous mode [ 684.121452][T22445] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 684.209569][T22447] netlink: 'syz.2.4268': attribute type 1 has an invalid length. [ 684.239146][T22447] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4268'. [ 684.458498][T22460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4273'. [ 684.467847][T22460] netlink: 'syz.2.4273': attribute type 7 has an invalid length. [ 684.475620][T22460] netlink: 'syz.2.4273': attribute type 8 has an invalid length. [ 684.513536][T22460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4273'. [ 684.600218][T22464] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 684.612610][T22464] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 684.622277][T22464] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 684.770848][T22471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4278'. [ 685.366003][T22500] syzkaller0: entered promiscuous mode [ 685.378683][T22500] syzkaller0: entered allmulticast mode [ 685.399334][T22500] 0: reclassify loop, rule prio 0, protocol 800 [ 685.818399][T22528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.275934][T22552] netlink: 'syz.3.4301': attribute type 1 has an invalid length. [ 687.027149][T22597] sctp: [Deprecated]: syz.0.4311 (pid 22597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 687.027149][T22597] Use struct sctp_sack_info instead [ 687.261978][T22608] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 687.341415][T22608] bond9 (unregistering): Released all slaves [ 687.517290][T22627] IPVS: set_ctl: invalid protocol: 29 172.20.20.17:20003 [ 687.649919][T22623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.663871][T22623] netlink: 'syz.3.4319': attribute type 10 has an invalid length. [ 687.971532][T22623] bond0: (slave wlan1): Opening slave failed [ 687.996749][T22649] pim6reg: entered allmulticast mode [ 688.176136][T22661] macvlan0: entered promiscuous mode [ 688.250414][T22664] __nla_validate_parse: 5 callbacks suppressed [ 688.250437][T22664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4329'. [ 688.373641][T22670] SET target dimension over the limit! [ 688.417360][T22672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4332'. [ 688.549627][T22684] netlink: 'syz.2.4335': attribute type 1 has an invalid length. [ 688.563116][T22685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4334'. [ 688.585247][T22684] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4335'. [ 688.613349][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4334'. [ 688.639480][T22685] openvswitch: netlink: IP tunnel attribute has 7 unknown bytes. [ 688.794404][T22698] pim6reg527: entered allmulticast mode [ 688.801712][T22699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'. [ 688.827832][T22695] netlink: 'syz.0.4338': attribute type 4 has an invalid length. [ 688.836372][T22697] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4337'. [ 688.960685][T22708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4341'. [ 688.999001][T22708] openvswitch: netlink: Message has 1 unknown bytes. [ 689.036457][T22708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.335850][T22734] delete_channel: no stack [ 689.398647][T22739] xt_SECMARK: invalid mode: 9 [ 689.565550][T22750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4351'. [ 689.735737][T22757] netlink: 'syz.2.4353': attribute type 1 has an invalid length. [ 689.791574][T22757] bond9: entered promiscuous mode [ 689.801096][T22761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4354'. [ 689.818003][T22757] 8021q: adding VLAN 0 to HW filter on device bond9 [ 689.859079][T22762] bond9: (slave bridge3): making interface the new active one [ 689.877214][T22762] bridge3: entered promiscuous mode [ 689.883639][T22762] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 690.566738][T22815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.588259][T22806] bond8: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 690.602147][T22815] netlink: 'syz.2.4367': attribute type 3 has an invalid length. [ 690.613428][T22806] bond8 (unregistering): Released all slaves [ 690.853730][T22827] netlink: 'syz.2.4374': attribute type 1 has an invalid length. [ 690.907189][T22829] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20004 [ 690.999804][T22831] sock: sock_set_timeout: `syz.0.4375' (pid 22831) tries to