last executing test programs: 10.562084823s ago: executing program 1 (id=1891): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="3502027d892d3e1b00fe00000000000000000000dfd47ba789a23cb6dcbfe04aa1c26eaac6949e5b85bd78eed4", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000005000000b60000000800000000000000", @ANYRES32=r2, @ANYBLOB='=\f\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0400"/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x50) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r7, &(0x7f0000000300)="98a613fd", 0x4) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002cbd7100fcdbdf250900020073795e320000000008004100"/56], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0x0, 0xf9612d57cd99e519}, 0x0) 9.391284397s ago: executing program 1 (id=1896): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0, @in=@local, 0x4e23, 0x0, 0x4e20, 0x0, 0x2}, {0x1, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x4d3, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x4000010) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @remote, 0x8}, 0x1c) 8.836083301s ago: executing program 1 (id=1900): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000390400000000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="11980400519004000500210080000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d9", 0x2, 0x20000080, &(0x7f0000000200)={0x11, 0x86ca, r6, 0x1, 0x4, 0x6, @local}, 0x14) socket$tipc(0x1e, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r9, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7fffffff}, &(0x7f0000000180)=0x8) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x8, '\x00', r8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r10, r8, 0x25, 0x8, @void}, 0x10) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x4008031, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(r12, 0x29, 0x17, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFMTU(r11, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x1}) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090302000002ffdbdf250100000008000800", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 7.372541159s ago: executing program 0 (id=1904): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x1403, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x40082, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4f0}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x40082, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4f0}}}, 0x108) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000004c0)="b9fe030768045c8c989a14f088a865f986dd", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002cc0)={r6, r7}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002cc0)={r6, r7}, 0x10) sendmmsg$inet(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="4c89b83ba1e40fd79a61d38625641b6f741ed4101f670c0df6ff46ea20081d6940d6010a47dbf94e6580c8e633763f3aa4a5c917317066ec0f221082542b6d37c65bb2d21fc6d7148c07881c3c9e34b8af53e7aa111cb493c03c1b18f550e9753b32952e6ae73341d1a2c118637f50b3cbeaf50f92946578e91d009441ff240d610da965518f6d26c4ba9649a8fa43979312a72a6c20c0f1f5b0f42ae517e49a4af7932348453f8365c61f5247dc562246530b75d2296090d605cbc7b8ce284c811b48c55be673341ede43b52f7a28f8790af2d3443a62610df5a3adc3d8b5a200f26147b984788a", 0xe8}, {&(0x7f0000002c40)="12c6fd84d618b5b7efef589cb99ae3b5dbeafcda46034f6cff99eca32ccf8a4f8706c413be35fed00d9657ab3c46be35bb65d963ffdfe49ab64c26261c41356221442d5e0a20fc4c107494e9fdd081", 0x4f}, {&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000280)="5d4d91ef62eb46729e0518879f2c142e902ed47fc8f954869604e8e93d6b6137e81ec710244b37a3b8aebc79edf966139065ce453985c9f5647bbdd00ddd979403d77bbe7a511125568622262e0863fe6f2913d19086a65ca87674dbd80bdff99e6c3928ad852f84b12eae64bf09cc0bc2b329230a1737d0115959e3722b16df7352766dacc97da0d1a29350e87ab5db2e22ea58bf99641d43e3383842fb7540b98205baa685f0235d95b51e10ba6a19e286e58bb8c8a837e2320bfe361cb16829b63d44d7e7f963a5c0fb899c03ee2395eb9e1e12c209a3efa705b6c0de5d049b8b9ceab1e20e95841ccee9fe", 0xed}], 0x4, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x38}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000500)="c7038592f128303876cf0d0b2c10143ce6faf074b94d003557b3c3b98190dd1d7e0de750aa11f9b2f1b10a3d5f97a19d8b2080649f5e0edcf0f18996f033d35b0fa8c6b7324e51247bb52e1c2368e0e35ed06fbf81893564c277c7446e63d06c56f35f465a8cfc45409fcb753805b32ab8c37a5dcbba855a70911635c50a6d11b6da0bcf12c4cc557900fb7400d9c5b9fbb841fe084260256e2fe218c4a4f2bd3daa4648350ae68665bb2306a4d6274f85b0114015c79ce1780fc5f9ab51a7de", 0xc0}, {&(0x7f00000005c0)="22eeb7e2f06d3b22e599331a08f5bb5ad2c8a57c1ee3f6480ad9133f1fa6023d0518f4445681d8e2c5b209798bb3b55c0beb824b18814cc1842a49ff586132b31f2876b546c5c8bd94b64c0634046d958fdef720ad789710f7e8bee32d252e9a6beaa6f4fa987b74b116ce21cc806a545aefb02a80521ec638ce8e6c2166857407faa446f81a5b52c17e0efae47f5be06a70e10aca11741b41ac8936251de49a6524fd470672a00f5b4745de8fe7a804849de1af23734903cae5611984bb3f6ad605", 0xc2}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="6032a9c8ec8f7fc28f1bc73c7bea0de929c2034696f2a561571342838a0bcab47a565e7a19146770e048076c3a2c3304399a4bffa0072dc535f40c9334793343c1c64eac4b06f1f3c1c429cad8b907cc48212a9f02a5caf5538a5e8de56d77122f5a8ce5c34a58d62f1bedd04d26480000000038f057753a5a83c8be4d9c97aad5ac99af", 0x84}, {&(0x7f0000001780)="683ffc95335966f12518cc5ab83a413d68a6", 0x12}, {&(0x7f00000017c0)="c48532418ad89e245c58895a789268ec854745a4a29d6aecf8b1e74cb28ce58c09a954f4d53a4c5853bafa755a8cb2b3f916bf141933615c7802e49f7366cea627173d1c778dba17886d4b597bd0ef75486196cefd05d14fb09ba01458c8d75187bdc31e10467a58715bd5de05f97d6e0482081beab933518b70f65de23a575e234c293f206752f1e6bb", 0x8a}, {&(0x7f0000001880)="5f837db6b5570ed57ae912972dfe2b4b3805bf9c725f444a54278b7acff16477d644818cddbc81979fd3be013ca7756e9c6987c652c16b96ca3fb0b9246fee1cbb7140bf8b599c0142627edf51e63b5f29c82107e94e162e25fffd50ca914f35edf4b376799e48941953ffb975af2f860a405941dc5c5785496d40e5ea3eb52cd185cb7cc09bb5ad3ec9e2612d4e0dec9f0ed3c459f329d8713344afca873b221e402779cd14211166cb653bb81ca9fda14658", 0xb3}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="34b71afdb5e3218a363c9cb253be3c69195cbc05d1cda5b2297bbdb1298eeb9c949cd303c59944ff0b3edd26cc0826b2b7a0a71a3d5ae66d68714950dc93405833a9879e61136ed31efb59278a0bb2a0a7ba4fb88ed20fae10cc776aa96689053d1516cd83b557ce107375d3ff8738b1bc621d0bbdcae894fd90be1e8140ecd69f18205a2b8d88a6f07fff3acad0ab5a5ed66d", 0x93}], 0x9, &(0x7f0000002ac0)=ANY=[@ANYBLOB="90000000000000000000000007000000832328ac1414aaac1e010164010102e00000017f000001ac1414bbe000000200000000940401000144081b2000000009014410cb4000008001ffffff0000000009443c5d137f00000100000007ffffffff00000006ac1414bb00000000ac1414aa000000007f000001000000000a01010100000939e0000002000000010000001400000000000000000000000200000002000000000000001400000000000000000000000200000079000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ac141441ac14140000010000050000000000000000"], 0xb2}}], 0x2, 0x8080) 6.326810302s ago: executing program 0 (id=1908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="660a00000000000063112200000000001800000000000000000000000000000095000000000000001e1c7fed9bd69edeb17d549956dd4271d8c328ff7d5c93f6e1247c4cbe86d02bb21504fab945bc380d1567881af9eb9a27a85c5abd81781694be734c2d74726902c4c702e4ffec4b2b3673a731174144c7b93827e6df59f77722a2c6f07d6f"], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r3, &(0x7f0000000440)={&(0x7f00000000c0)=@l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7eff, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000e00)="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", 0x155}, {0x0}], 0x2}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf25120000000800060001000100180001801400020076657468305f7664616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001000)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x1b01e78cfb254c16}]}}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0xfff9, 0x5, 0x1, 0x4, 0x0, 0x5}}, {0xe, 0x2, [0x9, 0x2db, 0x590b, 0x1ff, 0x0]}}, {{0x1c, 0x1, {0xf, 0x1, 0x6, 0x200, 0x1, 0xd903, 0x7, 0x8}}, {0x14, 0x2, [0x5, 0x1e1, 0x0, 0x1000, 0x9, 0x7f, 0x5, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff7}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40088c1}, 0x850) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(r0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000078f59c6eaedd78a6af84e4da8fc707f25eb4e12813c58445b41b4c9f19811fba246280ea1020f4fab8d3294f5556dfc9fe25cb77e26f55dbb2589c96b9c18ae0b42fcf1c1b2389104784a4d7da7b33d41fc5eb896b9974585945cf73d75e1403f28b28263581aafd5e2878c5869e8b0e8c764514c5708bc7569824", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmmsg$inet(r6, &(0x7f0000000d40)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000006c0)="e1147f58447716c62f52f06445db2de3660d3cdd27d8d7c576ab614e79d36e8ea467abd0eb988bb0f700710640556dc0026c737607a2ce113ba45b111794599c982ea4a0eef0fcf0b71f9caa3300c87348dff0e9d7db1dbe15b949ab435dc84613917f4b1ada103041513dc826f213fe5167f12ade224ba6107286bd59e0bf837b10b8397ad7074bbcb5530612b5dfca534e3d27385e32f7ec83b3cd1c84c0757864cb724d71971e29a0ade44c", 0xad}, {&(0x7f0000000900)}, {&(0x7f0000000940)="ad61fa25e7c4e3fb69f2933b91feeb8826d04e9ca396814d3999279f457724060f7dbd761ff9689aea3babd9763839da5bc5a54f361ff527a5dea194b7b7d6126aee8e890186e683ab3636d78fa201c3a3335b071e3f6d5cb5708da8d4c513a75294fc1711013c24a854d26b4a8b871ef1fc794c1b0acf44b1b47c26131f6d800210b63793492dc4a1b479b182b77a8a8ff5f43da4af1a55d866", 0x9a}], 0x3, &(0x7f0000000a40)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xd7, [@local, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x94, [@local, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @generic={0x83, 0x12, "300012d6c5bfd87271a1bde6a4b32d75"}, @ssrr={0x89, 0x1f, 0x46, [@private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @empty, @rand_addr=0x64010100]}, @generic={0x86, 0x5, "7b0f0c"}, @lsrr={0x83, 0x7, 0x68, [@private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14}}], 0xd0}}, {{&(0x7f0000000b40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="fd667f41227087c348d358755e4497ae29c2ffb5d8836ea1928380e4c60ce8c3fc04ede98a83321aea943c172e91e852e99f8d0ed372e2869e7c02159051ca22733ac915e8631340fb4293bf6234bce00964d8e9433b0fa844099f59a615a55e765ecc4b5e634bdfdfb49dab7413469c5463265c7f52badec598", 0x7a}], 0x1, &(0x7f0000000c40)}}, {{&(0x7f0000000c80)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}}], 