set negative timeout [ 691.032427][T22829] bond10: (slave gretap2): making interface the new active one [ 691.052908][T22829] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 691.074960][T22834] macvlan2: entered promiscuous mode [ 691.080582][T22834] macvlan2: entered allmulticast mode [ 691.087615][T22834] bond10: entered promiscuous mode [ 691.092903][T22834] gretap2: entered promiscuous mode [ 691.099788][T22834] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 691.108219][T22834] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 691.158165][T22834] bond10: left promiscuous mode [ 691.163118][T22834] gretap2: left promiscuous mode [ 691.552307][T22844] syzkaller0: entered promiscuous mode [ 691.605639][T22862] Bluetooth: MGMT ver 1.23 [ 691.717785][T22864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 691.725112][T22864] IPv6: NLM_F_CREATE should be set when creating new route [ 691.732437][T22864] IPv6: NLM_F_CREATE should be set when creating new route [ 693.304060][T22864] lo: entered allmulticast mode [ 693.310427][T22864] tunl0: entered allmulticast mode [ 693.318850][T22864] gre0: entered allmulticast mode [ 693.329435][T22864] gretap0: entered allmulticast mode [ 693.340548][T22864] erspan0: entered allmulticast mode [ 693.353072][T22864] ip_vti0: entered allmulticast mode [ 693.362116][T22864] ip6_vti0: entered allmulticast mode [ 693.373141][T22864] sit0: entered allmulticast mode [ 693.386399][T22864] ip6tnl0: entered allmulticast mode [ 693.403076][T22864] ip6gre0: entered allmulticast mode [ 693.414704][T22864] syz_tun: entered allmulticast mode [ 693.424837][T22864] ip6gretap0: entered allmulticast mode [ 693.436273][T22864] bridge0: entered allmulticast mode [ 693.447796][T22864] vcan0: entered allmulticast mode [ 693.454923][T22864] bond0: entered allmulticast mode [ 693.464149][T22864] team0: entered allmulticast mode [ 693.475089][T22864] dummy0: entered allmulticast mode [ 693.489867][T22864] nlmon0: entered allmulticast mode [ 693.499010][T22864] caif0: entered allmulticast mode [ 693.504470][T22864] batadv0: entered allmulticast mode [ 693.515112][T22864] vxcan0: entered allmulticast mode [ 693.523882][T22864] vxcan1: entered allmulticast mode [ 693.532185][T22864] veth0: entered allmulticast mode [ 693.544094][T22864] veth1: entered allmulticast mode [ 693.556430][T22864] wg0: entered allmulticast mode [ 693.564634][T22864] wg1: entered allmulticast mode [ 693.573099][T22864] wg2: entered allmulticast mode [ 693.580259][T22864] veth0_to_bridge: entered allmulticast mode [ 693.592138][T22864] bridge_slave_0: entered allmulticast mode [ 693.601163][T22864] veth1_to_bridge: entered allmulticast mode [ 693.610781][T22864] bridge_slave_1: entered allmulticast mode [ 693.619321][T22864] veth0_to_bond: entered allmulticast mode [ 693.628804][T22864] bond_slave_0: entered allmulticast mode [ 693.634879][T22864] veth1_to_bond: entered allmulticast mode [ 693.643742][T22864] bond_slave_1: entered allmulticast mode [ 693.650732][T22864] veth0_to_team: entered allmulticast mode [ 693.661031][T22864] team_slave_0: entered allmulticast mode [ 693.667889][T22864] veth1_to_team: entered allmulticast mode [ 693.676177][T22864] team_slave_1: entered allmulticast mode [ 693.684283][T22864] veth0_to_batadv: entered allmulticast mode [ 693.693363][T22864] batadv_slave_0: entered allmulticast mode [ 693.703347][T22864] veth1_to_batadv: entered allmulticast mode [ 693.713006][T22864] batadv_slave_1: entered allmulticast mode [ 693.722176][T22864] xfrm0: entered allmulticast mode [ 693.730411][T22864] veth0_to_hsr: entered allmulticast mode [ 693.739430][T22864] hsr_slave_0: entered allmulticast mode [ 693.747848][T22864] veth1_to_hsr: entered allmulticast mode [ 693.756037][T22864] hsr_slave_1: entered allmulticast mode [ 693.764226][T22864] hsr0: entered allmulticast mode [ 693.773028][T22864] veth1_vlan: entered allmulticast mode [ 693.782670][T22864] veth0_vlan: entered allmulticast mode [ 693.796485][T22864] vlan0: entered allmulticast mode [ 693.802259][T22864] vlan1: entered allmulticast mode [ 693.808167][T22864] macvlan0: entered allmulticast mode [ 693.816140][T22864] macvlan1: entered allmulticast mode [ 693.824565][T22864] ipvlan0: entered allmulticast mode [ 693.831824][T22864] ipvlan1: entered allmulticast mode [ 693.838410][T22864] veth1_macvtap: entered allmulticast mode [ 693.846686][T22864] veth0_macvtap: entered allmulticast mode [ 693.855538][T22864] macvtap0: entered allmulticast mode [ 693.864045][T22864] macsec0: entered allmulticast mode [ 693.873090][T22864] geneve0: entered allmulticast mode [ 693.881483][T22864] geneve1: entered allmulticast mode [ 693.890131][T22864] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 693.898738][T22864] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 693.910588][T22864] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 693.922337][T22864] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 693.934891][T22864] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 693.943057][T22864] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 693.950720][T22864] sit1: entered allmulticast mode [ 693.955922][T22864] veth2: entered allmulticast mode [ 693.961487][T22864] veth3: entered allmulticast mode [ 693.966848][T22864] xfrm1: left promiscuous mode [ 693.972266][T22864] bond1: entered allmulticast mode [ 693.977804][T22864] geneve2: entered allmulticast mode [ 693.984690][T22864] bridge1: entered allmulticast mode [ 693.990427][T22864] bond2: entered allmulticast mode [ 693.999744][T22864] macsec1: entered allmulticast mode [ 694.008335][T22864] bond3: entered allmulticast mode [ 694.013840][T22864] team1: left promiscuous mode [ 694.023158][T22864] bond4: left promiscuous mode [ 694.028227][T22864] bond4: entered allmulticast mode [ 694.034780][T22864] vlan2: entered allmulticast mode [ 694.040492][T22864] bridge2: entered allmulticast mode [ 694.045922][T22864] bond5: left promiscuous mode [ 694.050818][T22864] bond5: entered allmulticast mode [ 694.056073][T22864] ipip0: entered allmulticast mode [ 694.062106][T22864] vti0: entered allmulticast mode [ 694.068188][T22864] bond6: left promiscuous mode [ 694.072992][T22864] bond6: entered allmulticast mode [ 694.081116][T22864] vxlan0: entered allmulticast mode [ 694.093223][T22864] bond7: entered allmulticast mode [ 694.100338][T22864] bond8: entered allmulticast mode [ 694.105825][T22864] gretap1: entered allmulticast mode [ 694.113161][T22864] bond9: left promiscuous mode [ 694.118369][T22864] bridge3: left promiscuous mode [ 694.123459][T22864] bond9: entered allmulticast mode [ 694.128696][T22864] bridge3: entered allmulticast mode [ 694.137831][T22864] bond10: entered allmulticast mode [ 694.143260][T22864] gretap2: entered allmulticast mode [ 694.150703][T22869] bond0: option ad_select: unable to set because the bond device is up [ 694.287218][ T75] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.306504][ T75] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.352909][ T75] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 694.373065][ T75] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.383990][ T75] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.397595][ T75] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 694.441317][ T75] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.460274][ T75] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.472656][ T75] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 694.484580][T22889] syzkaller0: entered promiscuous mode [ 694.493849][T22889] syzkaller0: entered allmulticast mode [ 694.501671][ T75] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.512199][ T75] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.538832][ T75] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 694.588652][T22903] __nla_validate_parse: 7 callbacks suppressed [ 694.588674][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4396'. [ 694.621631][T22902] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 694.665616][T22907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4397'. [ 694.872073][T22911] syzkaller0: entered promiscuous mode [ 694.890540][T22911] syzkaller0: entered allmulticast mode [ 694.935969][T22911] netlink: 'syz.0.4399': attribute type 20 has an invalid length. [ 694.947374][T22911] IPv6: NLM_F_CREATE should be specified when creating new route [ 695.045209][T22921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 695.139605][T22930] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4405'. [ 695.972982][T22967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4414'. [ 696.019540][T22970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4414'. [ 