0x3, 0x40080) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r10, &(0x7f0000000300)}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x8c}}, 0x0) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) 5.912354856s ago: executing program 3 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000300000001"], 0x4c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000140)="34bc2ddd19d8dec4e2cd80611de3a147f5415a231d33f6d2e512412ae47691a37e9f0c08fc29f4b9cd234ae8a0d74ebb9ec26849557838", 0x37}, {&(0x7f0000000380)="5fadc7794a5b7f47d87d492214a9eb0c090a2412a6843d20d60227c2dc2f457c4f46358880f937ac02c5e22a6a96ae3e7ed0172cae15bc71ab3ac7a5f85714e225056de150407c83c5aab4dec3edd6f62b116a29422849f6cde45e78ba9cbdf2654f263c1e0346cf4b13996dca7715d97e11c3846dd701724f788ed6c5e9d16f10b0528ae4afe21f3a082c090dbdd3bd3d72ee7b97e2963941e57d9ccb57189795de84fa2ef5b813b235462d52f4f267506e4eff4450bce1e3f0714f7660df4ff1b219bf53", 0xc5}, {&(0x7f00000004c0)="f99a499d5a0b44c503ae3cf239931b29897ed889bafada2ab73ce25aaf6ab0b7642f684430b444ec184a60f45d3fc20e9ca20928503bd2ecb90a2e752c95d1311371150e205c023b5d5525e2467a75ce51534ec5ad66a67e5ba544dd6a7ef5e37470c9862490d689686a6e2a22624183bb809929dbf8b36564da8d194de0e4b5d53e70f1414dc37277dacf5569e306417f7ddf34924ea82aad6d3e994f4f424ae88e1f26a5335d0b749db2aebae625b8d789f7db25e8c2e9e3286c5895e26fe3a93445562a", 0xc5}], 0x3) (async) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x2, 0x0, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000004) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a00000000100000208000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780080001001f00000008000640000000020900010073797a3000000000140000001100010000000000000000000700000a00"/276], 0x114}}, 0x0) 5.530458028s ago: executing program 2 (id=1912): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0xc010) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x52}, 0x2) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 5.365891532s ago: executing program 3 (id=1913): ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f00000007c0)={{&(0x7f0000000400)=[{0x1, 0xff, 0xfffffffffffffffc, {0x65, 0x2}, 0x8, 0x100000001, 0x80000001}, {0x1200000000000, 0x8, 0xc, {0xa9af, 0x1}, 0xfffffffffffffffd, 0x9, 0x2}, {0x2, 0x4, 0xd12a, {0xf, 0x3}, 0x7ff, 0x2, 0x2}, {0x0, 0x4, 0xf1, {0x7, 0x5}, 0x1, 0xd, 0x6}, {0x6d, 0x3, 0x101, {0x2, 0x9d}, 0x7, 0x2, 0x6}, {0x1, 0xfffffffffffff800, 0x4, {0x4, 0x1}, 0xfffffffffffffffd, 0x2, 0x4}, {0x2, 0x9, 0x7fffffffffffffff, {0xfffffffffffffffc, 0x45}, 0x3, 0x4}, {0x6, 0xb, 0x5de3, {0x40c7, 0xff}, 0x5, 0x8, 0xfffffff9}, {0xfffffffffffffff9, 0x8, 0x5, {0x3, 0x2}, 0x8, 0x6, 0x4}], 0x9, 0x40, 0x5, 0x7}, {&(0x7f0000000640)=[{0x10001, 0x8}, {0x5, 0x6}, {0x7d7, 0xf}, {0x10000, 0x3}, {0x5, 0x7}, {0x4}, {0xff, 0x5}], 0x7, 0x10, 0x7, 0xffffffffffffffff}, {&(0x7f00000006c0)=[0x0, 0x8000000000000001, 0x6, 0x6], 0x4, 0x8, 0x9, 0x5}, {&(0x7f0000000700)=[{0x9, 0x2, 0x32, 0x3ff, 0x5}, {0x3, 0x0, 0x44, 0x100000001, 0xd836}, {0x8, 0x3, 0x5a, 0x589, 0xbc4}], 0x3, 0x28, 0x0, 0x4}, {&(0x7f0000000100)=[0x6, 0x3, 0x6, 0x5, 0xffff, 0x9, 0x3], 0x7, 0x8, 0x4, 0x3ff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f"], 0x3}}, 0x0) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000140)=0x1) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x1, {0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4686}}, @call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) 5.000609528s ago: executing program 4 (id=1914): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 4.740321247s ago: executing program 1 (id=1915): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x2b, @empty, 0x4e21, 0x0, 'dh\x00', 0x1, 0x9, 0x42}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 0x0, 0x3, 0x6}}, 0x44) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x6}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x0, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x10}, @TIPC_NLA_CON_NODE, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL]}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 4.739251618s ago: executing program 3 (id=1916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x1158, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1130, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x10f8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x10e8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x10d4, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xcb, 0x1, "9af94d8e652a40b6db403b3ff8c4a7fc146db13fe0fd7ad22ae7be8cc744d4539a4a6ab030aadb37576e5506292f8d17b4b8817a8a12e3baee89cd44137a65e010df322733210c8664024b030c0dcbaf17c4d2db6e5308bf1fb075994298530cd1ee8497e37634c2f81c32d266f627d96ee995cfade80bbd0e0d0f25c2de3ae6b4b6a922323153fd05bcc1d41fd6405b13117d2165ea7b3375d84685ddd65df0e0cb709fbee9decdc08faa5b4ed74bd155cca409f265a21ced3e5ea017b000b152b26d6a6b95e3"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x11cc}}, 0x4800) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet(0x2, 0x2, 0x8) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r6, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="3c70dc30321d"}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000100)="ff82142aaddd775a147e6416e4e66e9f12ed429ca52bfc367ee71c4955fe2ffbf599ee78b21c29fc7e2f902eac1adb38d23966ef16ce9a89653676f390fbe945361988cc6dc078c135c7f04d31", &(0x7f0000000180)=""/10}, 0x20) 4.569415197s ago: executing program 0 (id=1917): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xe8, '\x00', r1}, 0x94) 4.314497903s ago: executing program 4 (id=1918): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x1}], 0x1}}, {{&(0x7f0000000b00)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x0, 0xc, "60706d08621f93e64585b6106d14eb6f8bc52fc0017b60b170af937f9e80e55df4d7df763c37b24cfab81cfe2b7dec0937ea508e9c66a4838068c6fa1cf94c", 0x2d}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="505d30803d61fb2ad7985b3c422a27d74c601fec7a52285f3fd22148360e904a0155ab47a98f3ea2b57571f3ebcd532d67deb4", 0x33}, {&(0x7f0000000bc0)="4e1b604bda0798b0a555c1ffd91a84b29804459473733e79f5a385f3ba424397179a24766cd5a39aea564075adfc5f5906635868d7c705354dcddd3e40d0111f1cbb8dbed3ffb1bdbfa8752a65cf98a856fb5408097fe12f165d8bd48a00e12ad9e8e83d0bd075056fdd186294a4a0ace42dccd1506440ecd2513ddf6f5deefee1de2eb787b5b443c2505955612af69c66c51db37fece0361452f31e5fb0b28d38427e8aa53a4e0864644e4aed97b1ad8ca56f0126f2f4d973ae862ea551aa9db65d34d5b57e543fd6f11c07dbd4e4a52fb09e8df8dbe1e533f190656e0cddfd522a80fadd537d486cda315f18", 0xed}], 0x41}}], 0x2, 0x24048084) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x12}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 3.814887997s ago: executing program 2 (id=1919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async, rerun: 64) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880), 0x8) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1809000c442d0d6f5c000000000000009500000008000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x20, 0x20, 0xfff, 0x1, {{0x9, 0x4, 0x2, 0x17, 0x24, 0x68, 0x0, 0x7f, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xf}, {[@lsrr={0x83, 0xf, 0x9, [@private=0xa010102, @local, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r10, &(0x7f0000001840)=ANY=[@ANYBLOB="08004305060005"], 0x1200) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) write$cgroup_devices(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="008ebe00afb5000000"], 0x9) 2.988384561s ago: executing program 4 (id=1920): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2002) ioctl$TUNSETNOCSUM(r5, 0x80087601, 0xfffffffffffffffe) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x6d, '\x00', r2, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r6, r8, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x81}}, 0x30) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000840) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r11, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r12, 0x4) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r11, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r13, r10, 0x0, r9}, 0x10) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r14, 0x112, 0x8, &(0x7f0000000140)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x6, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0x44}}, 0x4000846) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6c8, 0x240, 0x338, 0x470, 0x240, 0x240, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x40, 0x34, 0x1}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6, 0x7}, {0x1, 0x0, 0x4}, 0x0, 0xd}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@multicast1, 0x2f, 0x8, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x36}}}, {{@ipv6={@empty, @remote, [0x0, 0xff, 0xff, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xff], 'ip6tnl0\x00', 'dummy0\x00', {}, {}, 0xc, 0x0, 0x1, 0x49}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x1}}, @common=@mh={{0x28}, {"e7ad", 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x3, @ipv4=@multicast2, 0x4e20}}}, {{@ipv6={@loopback, @remote, [0x0, 0xff000000, 0xffffff00, 0xff000000], [0xff, 0x0, 0xffffffff], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2f, 0xfc, 0xf, 0x2, 0x4, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, [0xffffffff, 0xff, 0x0, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffffff], [0xff, 0x7f800000, 0xff0000ff, 0xffffffff], 0x10, 0x2400}}, @common=@eui64={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x728) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000c000000100000000300000000000005000000000000612e00"/42], 0x0, 0x2a, 0x0, 0x1, 0x1c16}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) 2.896399231s ago: executing program 0 (id=1921): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800009f81d66b14c5bddd001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x40, 0x4, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x58129bc3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x40}}, 0x0) 2.811033274s ago: executing program 1 (id=1922): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 64) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) (async, rerun: 64) recvmmsg(r7, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x22, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r10 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async, rerun: 