696.142440][T22970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4414'. [ 696.190622][T22970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4414'. [ 696.295290][T22981] netlink: 'syz.3.4416': attribute type 4 has an invalid length. [ 696.305595][T22981] netlink: 'syz.3.4416': attribute type 4 has an invalid length. [ 696.323674][T22981] netlink: 'syz.3.4416': attribute type 1 has an invalid length. [ 696.333905][T22970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4414'. [ 696.345839][T22981] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4416'. [ 696.994600][T23011] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 697.030869][T23011] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 697.054036][T23011] gretap3: entered promiscuous mode [ 697.076363][T23011] gretap3: entered allmulticast mode [ 697.126276][T23012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.410509][T23032] syzkaller0: entered promiscuous mode [ 697.416249][T23032] syzkaller0: entered allmulticast mode [ 697.672769][T23045] syzkaller0: entered promiscuous mode [ 697.691906][T23045] syzkaller0: entered allmulticast mode [ 697.815659][T23049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.210367][T23072] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 698.305881][T23072] tipc: Invalid UDP bearer configuration [ 698.305938][T23072] tipc: Enabling of bearer rejected, failed to enable media [ 698.861180][T23112] netlink: 'syz.4.4453': attribute type 2 has an invalid length. [ 698.918311][T23114] netlink: 'syz.1.4452': attribute type 1 has an invalid length. [ 699.616055][T23160] __nla_validate_parse: 14 callbacks suppressed [ 699.616080][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 699.658413][T23160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4465'. [ 699.688904][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 699.708783][T23160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4465'. [ 699.748358][T23149] nbd5: detected capacity change from 0 to 63 [ 699.817283][ T5145] block nbd5: Receive control failed (result -104) [ 699.825644][ T5831] block nbd5: Receive control failed (result -32) [ 699.896452][T23168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4469'. [ 700.091805][T23175] bond13: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 700.720248][T23175] bond13 (unregistering): Released all slaves [ 701.105706][T23216] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4478'. [ 701.163336][T23216] netlink: 'syz.2.4478': attribute type 21 has an invalid length. [ 701.186986][T23216] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4478'. [ 701.248084][T23216] netlink: 'syz.2.4478': attribute type 5 has an invalid length. [ 701.269138][T23216] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4478'. [ 701.346380][T23216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4478'. [ 701.470031][T23241] netlink: 'syz.3.4486': attribute type 1 has an invalid length. [ 701.528642][T23245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4485'. [ 701.713660][T23254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.189774][T23249] tipc: Enabled bearer , priority 0 [ 702.229289][T23247] tipc: Disabling bearer [ 702.312294][T23276] netlink: 'syz.0.4493': attribute type 1 has an invalid length. [ 702.349656][T23276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 702.620410][T23297] openvswitch: netlink: IPv4 tun info is not correct [ 703.303264][T23341] gretap4: entered promiscuous mode [ 703.318545][T23341] batman_adv: batadv0: Adding interface: gretap4 [ 703.325300][T23341] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 703.346221][T23341] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 703.642677][T23348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 703.953583][T23365] netlink: 'syz.2.4522': attribute type 1 has an invalid length. [ 704.061593][T23365] bond11: entered promiscuous mode [ 704.106141][T23365] 8021q: adding VLAN 0 to HW filter on device bond11 [ 704.151683][T23378] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 704.181829][T23378] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 704.192902][T23378] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 704.233365][T23391] netlink: 'syz.1.4531': attribute type 32 has an invalid length. [ 704.286193][T23391] bond13: Setting coupled_control to off (0) [ 704.361808][T23397] bond0: entered promiscuous mode [ 704.367192][T23397] bridge1: entered promiscuous mode [ 704.379876][T23397] bond0: left promiscuous mode [ 704.389472][T23397] bridge1: left promiscuous mode [ 704.518364][T23402] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 704.537139][ T5917] IPVS: starting estimator thread 0... [ 704.627417][T23403] IPVS: using max 25 ests per chain, 60000 per kthread [ 704.642332][T23409] syzkaller0: entered promiscuous mode [ 704.648146][T23409] syzkaller0: entered allmulticast mode [ 704.673956][T23410] __nla_validate_parse: 44 callbacks suppressed [ 704.673962][T23409] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4535'. [ 704.673980][T23410] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4535'. [ 704.955365][T23420] IPVS: set_ctl: invalid protocol: 13745 0.0.0.0:20002 [ 705.546005][T23448] xt_l2tp: missing protocol rule (udp|l2tpip) [ 705.569990][T23448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4544'. [ 705.835177][T23461] sock: sock_timestamping_bind_phc: sock not bind to device [ 705.898323][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4548'. [ 705.991741][T23463] geneve3: entered promiscuous mode [ 706.001437][T23466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4549'. [ 706.049228][ T58] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.064565][ T58] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.090927][ T58] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.127301][T23469] syzkaller0: entered promiscuous mode [ 706.141703][T23473] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 706.166300][T23475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4552'. [ 706.177515][T23469] syzkaller0: entered allmulticast mode [ 706.197406][ T58] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.435796][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4556'. [ 706.564502][T23488] syzkaller0: entered promiscuous mode [ 706.570327][T23488] syzkaller0: entered allmulticast mode [ 706.602012][T23489] netlink: 'syz.3.4556': attribute type 12 has an invalid length. [ 706.771725][T23507] netlink: 'syz.1.4560': attribute type 1 has an invalid length. [ 706.978623][T23516] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4563'. [ 706.993083][T23516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.827327][T23519] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 708.835700][T23519] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 709.088117][T23542] IPVS: Unknown mcast interface: pimreg0 [ 709.100345][T23539] syzkaller0: entered promiscuous mode [ 709.171641][T23539] syzkaller0: entered allmulticast mode [ 709.230819][T23547] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 709.343810][T23552] syzkaller0: entered promiscuous mode [ 709.349583][T23552] syzkaller0: entered allmulticast mode [ 709.376169][T23555] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.776235][T23576] netlink: 576 bytes leftover after parsing attributes in process `syz.2.4578'. [ 709.880323][T23580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4581'. [ 709.889763][T23580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4581'. [ 711.340301][T23569] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.4580'. [ 711.349947][T23569] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.4580'. [ 711.374581][T23576] xfrm0: left allmulticast mode [ 711.595121][T23599] veth0_to_team: left allmulticast mode [ 711.697922][T23611] x_tables: unsorted underflow at hook 3 [ 711.703822][T23606] x_tables: unsorted underflow at hook 3 [ 711.799004][T23614] [ 711.801402][T23614] ====================================================== [ 711.808458][T23614] WARNING: possible circular locking dependency detected [ 711.815530][T23614] syzkaller #0 Not tainted [ 711.819989][T23614] ------------------------------------------------------ [ 711.827046][T23614] syz.3.4590/23614 is trying to acquire lock: [ 711.833236][T23614] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 711.843137][T23614] [ 711.843137][T23614] but task is already holding lock: [ 711.850580][T23614] ffff888035b00260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 711.860328][T23614] [ 711.860328][T23614] which lock already depends on the new lock. [ 711.860328][T23614] [ 711.870764][T23614] [ 711.870764][T23614] the existing dependency chain (in