64) sendmsg$netlink(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000022000106000200ea6356b50000000000000000000000aa"], 0x1c}], 0x1}, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0xc}}}]}, 0x38}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c04200000000000014001280ecff00007665746800000000040002800800200001000000"], 0x3c}}, 0x0) 2.610934419s ago: executing program 3 (id=1923): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, @in6=@local, 0x32, 0x0, 0x0, 0xffffffff, 0x2, 0x2}]}]}, 0xa0}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) 2.401345135s ago: executing program 3 (id=1924): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0x5}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x40) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="20ff0201", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b00"], 0x20}}, 0x4810) close(0x3) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r15}, &(0x7f0000000200), &(0x7f0000000240)=r13}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000003857035a113ac834e6424e6ca57fd7bb6e0628aa9d7244a62717810a971d9b23326ca0c03241062c12fc16a594da05a5d7cb2d43094fbe6d748851178462b428c1c6b396b95b2aeb311f2ddabd6c6e80c9536a", @ANYRES32=r15, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f00000000c0)=r16, 0x4) sendmsg$inet(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x24000147) 2.373340901s ago: executing program 2 (id=1925): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x16, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x9}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000100009000000003c7c0040000000c7a6f4"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 2.37247974s ago: executing program 4 (id=1926): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = socket$inet(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.swap.events\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xbe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r3, 0x25, 0x4, @val=@iter={&(0x7f0000000500)=@cgroup={0x1, r2, 0x40}, 0x10}}, 0x20) (async) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r3, 0x25, 0x4, @val=@iter={&(0x7f0000000500)=@cgroup={0x1, r2, 0x40}, 0x10}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000580)=r4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000009e149798b0e23034"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) 2.176603761s ago: executing program 0 (id=1927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010000000000000000000000000002a012c3d251a25e348d26938dab8613a039123fa2e83ffea7e1c86b6ea0b809145c46c4e46564bf16ef0155995edc2117f1f2ba49381935a7e059cfd46ff486358cc8bc4c6e4d9574d04d47af9afe6bb3c7c850bee6097fe91b157a0d117b5df531b162c518ac180e86809aa6d5506ab230478db000949d06d17f64de5429b91d09b0ff008ed54001fb2c50ec8aa0ab76c6895d7078859ad1c298c11d6704fd524f7144e14a9e5c2b2cfcfc8c6cf7262c27a1fb5f859e3be91b8883ed78bf7feb38f7a15b1d32", @ANYRES32=0x0, @ANYBLOB="40080000000100001c0016801800018014000b00ffffff7f00000000a8c700000000000008001b0000000000"], 0x44}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@restrict={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}, @union]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x4a}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500040000000000050001000700000005000500400000010000020073797a31000000000d0003e2452c377246b4a1b800686173"], 0x54}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r1, &(0x7f00000002c0)="f6eb7960e09efd067c1f0797c5ca251ba8686310af74a7fc3c03a886440f8d3e7780deeb6f1cc769f89c60f14b7a1a1f7daa415ac3f4e6073df00bdb040395992418350906be1688cd8b060f012a2018844356be35cac4b8b525773a2639b6b5c8c669ee4573414fe153bdb81bc6427e5ea92cbe3caf6fd3d73ed00abae507acf88d1bf21647e485ddb4afe630dfe51cb9d599fa6ec3d03973dc38fc623959a8c72005442cfdc4ae02b9a4cf0de7ab175870553e170cc18a0a63d8be831c291d733af44457e79b5a1f0cb0f0f3792c", &(0x7f00000003c0)=""/160}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.911285261s ago: executing program 2 (id=1928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 1.374062051s ago: executing program 4 (id=1929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x8000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0xffffffffffffff01, &(0x7f0000000fc0)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xffffffffffffff49, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x31, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x38}}, 0x20000090) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffff01}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ab}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.360404805s ago: executing program 2 (id=1930): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x0, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000002400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001300)={0x1098, r5, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x80, 0x71}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x1009, 0x2a, [@measure_req={0x26, 0x1003, {0x9, 0x0, 0x1, "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"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="91195d641507"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="7c9f2c11f69304c788102fa60efdd3dcc7da3759b2819a8563dde7"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x1098}, 0x1, 0x0, 0x0, 0x40eb0b80558ad797}, 0x840) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x7}, "00001200", "edfc4a7c2853770307e48bfdb8644800", "6eb4a89a", "c277dbc4b45a157c"}, 0x28) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xfffffffa}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 577.716884ms ago: executing program 0 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="7c020000", @ANYRES64=r1, @ANYRESOCT=r1], 0x27c}}, 0x20048000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x7, 0x10, 0x4, 0x7f, {{0x22, 0x4, 0x1, 0x2f, 0x88, 0x65, 0x9, 0xbb, 0x29, 0x0, @remote, @remote, {[@end, @rr={0x7, 0xf, 0xc5, [@dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1]}, @timestamp_addr={0x44, 0x3c, 0x82, 0x1, 0x1, [{@multicast1, 0xa}, {@multicast1, 0xb1c}, {@dev={0xac, 0x14, 0x14, 0x44}}, {@rand_addr=0xff}, {@remote, 0xbb}, {@empty, 0xf6d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb9}]}, @end, @end, @timestamp={0x44, 0x24, 0x38, 0x0, 0x1, [0x4ab, 0x412, 0x8, 0x0, 0x3, 0x9, 0x7, 0x4]}, @noop]}}}}}) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x140, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0x0, 0xff000000], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2b, 0x3b, 0x3}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x5, 0x1, [0x8, 0x2, 0x1, 0x3, 0x9, 0x1, 0x8, 0x100, 0x273, 0x9, 0x6, 0x6, 0x5, 0x6, 0x800, 0xffff], 0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x2, 0x0, 0x0, 0x0, @loopback, @private0, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], [0xffffff, 0x0, 0xff000000, 0xffffffff], 0x6d3784e3f74c6113, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000207f200000000000080e1fd5e14797a664a8a624600000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bind$bt_hci(r3, &(0x7f0000000900)={0x1f, 0x4, 0x4}, 0x6) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2040000000000100000000024000000000073907800000300e000000100000000fe9a9078020100000000000092c38f5a8954490e2361c33e6eb25f4cdc392d"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB="0000ea000000000009000000000000000000000004cd90079988", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x4}, 0x38) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x4c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="14000035fb080103040080000700000000000000"], 0x14}}, 0x0) recvmmsg(r10, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r3], 0x48}}, 0x0) 548.869011ms ago: executing program 1 (id=1932): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="05", 0x5dc, 0x50, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01020008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001880)=@deltfilter={0x30, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x10, 0xffff}, {0x2, 0xffff}, {0x3, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2b14bdd23ad2f270}, 0x20044000) syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @random='\x00\x00\x00\b\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x98, 0x0, 0x0, 0xa3, 0x6, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x21, 0x2, 0x0, 0x0, 0x403f, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x2a, [0xfffffffd, 0x80, 0x3, 0x19f, 0x9, 0xfffffff8, 0x3, 0x6, 0x3, 0xc]}, @md5sig={0x13, 0x12, "e4c526435049646a8d81614ddd5d7b90"}, @generic={0x3, 0x2}, @md5sig={0x13, 0x12, "73b8058cfe4ee1290e910461d04604b9"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x9, 0xf989, "00043fa3b0"}, @nop, @sack={0x5, 0xa, [0x8, 0x101]}]}}}}}}}, 0x0) 246.541434ms ago: executing program 2 (id=1933): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f000000ab00)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bind$pptp(r0, &(0x7f000000ae00)={0x18, 0x2, {0x1, @local}}, 0x1e) listen(r0, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x5, 0x0, 0x0, 0x5}, 0x48) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x20, 0x140f, 0x1, 0x70bd23, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8d0}, 0x20040814) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002280)={'vlan1\x00', 0x0}) sendto$packet(r9, &(0x7f00000001c0)="3303120081fd140000007ef588a8a3482fa3", 0x12, 0x80, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0xcf}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffb, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 9.059953ms ago: executing program 4 (id=1934): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r3, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)="a7", 0x1}], 0x1, 0x0, 0x0, 0x14}], 0x1, 0xc804) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x42}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40008000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, r1, {0x8, 0x3}, {0x9, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @v={0x3, 0x2, 0x4, 0x6, 0x5, 0x10, 0x4d, {0x4, 0x9, "1b15ed536d2c5615"}, 0x7f, 0x3, 0x7f, 0x6, 0x3e, "56a991bce982b99e2cc14b916ea97eb4bb8aab1cd0eccc1221486565f9769792ea2310ed0d4da0cd3e8818e00c53d76480c3a58b851f8c1dc711072f0018"}}, 