reverse order) is: [ 711.879845][T23614] [ 711.879845][T23614] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 711.887911][T23614] lock_sock_nested+0x48/0x100 [ 711.893283][T23614] do_ipv6_setsockopt+0x85e/0x31c0 [ 711.898969][T23614] ipv6_setsockopt+0x59/0x170 [ 711.904200][T23614] mptcp_setsockopt+0xe7f/0x36a0 [ 711.909687][T23614] do_sock_setsockopt+0x17c/0x1b0 [ 711.915259][T23614] __x64_sys_setsockopt+0x13d/0x1b0 [ 711.920999][T23614] do_syscall_64+0x14d/0xf80 [ 711.926141][T23614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.932580][T23614] [ 711.932580][T23614] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 711.940443][T23614] lock_sock_nested+0x48/0x100 [ 711.945747][T23614] inet_shutdown+0x6a/0x390 [ 711.950800][T23614] nbd_mark_nsock_dead+0x2e9/0x560 [ 711.956464][T23614] recv_work+0x1c7f/0x1d90 [ 711.961425][T23614] process_scheduled_works+0xb6e/0x18c0 [ 711.967521][T23614] worker_thread+0xa53/0xfc0 [ 711.972657][T23614] kthread+0x388/0x470 [ 711.977261][T23614] ret_from_fork+0x51e/0xb90 [ 711.982406][T23614] ret_from_fork_asm+0x1a/0x30 [ 711.987733][T23614] [ 711.987733][T23614] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 711.995855][T23614] __mutex_lock+0x19f/0x1300 [ 712.001032][T23614] nbd_queue_rq+0x37b/0x1100 [ 712.006174][T23614] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 712.012359][T23614] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 712.019249][T23614] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 712.025783][T23614] blk_mq_run_hw_queue+0x348/0x4f0 [ 712.031445][T23614] blk_mq_dispatch_list+0xd16/0xe10 [ 712.037211][T23614] blk_mq_flush_plug_list+0x48d/0x570 [ 712.043135][T23614] __blk_flush_plug+0x3ed/0x4d0 [ 712.048536][T23614] __submit_bio+0x28d/0x580 [ 712.053596][T23614] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 712.059863][T23614] block_read_full_folio+0x599/0x830 [ 712.065704][T23614] filemap_read_folio+0x137/0x3b0 [ 712.071277][T23614] do_read_cache_folio+0x358/0x590 [ 712.076935][T23614] read_part_sector+0xb6/0x2b0 [ 712.082251][T23614] adfspart_check_ICS+0xa5/0xa40 [ 712.087733][T23614] bdev_disk_changed+0x7ba/0x1550 [ 712.093307][T23614] blkdev_get_whole+0x380/0x510 [ 712.098700][T23614] bdev_open+0x31e/0xd30 [ 712.103485][T23614] blkdev_open+0x470/0x610 [ 712.108460][T23614] do_dentry_open+0x785/0x14e0 [ 712.113775][T23614] vfs_open+0x3b/0x340 [ 712.118394][T23614] path_openat+0x2e08/0x3860 [ 712.123527][T23614] do_file_open+0x23e/0x4a0 [ 712.128575][T23614] do_sys_openat2+0x113/0x200 [ 712.133801][T23614] __x64_sys_openat+0x138/0x170 [ 712.139205][T23614] do_syscall_64+0x14d/0xf80 [ 712.144347][T23614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.150823][T23614] [ 712.150823][T23614] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 712.158065][T23614] __mutex_lock+0x19f/0x1300 [ 712.163211][T23614] nbd_queue_rq+0xc6/0x1100 [ 712.168522][T23614] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 712.174613][T23614] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 712.181761][T23614] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 712.188298][T23614] blk_mq_run_hw_queue+0x348/0x4f0 [ 712.193956][T23614] blk_mq_dispatch_list+0xd16/0xe10 [ 712.199704][T23614] blk_mq_flush_plug_list+0x48d/0x570 [ 712.205646][T23614] __blk_flush_plug+0x3ed/0x4d0 [ 712.211044][T23614] __submit_bio+0x28d/0x580 [ 712.216100][T23614] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 712.222289][T23614] block_read_full_folio+0x599/0x830 [ 712.228126][T23614] filemap_read_folio+0x137/0x3b0 [ 712.233699][T23614] do_read_cache_folio+0x358/0x590 [ 712.239534][T23614] read_part_sector+0xb6/0x2b0 [ 712.244847][T23614] adfspart_check_ICS+0xa5/0xa40 [ 712.250333][T23614] bdev_disk_changed+0x7ba/0x1550 [ 712.255908][T23614] blkdev_get_whole+0x380/0x510 [ 712.261307][T23614] bdev_open+0x31e/0xd30 [ 712.266102][T23614] blkdev_open+0x470/0x610 [ 712.271064][T23614] do_dentry_open+0x785/0x14e0 [ 712.276479][T23614] vfs_open+0x3b/0x340 [ 712.281093][T23614] path_openat+0x2e08/0x3860 [ 712.286229][T23614] do_file_open+0x23e/0x4a0 [ 712.291391][T23614] do_sys_openat2+0x113/0x200 [ 712.296714][T23614] __x64_sys_openat+0x138/0x170 [ 712.302237][T23614] do_syscall_64+0x14d/0xf80 [ 712.307377][T23614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.313809][T23614] [ 712.313809][T23614] -> #3 (set->srcu){.+.+}-{0:0}: [ 712.321046][T23614] __synchronize_srcu+0xca/0x300 [ 712.326536][T23614] elevator_switch+0x1e8/0x7a0 [ 712.331842][T23614] elevator_change+0x2cc/0x450 [ 712.337148][T23614] elevator_set_default+0x36c/0x430 [ 712.342890][T23614] blk_register_queue+0x366/0x430 [ 712.348464][T23614] __add_disk+0x677/0xd50 [ 712.353350][T23614] add_disk_fwnode+0xfb/0x480 [ 712.358580][T23614] nbd_dev_add+0x72c/0xb50 [ 712.363549][T23614] nbd_init+0x168/0x1f0 [ 712.368259][T23614] do_one_initcall+0x250/0x8d0 [ 712.373574][T23614] do_initcall_level+0x104/0x190 [ 712.379099][T23614] do_initcalls+0x59/0xa0 [ 712.383972][T23614] kernel_init_freeable+0x2a6/0x3e0 [ 712.389720][T23614] kernel_init+0x1d/0x1d0 [ 712.394592][T23614] ret_from_fork+0x51e/0xb90 [ 712.399817][T23614] ret_from_fork_asm+0x1a/0x30 [ 712.405157][T23614] [ 712.405157][T23614] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 712.413014][T23614] __mutex_lock+0x19f/0x1300 [ 712.418184][T23614] elevator_change+0x1b3/0x450 [ 712.423496][T23614] elevator_set_none+0xb5/0x140 [ 712.428894][T23614] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 712.435255][T23614] nbd_start_device+0x17f/0xb10 [ 712.440661][T23614] nbd_genl_connect+0x165b/0x1cf0 [ 712.446231][T23614] genl_family_rcv_msg_doit+0x22a/0x330 [ 712.452324][T23614] genl_rcv_msg+0x61c/0x7a0 [ 712.457377][T23614] netlink_rcv_skb+0x232/0x4b0 [ 712.462689][T23614] genl_rcv+0x28/0x40 [ 712.467218][T23614] netlink_unicast+0x80f/0x9b0 [ 712.472520][T23614] netlink_sendmsg+0x813/0xb40 [ 712.477831][T23614] ____sys_sendmsg+0x972/0x9f0 [ 712.483140][T23614] ___sys_sendmsg+0x2a5/0x360 [ 712.488368][T23614] __x64_sys_sendmsg+0x1bd/0x2a0 [ 712.493942][T23614] do_syscall_64+0x14d/0xf80 [ 712.499087][T23614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.505522][T23614] [ 712.505522][T23614] -> #1 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 712.514161][T23614] blk_alloc_queue+0x546/0x680 [ 712.519484][T23614] __blk_mq_alloc_disk+0x197/0x390 [ 712.525152][T23614] nbd_dev_add+0x499/0xb50 [ 712.530118][T23614] nbd_init+0x168/0x1f0 [ 712.534829][T23614] do_one_initcall+0x250/0x8d0 [ 712.540150][T23614] do_initcall_level+0x104/0x190 [ 712.546161][T23614] do_initcalls+0x59/0xa0 [ 712.551035][T23614] kernel_init_freeable+0x2a6/0x3e0 [ 712.556804][T23614] kernel_init+0x1d/0x1d0 [ 712.561689][T23614] ret_from_fork+0x51e/0xb90 [ 712.566830][T23614] ret_from_fork_asm+0x1a/0x30 [ 712.572148][T23614] [ 712.572148][T23614] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 712.579391][T23614] __lock_acquire+0x15a5/0x2cf0 [ 712.584803][T23614] lock_acquire+0xf0/0x2e0 [ 712.589767][T23614] fs_reclaim_acquire+0x71/0x100 [ 712.595250][T23614] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 712.601600][T23614] __alloc_skb+0x1d0/0x7d0 [ 712.606562][T23614] tcp_stream_alloc_skb+0x3f/0x580 [ 712.612244][T23614] tcp_connect+0x1527/0x5370 [ 712.617399][T23614] tcp_v4_connect+0x10f6/0x19b0 [ 712.622815][T23614] tcp_v6_connect+0xbbb/0x1b10 [ 712.628120][T23614] __inet_stream_connect+0x25a/0xdd0 [ 712.633953][T23614] inet_stream_connect+0x66/0xa0 [ 712.639439][T23614] kernel_connect+0x141/0x1c0 [ 712.644788][T23614] smc_connect+0x7a5/0xd90 [ 712.649923][T23614] __sys_connect+0x312/0x450 [ 712.655061][T23614] __x64_sys_connect+0x7a/0x90 [ 712.660382][T23614] do_syscall_64+0x14d/0xf80 [ 712.665530][T23614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.671966][T23614] [ 712.671966][T23614] other info that might help us debug this: [ 712.671966][T23614] [ 712.682218][T23614] Chain exists of: [ 712.682218][T23614] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 712.682218][T23614] [ 712.695214][T23614] Possible unsafe locking scenario: [ 712.695214][T23614] [ 712.702684][T23614] CPU0 CPU1 [ 712.708065][T23614] ---- ---- [ 712.713446][T23614] lock(k-sk_lock-AF_INET6); [ 712.718150][T23614] lock(sk_lock-AF_INET6); [ 712.725199][T23614] lock(k-sk_lock-AF_INET6); [ 712.732419][T23614] lock(fs_reclaim); [ 712.736424][T23614] [ 712.736424][T23614] *** DEADLOCK *** [ 712.736424][T23614] [ 712.744588][T23614] 2 locks held by syz.3.4590/23614: [ 712.749829][T23614] #0: ffff88806c5a0ee0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xd90 [ 712.759103][T23614] #1: ffff888035b00260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 712.769243][T23614] [ 712.769243][T23614] stack backtrace: [ 712.775175][T23614] CPU: 0 UID: 0 PID: 23614 Comm: syz.3.4590 Not tainted syzkaller #0 PREEMPT(full) [ 712.775205][T23614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 712.775227][T23614] Call Trace: [ 712.775235][T23614] [ 712.775243][T23614] dump_stack_lvl+0xe8/0x150 [ 712.775272][T23614] print_circular_bug+0x2e1/0x300 [ 712.775304][T23614] check_noncircular+0x12e/0x150 [ 712.775335][T23614] __lock_acquire+0x15a5/0x2cf0 [ 712.775363][T23614] ? inet_sk_rebuild_header+0x93/0x1da0 [ 712.775390][T23614] ? arch_stack_walk+0xfb/0x150 [ 712.775419][T23614] ? __lock_acquire+0x6b5/0x2cf0 [ 712.775445][T23614] lock_acquire+0xf0/0x2e0 [ 712.775467][T23614] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 712.775492][T23614] fs_reclaim_acquire+0x71/0x100 [ 712.775515][T23614] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 712.775534][T23614] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 712.775554][T23614] ? __alloc_skb+0x1d0/0x7d0 [ 712.775576][T23614] ? ipv4_default_advmss+0x20/0x340 [ 712.775603][T23614] __alloc_skb+0x1d0/0x7d0 [ 712.775626][T23614] tcp_stream_alloc_skb+0x3f/0x580 [ 712.775653][T23614] ? __asan_memset+0x22/0x50 [ 712.775673][T23614] tcp_connect+0x1527/0x5370 [ 712.775699][T23614] ? __lock_acquire+0x6b5/0x2cf0 [ 712.775733][T23614] ? __pfx_tcp_connect+0x10/0x10 [ 712.775763][T23614] ? __asan_memset+0x22/0x50 [ 712.775782][T23614] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 712.775800][T23614] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 712.775826][T23614] ? sk_setup_caps+0x9ef/0xc40 [ 712.775851][T23614] ? sk_setup_caps+0x29/0xc40 [ 712.775876][T23614] tcp_v4_connect+0x10f6/0x19b0 [ 712.775904][T23614] ? finish_task_switch+0x240/0x920 [ 712.775935][T23614] ? __pfx_tcp_v4_connect+0x10/0x10 [ 712.775963][T23614] ? tcp_v6_connect+0x62d/0x1b10 [ 712.775983][T23614] tcp_v6_connect+0xbbb/0x1b10 [ 712.776001][T23614] ? irqentry_exit+0x59e/0x620 [ 712.776033][T23614] ? __pfx_tcp_v6_connect+0x10/0x10 [ 712.776052][T23614] ? futex_unqueue+0x22/0x240 [ 712.776074][T23614] ? futex_unqueue+0x211/0x240 [ 712.776095][T23614] __inet_stream_connect+0x25a/0xdd0 [ 712.776124][T23614] ? do_raw_spin_lock+0x12b/0x2f0 [ 712.776148][T23614] ? __pfx___inet_stream_connect+0x10/0x10 [ 712.776176][T23614] ? inet_stream_connect+0x51/0xa0 [ 712.776201][T23614] ? __local_bh_enable_ip+0xd0/0x130 [ 712.776228][T23614] inet_stream_connect+0x66/0xa0 [ 712.776254][T23614] kernel_connect+0x141/0x1c0 [ 712.776283][T23614] ? __pfx_kernel_connect+0x10/0x10 [ 712.776310][T23614] ? do_raw_spin_lock+0x12b/0x2f0 [ 712.776333][T23614] ? smc_connect+0xbd/0xd90 [ 712.776353][T23614] ? __local_bh_enable_ip+0xd0/0x130 [ 712.776379][T23614] smc_connect+0x7a5/0xd90 [ 712.776403][T23614] __sys_connect+0x312/0x450 [ 712.776425][T23614] ? __pfx___sys_connect+0x10/0x10 [ 712.776451][T23614] ? rcu_is_watching+0x15/0xb0 [ 712.776480][T23614] __x64_sys_connect+0x7a/0x90 [ 712.776502][T23614] do_syscall_64+0x14d/0xf80 [ 712.776528][T23614] ? trace_irq_disable+0x3b/0x150 [ 712.776543][T23614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.776561][T23614] ? clear_bhb_loop+0x40/0x90 [ 712.776581][T23614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.776604][T23614] RIP: 0033:0x7f3095b9c819 [ 712.776625][T23614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.776643][T23614] RSP: 002b:00007f3096976028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 712.776663][T23614] RAX: ffffffffffffffda RBX: 00007f3095e15fa0 RCX: 00007f3095b9c819 [ 712.776677][T23614] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000004 [ 712.776689][T23614] RBP: 00007f3095c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 712.776700][T23614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.776711][T23614] R13: 00007f3095e16038 R14: 00007f3095e15fa0 R15: 00007fff2948a0a8 [ 712.776732][T23614] [ 713.180293][T23620] netlink: 'syz.4.4591': attribute type 1 has an invalid length. [ 713.231187][T23620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 713.243404][T23627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.261773][T23616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4591'. [ 713.280875][T23616] bond3: (slave geneve2): making interface the new active one [ 713.290281][T23616] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 716.557889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)