0x57) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=1935): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000072c000000180a05000000000000000000010000000900010073797a30000000000c0005"], 0xc8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fbdbdf250100000006000600234e000014000200776730"], 0x30}}, 0x20000880) kernel console output (not intermixed with test programs): Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.699157][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.734997][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.879209][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.917173][ T9] cfg80211: failed to load regulatory.db [ 91.967048][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.318611][ T5869] netlink: 'syz.1.10': attribute type 1 has an invalid length. [ 92.405734][ T5871] netlink: 'syz.2.9': attribute type 4 has an invalid length. [ 92.665954][ T1563] IPVS: starting estimator thread 0... [ 92.724790][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.782075][ T5880] IPVS: using max 25 ests per chain, 60000 per kthread [ 92.886411][ T5891] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 93.001436][ T5891] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 93.013057][ T5738] IPVS: starting estimator thread 0... [ 93.019781][ T5893] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 93.052740][ T5891] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 93.086331][ T5891] netlink: 'syz.3.15': attribute type 2 has an invalid length. [ 93.107967][ T5891] netlink: 76 bytes leftover after parsing attributes in process `syz.3.15'. [ 93.144615][ T5896] IPVS: using max 34 ests per chain, 81600 per kthread [ 93.174949][ T5903] bond0: entered promiscuous mode [ 93.202569][ T5903] bond_slave_0: entered promiscuous mode [ 93.225981][ T5899] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 93.234766][ T5903] bond_slave_1: entered promiscuous mode [ 93.806546][ T5294] veth1_vlan: left promiscuous mode [ 93.849896][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 93.929880][ T5936] erspan0: entered allmulticast mode [ 93.981542][ T4949] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.158141][ T5950] netlink: 'syz.2.29': attribute type 2 has an invalid length. [ 94.743930][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 94.787564][ T5972] bridge_slave_1: left allmulticast mode [ 94.807597][ T5972] bridge_slave_1: left promiscuous mode [ 94.826796][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 94.849791][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 94.874711][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.920392][ T5972] bridge_slave_0: left allmulticast mode [ 94.950099][ T5972] bridge_slave_0: left promiscuous mode [ 94.969807][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.160333][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 95.202875][ T5993] netlink: 'syz.1.40': attribute type 10 has an invalid length. [ 95.316531][ T5993] team0: Port device dummy0 added [ 95.534531][ T5976] __nla_validate_parse: 47 callbacks suppressed [ 95.534549][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 95.566912][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 95.802968][ T6009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.45'. [ 95.854805][ T6009] netlink: 'syz.2.45': attribute type 5 has an invalid length. [ 95.894852][ T6009] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 95.981504][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 96.094923][ T6018] geneve2: entered promiscuous mode [ 96.137807][ T6018] geneve2: entered allmulticast mode [ 96.184891][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.236388][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.269054][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.314835][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.869062][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.274984][ T6064] syzkaller0: entered promiscuous mode [ 97.296267][ T6064] syzkaller0: entered allmulticast mode [ 97.345846][ T6078] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 97.548689][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 97.563634][ T6084] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 97.628049][ T6085] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 97.636956][ T6085] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 97.645683][ T6085] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.62'. [ 98.885071][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 99.190964][ T6100] tap0: tun_chr_ioctl cmd 2148553947 [ 99.208939][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.67'. [ 99.230463][ T6106] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 99.383850][ T6119] veth0_vlan: mtu less than device minimum [ 99.425056][ T6119] netlink: 'syz.0.72': attribute type 2 has an invalid length. [ 99.639142][ T6127] syzkaller0: entered promiscuous mode [ 99.651262][ T6127] syzkaller0: entered allmulticast mode [ 99.880205][ T6131] netlink: 'syz.4.77': attribute type 3 has an invalid length. [ 100.300229][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 100.489272][ T6163] netlink: 'syz.3.83': attribute type 4 has an invalid length. [ 101.123886][ T6193] syzkaller0: entered promiscuous mode [ 101.143981][ T6193] syzkaller0: entered allmulticast mode [ 101.363782][ T6210] __nla_validate_parse: 1 callbacks suppressed [ 101.363803][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 101.378302][ T6208] netlink: 148 bytes leftover after parsing attributes in process `syz.4.93'. [ 101.419187][ T6213] netlink: 224 bytes leftover after parsing attributes in process `syz.3.94'. [ 101.609234][ T6201] netlink: 'syz.3.94': attribute type 8 has an invalid length. [ 101.848495][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 102.007679][ T6244] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.98'. [ 102.214990][ T6250] netlink: 'syz.2.105': attribute type 11 has an invalid length. [ 102.278115][ T6260] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 102.287361][ T6250] netlink: 'syz.2.105': attribute type 11 has an invalid length. [ 102.296714][ T6250] netlink: 204 bytes leftover after parsing attributes in process `syz.2.105'. [ 102.310045][ T6258] netlink: 'syz.1.106': attribute type 11 has an invalid length. [ 102.404156][ T6265] netlink: 64 bytes leftover after parsing attributes in process `syz.3.109'. [ 102.454262][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 102.508529][ T6274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.111'. [ 102.633917][ T6276] bond0: (slave bond_slave_0): Releasing backup interface [ 102.759571][ T6286] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 102.813494][ T6286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.113'. [ 103.306531][ T6317] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 103.408947][ T6325] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.732582][ T6337] netlink: 'syz.0.131': attribute type 7 has an invalid length. [ 103.898924][ T6342] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 103.919999][ T6342] bond1 (unregistering): Released all slaves [ 104.267039][ T6359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.295290][ T6372] openvswitch: netlink: Duplicate key (type 2). [ 105.068708][ T6418] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 105.361661][ T6382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.377166][ T6418] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 105.778124][ T6437] xt_NFQUEUE: number of total queues is 0 [ 105.790989][ T6435] xt_NFQUEUE: number of total queues is 0 [ 105.846970][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.902750][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.228083][ T6454] syzkaller0: entered promiscuous mode [ 106.235513][ T6467] nft_compat: unsupported protocol 0 [ 106.261210][ T6454] syzkaller0: entered allmulticast mode [ 106.550206][ T6475] netlink: 'syz.0.170': attribute type 24 has an invalid length. [ 106.787165][ T6491] __nla_validate_parse: 15 callbacks suppressed [ 106.787197][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 106.894853][ T6495] netlink: 108 bytes leftover after parsing attributes in process `syz.2.176'. [ 106.904240][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 106.932133][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 107.364379][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 107.412442][ T6512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.180'. [ 107.476732][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 107.514242][ T6512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.180'. [ 107.544737][ T73] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.576912][ T73] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.613648][ T6514] syzkaller0: entered promiscuous mode [ 107.629869][ T6514] syzkaller0: entered allmulticast mode [ 107.657340][ T73] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.701731][ T73] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.813198][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 107.829967][ T6529] netlink: 'syz.1.185': attribute type 5 has an invalid length. [ 107.873550][ T6529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.185'. [ 107.906858][ T6531] xt_l2tp: v2 doesn't support IP mode [ 107.929632][ T6529] geneve2: entered promiscuous mode [ 107.957494][ T6529] geneve2: entered allmulticast mode [ 107.981571][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 108.020040][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 108.076600][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 108.125478][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 108.231849][ T6544] netlink: 'syz.4.190': attribute type 17 has an invalid length. [ 108.700204][ T6579] bond0: entered promiscuous mode [ 108.719170][ T6579] bond_slave_0: entered promiscuous mode [ 108.731620][ T6579] bond_slave_1: entered promiscuous mode [ 108.769416][ T6579] batadv0: entered promiscuous mode [ 108.799553][ T6579] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 108.825226][ T6579] bond0: left promiscuous mode [ 108.836118][ T6579] bond_slave_0: left promiscuous mode [ 108.848430][ T6579] bond_slave_1: left promiscuous mode [ 108.863883][ T6579] batadv0: left promiscuous mode [ 109.210276][ T6594] xt_hashlimit: size too large, truncated to 1048576 [ 109.235472][ T6595] syzkaller0: entered promiscuous mode [ 109.241351][ T6595] syzkaller0: entered allmulticast mode [ 109.325314][ T6564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.499671][ T6603] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 109.565125][ T6603] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 110.200442][ T6627] netlink: 'syz.4.208': attribute type 5 has an invalid length. [ 110.600299][ T6641] syzkaller0: entered promiscuous mode [ 110.618985][ T6641] syzkaller0: entered allmulticast mode [ 110.773885][ T6649] netlink: 'syz.3.216': attribute type 12 has an invalid length. [ 110.831127][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.840149][ T6649] netlink: 'syz.3.216': attribute type 12 has an invalid length. [ 110.877505][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.910334][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.931756][ T6654] openvswitch: netlink: Missing valid actions attribute. [ 110.942527][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.961608][ T6654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.044705][ T6654] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 111.223200][ T6669] netlink: 'syz.3.222': attribute type 2 has an invalid length. [ 111.303039][ T6669] syzkaller0: entered promiscuous mode [ 111.314385][ T6669] syzkaller0: entered allmulticast mode [ 111.326905][ T6673] netlink: 'syz.3.222': attribute type 39 has an invalid length. [ 111.752818][ T6686] syzkaller0: entered promiscuous mode [ 111.815813][ T6686] syzkaller0: entered allmulticast mode [ 111.842654][ T6694] netlink: 'syz.1.230': attribute type 5 has an invalid length. [ 111.965851][ T6694] tipc: Enabling of bearer rejected, failed to enable media [ 112.656031][ T6726] netlink: 'syz.0.238': attribute type 12 has an invalid length. [ 112.819550][ T6740] __nla_validate_parse: 12 callbacks suppressed [ 112.819572][ T6740] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.238'. [ 114.286611][ T6755] syzkaller0: entered promiscuous mode [ 114.296507][ T6755] syzkaller0: entered allmulticast mode [ 114.419060][ T6767] netlink: 44 bytes leftover after parsing attributes in process `syz.2.245'. [ 114.936333][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.254'. [ 114.996527][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 115.144475][ T6805] IPVS: ip_vs_add_dest(): server weight less than zero [ 115.353691][ T6809] syzkaller0: entered promiscuous mode [ 115.374680][ T6809] syzkaller0: entered allmulticast mode [ 115.565769][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 115.592799][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 115.613137][ T6821] xt_hashlimit: size too large, truncated to 1048576 [ 115.734041][ T6832] netlink: 'syz.3.265': attribute type 11 has an invalid length. [ 116.219720][ T6849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.269'. [ 116.235899][ T6852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.270'. [ 116.513574][ T6861] netlink: 'syz.3.273': attribute type 39 has an invalid length. [ 116.535271][ T6859] netlink: 'syz.2.272': attribute type 11 has an invalid length. [ 116.560901][ T6859] netlink: 'syz.2.272': attribute type 11 has an invalid length. [ 116.576208][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 116.587311][ T6859] netlink: 224 bytes leftover after parsing attributes in process `syz.2.272'. [ 116.837094][ T6870] syzkaller0: entered promiscuous mode [ 116.853491][ T6870] syzkaller0: entered allmulticast mode [ 117.130493][ T6881] syzkaller0: entered promiscuous mode [ 117.147937][ T6881] syzkaller0: entered allmulticast mode [ 117.407980][ T6895] netlink: 'syz.2.285': attribute type 7 has an invalid length. [ 117.535584][ T6895] netlink: 'syz.2.285': attribute type 7 has an invalid length. [ 117.585288][ T6734] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.621967][ T6734] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.654160][ T6734] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.688471][ T6734] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.857823][ T6923] __nla_validate_parse: 2 callbacks suppressed [ 117.857843][ T6923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.291'. [ 117.909733][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.292'. [ 118.459870][ T6954] x_tables: duplicate entry at hook 3 [ 118.585071][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 118.611525][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 118.691794][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.906232][ T6981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.305'. [ 118.955699][ T6982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.305'. [ 119.504078][ T7011] netlink: 68 bytes leftover after parsing attributes in process `syz.2.313'. [ 119.549142][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 119.575910][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 120.026312][ T7035] netlink: 56 bytes leftover after parsing attributes in process `syz.2.321'. [ 120.036721][ T7035] bond0: left promiscuous mode [ 120.052423][ T7035] bond_slave_0: left promiscuous mode [ 120.065805][ T7035] bond_slave_1: left promiscuous mode [ 120.134073][ T7015] nbd0: detected capacity change from 0 to 63 [ 120.189363][ T4949] block nbd0: Receive control failed (result -32) [ 120.189626][ T5650] block nbd0: Receive control failed (result -32) [ 120.224549][ T5639] block nbd0: Dead connection, failed to find a fallback [ 120.239578][ T5639] block nbd0: shutting down sockets [ 120.248125][ T5639] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.268113][ T5639] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.303282][ T5639] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.335122][ T5639] Buffer I/O error on dev nbd0, logical block 1, async page read [ 120.376785][ T5639] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.423207][ T5639] Buffer I/O error on dev nbd0, logical block 2, async page read [ 120.483553][ T5639] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.495156][ T7049] xt_hashlimit: invalid interval [ 120.501940][ T5639] Buffer I/O error on dev nbd0, logical block 3, async page read [ 120.512790][ T5639] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.521995][ T5639] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.531353][ T5639] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.544754][ T5639] Buffer I/O error on dev nbd0, logical block 1, async page read [ 120.556966][ T5639] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.576003][ T5639] Buffer I/O error on dev nbd0, logical block 2, async page read [ 120.586147][ T7052] netlink: 'syz.2.327': attribute type 10 has an invalid length. [ 120.606966][ T5639] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.644327][ T5639] Buffer I/O error on dev nbd0, logical block 3, async page read [ 120.657330][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.686911][ T5639] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.713336][ T5639] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.733103][ T7052] bond0: (slave team0): Enslaving as an active interface with an up link [ 120.742226][ T5639] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.770306][ T5639] Buffer I/O error on dev nbd0, logical block 1, async page read [ 120.812944][ T5639] ldm_validate_partition_table(): Disk read failed. [ 120.849193][ T5639] Dev nbd0: unable to read RDB block 0 [ 120.919989][ T5639] nbd0: unable to read partition table [ 120.989139][ T5639] ldm_validate_partition_table(): Disk read failed. [ 121.038875][ T5639] Dev nbd0: unable to read RDB block 0 [ 121.077258][ T5639] nbd0: unable to read partition table [ 121.456219][ T7102] IPVS: length: 239 != 24 [ 121.796281][ T7102] syzkaller0: entered promiscuous mode [ 121.804585][ T7102] syzkaller0: entered allmulticast mode [ 123.683212][ T7208] sctp: [Deprecated]: syz.4.355 (pid 7208) Use of int in maxseg socket option. [ 123.683212][ T7208] Use struct sctp_assoc_value instead [ 123.765463][ T7208] sctp: [Deprecated]: syz.4.355 (pid 7208) Use of int in maxseg socket option. [ 123.765463][ T7208] Use struct sctp_assoc_value instead [ 124.196358][ T7228] __nla_validate_parse: 7 callbacks suppressed [ 124.196379][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.362'. [ 124.507464][ T7238] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 124.609210][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 124.660869][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 124.688540][ T7248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'. [ 124.906623][ T7254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.990236][ T7242] netlink: 220 bytes leftover after parsing attributes in process `syz.1.367'. [ 125.096822][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 125.474666][ T7282] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.317720][ T7319] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.384'. [ 126.328805][ T7319] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 126.677383][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.387'. [ 126.764445][ T7341] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 126.773923][ T7341] netlink: 'syz.3.389': attribute type 3 has an invalid length. [ 126.782533][ T7341] netlink: 172 bytes leftover after parsing attributes in process `syz.3.389'. [ 126.838492][ T7341] NCSI netlink: No device for ifindex 813332851 [ 126.854819][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.389'. [ 127.497145][ T7372] netlink: 'syz.2.397': attribute type 30 has an invalid length. [ 127.727583][ T7379] openvswitch: netlink: Message has 6 unknown bytes. [ 127.993262][ T7392] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.046178][ T7392] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.087163][ T7392] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 128.576876][ T7435] netlink: 'syz.0.411': attribute type 16 has an invalid length. [ 128.625932][ T7435] netlink: 'syz.0.411': attribute type 17 has an invalid length. [ 129.075531][ T7456] Unsupported ieee802154 address type: 0 [ 129.273142][ T7466] __nla_validate_parse: 6 callbacks suppressed [ 129.273162][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 129.667949][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 129.728285][ T7486] Bluetooth: MGMT ver 1.23 [ 129.830413][ T7489] syzkaller0: entered promiscuous mode [ 129.838650][ T7489] syzkaller0: entered allmulticast mode [ 129.964178][ T7495] netlink: 80 bytes leftover after parsing attributes in process `syz.3.427'. [ 130.006113][ T7503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.429'. [ 130.130524][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'. [ 130.279402][ T7511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.431'. [ 130.316333][ T7510] tipc: Failed to obtain node identity [ 130.337741][ T7510] tipc: Enabling of bearer rejected, failed to enable media [ 130.541586][ T5650] Bluetooth: hci3: command 0x0405 tx timeout [ 130.644607][ T7530] netlink: 240 bytes leftover after parsing attributes in process `syz.1.435'. [ 130.925170][ T7542] netlink: 'syz.1.438': attribute type 9 has an invalid length. [ 131.087645][ T7546] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.439'. [ 131.137609][ T7546] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.439'. [ 131.238387][ T7555] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 131.326637][ T7552] team0: Port device team_slave_0 removed [ 131.339600][ T7514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.369459][ T7555] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 131.544113][ T7571] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 131.745308][ T7585] netlink: 'syz.2.447': attribute type 10 has an invalid length. [ 131.858422][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 131.881702][ T7571] bond1: entered promiscuous mode [ 131.898385][ T7571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.035135][ T7582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.102425][ T7582] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 132.161773][ T7582] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 132.234809][ T7582] bond1: (slave vti0): making interface the new active one [ 132.256619][ T7582] vti0: entered promiscuous mode [ 132.290511][ T7582] bond1: (slave vti0): Enslaving as an active interface with an up link [ 132.314485][ T7585] veth1_virt_wifi: entered promiscuous mode [ 132.443149][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.510035][ T6733] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.540161][ T6733] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.576401][ T6733] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.607314][ T6733] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.639221][ T7617] netlink: 'syz.4.455': attribute type 1 has an invalid length. [ 132.696754][ T7622] trusted_key: syz.2.458 sent an empty control message without MSG_MORE. [ 132.865197][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881220][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.450059][ T7652] xt_hashlimit: size too large, truncated to 1048576 [ 133.545967][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.595593][ T7654] bridge_slave_0 (unregistering): left allmulticast mode [ 133.617040][ T7654] bridge_slave_0 (unregistering): left promiscuous mode [ 133.645746][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.523858][ T7686] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 134.606741][ T7686] bond1: entered promiscuous mode [ 134.614510][ T7686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.711941][ T7693] __nla_validate_parse: 9 callbacks suppressed [ 134.711961][ T7693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 134.758696][ T7686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.776309][ T7686] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 134.799294][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 134.833313][ T7686] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 134.911744][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 134.940475][ T7686] bond1: (slave ipip0): making interface the new active one [ 134.969400][ T7686] ipip0: entered promiscuous mode [ 135.009172][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 135.019660][ T7686] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 135.057285][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 135.098685][ T7705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 135.227635][ T7704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.467151][ T7710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.503721][ T7710] bond1: (slave bond2): Enslaving as an active interface with an up link [ 135.587070][ T7714] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 135.659254][ T7708] syzkaller0: entered promiscuous mode [ 135.691401][ T7708] syzkaller0: entered allmulticast mode [ 135.715697][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.483'. [ 137.665239][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.482'. [ 138.123345][ T7751] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 138.163450][ T7751] netlink: 'syz.0.490': attribute type 2 has an invalid length. [ 138.196816][ T7751] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 138.230083][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'. [ 138.378127][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 138.897411][ T7792] bridge_slave_0: invalid flags given to default FDB implementation [ 138.914863][ T7793] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 138.959468][ T7793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.403396][ T7768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.620352][ T7814] netlink: 108 bytes leftover after parsing attributes in process `syz.0.503'. [ 193.761414][ T7824] netlink: 'syz.1.504': attribute type 1 has an invalid length. [ 193.785450][ T7824] netlink: 224 bytes leftover after parsing attributes in process `syz.1.504'. [ 193.909464][ T7826] bond4 (unregistering): Released all slaves [ 194.283413][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 194.304284][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.967756][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 195.270119][ T7909] netlink: 'syz.2.525': attribute type 10 has an invalid length. [ 195.333719][ T7909] netlink: 228 bytes leftover after parsing attributes in process `syz.2.525'. [ 195.692467][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 196.242131][ T7960] netlink: 'syz.2.536': attribute type 20 has an invalid length. [ 196.308748][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 196.671598][ T7981] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 196.684098][ T7981] syzkaller1: Refused to change device type [ 196.690695][ T7981] netlink: 'syz.1.543': attribute type 58 has an invalid length. [ 196.705762][ T7987] xt_hashlimit: size too large, truncated to 1048576 [ 196.715867][ T7981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.543'. [ 196.859180][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 197.092312][ T8004] syzkaller0: entered promiscuous mode [ 197.134833][ T8004] syzkaller0: entered allmulticast mode [ 197.153542][ T8006] netlink: 5 bytes leftover after parsing attributes in process `syz.4.550'. [ 198.166174][ T29] audit: type=1800 audit(1781115652.136:2): pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.557" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 198.184211][ T8039] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 198.232763][ T8039] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 198.245569][ T8039] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 198.777778][ T8072] __nla_validate_parse: 2 callbacks suppressed [ 198.777799][ T8072] netlink: 256 bytes leftover after parsing attributes in process `syz.1.562'. [ 199.435585][ T8099] gre1: entered promiscuous mode [ 199.515727][ T8107] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 199.546499][ T8100] gre1: entered promiscuous mode [ 199.599003][ T8107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.644762][ T8107] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 200.107412][ T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.125333][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 200.140010][ T8136] netlink: 2 bytes leftover after parsing attributes in process `syz.1.585'. [ 200.165158][ T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.186667][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.188427][ T8139] netlink: 'syz.3.586': attribute type 24 has an invalid length. [ 200.215430][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.485001][ T8156] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.494651][ T8156] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 200.833951][ T8129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.132000][ T8170] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.592'. [ 201.150244][ T8160] x_tables: duplicate underflow at hook 2 [ 201.825424][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.602'. [ 202.052434][ T8217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.388753][ T8225] IPVS: Scheduler module ip_vs_sip not found [ 202.535552][ T8237] sctp: [Deprecated]: syz.1.611 (pid 8237) Use of int in maxseg socket option. [ 202.535552][ T8237] Use struct sctp_assoc_value instead [ 202.946731][ T8254] netlink: 'syz.1.618': attribute type 10 has an invalid length. [ 203.119612][ T8254] team0 (unregistering): Port device team_slave_0 removed [ 203.165681][ T8254] team0 (unregistering): Port device team_slave_1 removed [ 203.203954][ T8254] team0 (unregistering): Port device dummy0 removed [ 203.232965][ T8264] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 203.298787][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 203.327914][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 203.442518][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 203.474255][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 203.487794][ T8274] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 203.502396][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 203.520620][ T8274] bond2: option packets_per_slave: allowed values 0 - 65535 [ 203.539419][ T8274] bond2 (unregistering): Released all slaves [ 203.561995][ T8278] netlink: 'syz.3.627': attribute type 19 has an invalid length. [ 203.817619][ T8289] Bluetooth: MGMT ver 1.23 [ 203.830460][ T8288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.629'. [ 203.898027][ T8293] syzkaller0: entered promiscuous mode [ 203.924083][ T8293] syzkaller0: entered allmulticast mode [ 204.281794][ T8316] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 204.328689][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 204.645317][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 204.732090][ T8339] bridge3: entered promiscuous mode [ 204.744381][ T8339] bridge3: entered allmulticast mode [ 204.762313][ T8334] 8021q: VLANs not supported on ip_vti0 [ 204.769814][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.644'. [ 204.782401][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 204.801593][ T8334] 8021q: VLANs not supported on ip_vti0 [ 204.816149][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 204.816649][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.645'. [ 204.871401][ T8344] netlink: 6 bytes leftover after parsing attributes in process `syz.0.645'. [ 204.919483][ T8334] 8021q: VLANs not supported on ip_vti0 [ 204.932472][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 204.945604][ T8334] 8021q: VLANs not supported on ip_vti0 [ 204.966382][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 205.029436][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.057587][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.075137][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.102711][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.118296][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.155991][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.173801][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.194594][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.209361][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.233222][ T8355] syzkaller0: entered promiscuous mode [ 205.250108][ T8355] syzkaller0: entered allmulticast mode [ 205.279723][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.292608][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.320550][ T8357] C: renamed from lo (while UP) [ 205.342793][ T8357] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 205.442066][ T8334] 8021q: VLANs not supported on ip_vti0 [ 205.748029][ T8377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.788069][ T8374] syzkaller0: entered promiscuous mode [ 205.805014][ T8374] syzkaller0: entered allmulticast mode [ 205.974088][ T8388] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 206.288216][ T8409] IPVS: length: 26 != 8 [ 206.555142][ T8416] syzkaller0: entered promiscuous mode [ 206.576109][ T8416] syzkaller0: entered allmulticast mode [ 206.629631][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.629683][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 206.636271][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 206.650170][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 206.892095][ T8427] syzkaller1: entered promiscuous mode [ 206.898914][ T8427] syzkaller1: entered allmulticast mode [ 207.242766][ T8441] xt_hl: Unknown Hop Limit match mode: 206 [ 207.322673][ T8439] syzkaller0: entered promiscuous mode [ 207.348409][ T8439] syzkaller0: entered allmulticast mode [ 208.496924][ T8500] xt_hashlimit: size too large, truncated to 1048576 [ 208.515944][ T8491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.547797][ T8491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.803727][ T8491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.839335][ T8491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.894050][ T8515] bridge0: port 1(syz_tun) entered blocking state [ 208.912427][ T8515] bridge0: port 1(syz_tun) entered disabled state [ 208.922330][ T8520] __nla_validate_parse: 20 callbacks suppressed [ 208.922348][ T8520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 208.929364][ T8515] syz_tun: entered allmulticast mode [ 208.959069][ T8515] syz_tun: entered promiscuous mode [ 208.967608][ T8515] bridge0: port 1(syz_tun) entered blocking state [ 208.974250][ T8515] bridge0: port 1(syz_tun) entered forwarding state [ 209.023166][ T8491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.053121][ T8491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.120237][ T8522] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.696'. [ 209.219432][ T8491] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.240890][ T8491] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.474691][ T8543] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 209.483634][ T8543] nbd: error processing sock list [ 209.517489][ T6733] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.526680][ T8539] netlink: 'syz.2.700': attribute type 12 has an invalid length. [ 209.528147][ T6733] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.598272][ T6733] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.619488][ T6733] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.645754][ T8539] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 209.742264][ T6735] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.764452][ T6735] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.955993][ T6735] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.975472][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'. [ 209.987296][ T6735] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.008917][ T8558] Cannot find del_set index 4 as target [ 210.299375][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 210.346465][ T8577] x_tables: duplicate underflow at hook 1 [ 210.614966][ T8587] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 211.012313][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.722'. [ 211.022147][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.722'. [ 211.328101][ T8626] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 211.483965][ T8634] syzkaller0: entered promiscuous mode [ 211.507959][ T8634] syzkaller0: entered allmulticast mode [ 211.713685][ T8644] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 211.783386][ T8644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.732'. [ 211.824816][ T29] audit: type=1804 audit(1781115665.796:3): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.733" name="/newroot/143/cgroup.controllers" dev="tmpfs" ino=747 res=1 errno=0 [ 211.878685][ T29] audit: type=1800 audit(1781115665.796:4): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.733" name="cgroup.controllers" dev="tmpfs" ino=747 res=0 errno=0 [ 212.176455][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.736'. [ 212.189520][ T8655] netlink: 5 bytes leftover after parsing attributes in process `syz.3.737'. [ 212.207032][ T8657] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 212.224790][ T8657] netlink: 228 bytes leftover after parsing attributes in process `syz.1.736'. [ 212.348001][ T8662] netlink: 'syz.0.738': attribute type 9 has an invalid length. [ 212.598182][ T8674] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 212.642327][ T8676] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.665991][ T8676] bond1: (slave lo): Enslaving as an active interface with an up link [ 212.697450][ T8676] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 213.138883][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 213.165208][ T8693] team0: Port device batadv1 added [ 213.656098][ T8722] syzkaller0: entered promiscuous mode [ 213.676625][ T8722] syzkaller0: entered allmulticast mode [ 214.024096][ T8746] __nla_validate_parse: 2 callbacks suppressed [ 214.024116][ T8746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.764'. [ 214.087174][ T8743] netlink: 'syz.2.764': attribute type 27 has an invalid length. [ 214.116209][ T8743] netlink: 'syz.2.764': attribute type 4 has an invalid length. [ 214.146215][ T8743] netlink: 144 bytes leftover after parsing attributes in process `syz.2.764'. [ 214.217290][ T8753] netlink: 'syz.4.768': attribute type 2 has an invalid length. [ 214.353968][ T8760] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 214.680086][ T8780] sctp: [Deprecated]: syz.4.778 (pid 8780) Use of int in max_burst socket option. [ 214.680086][ T8780] Use struct sctp_assoc_value instead [ 214.743071][ T8773] sctp: [Deprecated]: syz.3.775 (pid 8773) Use of int in max_burst socket option deprecated. [ 214.743071][ T8773] Use struct sctp_assoc_value instead [ 214.760553][ T8771] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 214.794702][ T8771] bond1 (unregistering): Released all slaves [ 214.817624][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 214.910344][ T8778] syzkaller0: entered promiscuous mode [ 214.940329][ T8778] syzkaller0: entered allmulticast mode [ 214.980282][ T8795] syzkaller0: entered promiscuous mode [ 215.008245][ T8795] syzkaller0: entered allmulticast mode [ 215.115278][ T8803] netlink: 220 bytes leftover after parsing attributes in process `syz.1.783'. [ 215.322899][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 215.585752][ T8822] veth3: entered promiscuous mode [ 215.592063][ T8822] veth3: entered allmulticast mode [ 215.808105][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 215.824315][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 215.833295][ T8829] netlink: 76 bytes leftover after parsing attributes in process `syz.2.790'. [ 215.939759][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 215.968246][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.789'. [ 216.345316][ T8838] wireguard0: entered promiscuous mode [ 216.363119][ T8838] wireguard0: entered allmulticast mode [ 216.440199][ T8860] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 216.581916][ T8867] netlink: 'syz.1.800': attribute type 14 has an invalid length. [ 216.611693][ T8867] netlink: 'syz.1.800': attribute type 13 has an invalid length. [ 255.743419][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.961101][ T8910] __nla_validate_parse: 69 callbacks suppressed [ 276.961121][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 276.979879][ T8907] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 277.006877][ T8907] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 277.056253][ T8908] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.809'. [ 277.266739][ T8929] raw_sendmsg: syz.3.814 forgot to set AF_INET. Fix it! [ 277.444224][ T8935] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 277.652322][ T8941] syzkaller0: entered promiscuous mode [ 277.677722][ T8941] syzkaller0: entered allmulticast mode [ 277.818066][ T8952] netlink: 830 bytes leftover after parsing attributes in process `syz.0.822'. [ 277.838408][ T8955] netlink: 830 bytes leftover after parsing attributes in process `syz.0.822'. [ 278.082228][ T8965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.825'. [ 278.190023][ T8970] veth1_to_bond: entered allmulticast mode [ 278.299232][ T8973] veth1_to_bond: left allmulticast mode [ 278.676771][ T8997] netlink: 'syz.4.834': attribute type 63 has an invalid length. [ 278.811452][ T8999] netlink: 'syz.0.835': attribute type 3 has an invalid length. [ 278.838611][ T9001] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.836'. [ 278.856025][ T8999] netlink: 'syz.0.835': attribute type 10 has an invalid length. [ 278.890313][ T8999] netlink: 224 bytes leftover after parsing attributes in process `syz.0.835'. [ 278.904986][ T8999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.835'. [ 279.088442][ T9010] netlink: 'syz.3.840': attribute type 21 has an invalid length. [ 279.106474][ T9014] netlink: 'syz.0.841': attribute type 1 has an invalid length. [ 279.127862][ T9006] syzkaller0: entered promiscuous mode [ 279.134191][ T9006] syzkaller0: entered allmulticast mode [ 279.145234][ T9010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.840'. [ 279.168525][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'. [ 279.382059][ T9030] netlink: 'syz.3.844': attribute type 5 has an invalid length. [ 279.405736][ T9030] xt_socket: unknown flags 0x50 [ 280.334363][ T9061] xt_l2tp: invalid flags combination: 0 [ 281.270345][ T9022] bond2: (slave gretap1): making interface the new active one [ 281.279015][ T9022] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 281.292316][ T9014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.835435][ T9085] ipt_ECN: cannot use operation on non-tcp rule [ 281.861911][ T9085] syzkaller0: entered promiscuous mode [ 281.875039][ T9085] syzkaller0: entered allmulticast mode [ 281.950404][ T9088] syzkaller1: entered promiscuous mode [ 281.957276][ T9088] syzkaller1: entered allmulticast mode [ 281.994518][ T9090] bond4: entered promiscuous mode [ 282.007889][ T9094] C: renamed from lo (while UP) [ 282.019505][ T9094] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 282.212997][ T9103] __nla_validate_parse: 7 callbacks suppressed [ 282.213016][ T9103] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.863'. [ 282.906736][ T9105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.969092][ T9105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.054184][ T9105] veth1_virt_wifi: left promiscuous mode [ 283.129891][ T9105] geneve2: left promiscuous mode [ 283.135683][ T9105] geneve2: left allmulticast mode [ 283.151184][ T9105] veth3: left promiscuous mode [ 283.156000][ T9105] veth3: left allmulticast mode [ 283.165085][ T9105] bond4: left promiscuous mode [ 283.216791][ T9139] netlink: 56 bytes leftover after parsing attributes in process `syz.0.871'. [ 283.240397][ T9149] netlink: 72 bytes leftover after parsing attributes in process `syz.4.872'. [ 283.260422][ T6732] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.289139][ T6732] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.306085][ T6732] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 283.368254][ T6732] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.380132][ T6732] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.401011][ T6732] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 283.438388][ T6732] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.467460][ T6732] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.478795][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 283.488553][ T6732] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 283.504093][ T9156] netlink: 'syz.0.874': attribute type 11 has an invalid length. [ 283.515181][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 283.549532][ T6732] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.551252][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 283.593595][ T6732] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.625790][ T6732] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 283.674247][ T9170] netlink: 36 bytes leftover after parsing attributes in process `syz.4.876'. [ 283.701878][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 283.722371][ T9154] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 283.722765][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 283.779239][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 283.793766][ T9172] syzkaller0: entered promiscuous mode [ 283.802476][ T9154] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 283.843898][ T9172] syzkaller0: entered allmulticast mode [ 283.867555][ T9154] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 283.895247][ T9154] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 283.920277][ T9154] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 283.932236][ T9166] "syz.4.876" (9166) uses obsolete ecb(arc4) skcipher [ 283.985010][ T9176] batadv_slave_1: entered promiscuous mode [ 284.068245][ T9176] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 284.235383][ T9175] batadv_slave_1: left promiscuous mode [ 284.256558][ T6735] smbdirect: ib_dev[syz2] removed [ 284.496600][ T9195] bond3: Unable to set down delay as MII monitoring is disabled [ 284.553758][ T9195] bond3 (unregistering): Released all slaves [ 284.639190][ T9212] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 285.058127][ T9224] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 285.074505][ T9224] bond3 (unregistering): Released all slaves [ 285.454662][ T9244] hsr_slave_1 (unregistering): left promiscuous mode [ 287.376400][ T9271] __nla_validate_parse: 29 callbacks suppressed [ 287.376420][ T9271] netlink: 48 bytes leftover after parsing attributes in process `syz.4.906'. [ 287.410016][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 287.420385][ T9273] batadv0: entered promiscuous mode [ 287.451855][ T9278] netlink: 'syz.3.907': attribute type 8 has an invalid length. [ 287.473599][ T9273] macsec1: entered promiscuous mode [ 287.487754][ T9273] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 287.498511][ T9273] batadv0: left promiscuous mode [ 287.670152][ T9282] x_tables: unsorted underflow at hook 3 [ 287.789086][ T9289] ip6gre1: entered allmulticast mode [ 287.791433][ T9284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.828835][ T9282] syzkaller0: entered promiscuous mode [ 287.837242][ T9282] syzkaller0: entered allmulticast mode [ 287.859967][ T9282] xfrm0 speed is unknown, defaulting to 1000 [ 287.869647][ T9282] xfrm0 speed is unknown, defaulting to 1000 [ 287.907866][ T9282] xfrm0 speed is unknown, defaulting to 1000 [ 287.916662][ T9282] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 287.933142][ T9282] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 287.951248][ T9282] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 287.979588][ T9282] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 288.012019][ T9282] xfrm0 speed is unknown, defaulting to 1000 [ 288.022998][ T9282] xfrm0 speed is unknown, defaulting to 1000 [ 288.030470][ T9282] xfrm0 speed is unknown, defaulting to 1000 [ 288.039302][ T9282] xfrm0 speed is unknown, defaulting to 1000 [ 288.047401][ T9282] xfrm0 speed is unknown, defaulting to 1000 [ 317.186493][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.743232][ T4949] Bluetooth: hci3: command 0x0405 tx timeout [ 351.882201][ T9329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.920'. [ 352.319353][ T9351] syzkaller0: entered promiscuous mode [ 352.335933][ T9351] syzkaller0: entered allmulticast mode [ 352.760540][ T9353] netlink: 'syz.3.926': attribute type 13 has an invalid length. [ 352.804001][ T9373] netlink: 68 bytes leftover after parsing attributes in process `syz.4.930'. [ 353.330311][ T9388] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.407890][ T9417] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 355.522897][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.934'. [ 355.995499][ T9442] blkio.reset_stats is deprecated [ 356.275492][ T9421] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 356.852229][ T9490] 8021q: VLANs not supported on ip_vti0 [ 356.915765][ T9493] x_tables: duplicate underflow at hook 1 [ 356.925999][ T9494] x_tables: duplicate underflow at hook 1 [ 356.987511][ T9493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.959'. [ 357.014250][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.959'. [ 357.074903][ T9498] netlink: 52 bytes leftover after parsing attributes in process `syz.4.961'. [ 357.093443][ T9493] gretap0: entered promiscuous mode [ 357.122945][ T9493] vlan1: entered promiscuous mode [ 357.502645][ T5649] Bluetooth: hci0: command 0x0c1a tx timeout [ 357.622317][ T9514] macvtap0: entered allmulticast mode [ 357.651650][ T9514] veth0_macvtap: entered allmulticast mode [ 358.207291][ T9546] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 358.215471][ T9546] netlink: 88 bytes leftover after parsing attributes in process `syz.0.975'. [ 358.226266][ T9546] netlink: 1 bytes leftover after parsing attributes in process `syz.0.975'. [ 358.235374][ T9546] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 358.244408][ T9546] netlink: 634 bytes leftover after parsing attributes in process `syz.0.975'. [ 358.308533][ T9543] bond2 (unregistering): Released all slaves [ 358.403810][ T9553] pimreg3: entered allmulticast mode [ 358.711807][ T9541] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.966'. [ 359.267763][ T9581] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 359.305543][ T9578] syzkaller1: entered promiscuous mode [ 359.327132][ T9578] syzkaller1: entered allmulticast mode [ 359.513614][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 359.578869][ T9596] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2 [ 359.593959][ T9597] xt_cgroup: path and classid specified [ 359.690562][ T9592] bond5 (unregistering): Released all slaves [ 359.816524][ T9606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.993'. [ 360.076148][ T9614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.995'. [ 360.519846][ T9627] xfrm0 speed is unknown, defaulting to 1000 [ 361.018190][ T9654] netlink: 'syz.4.1010': attribute type 2 has an invalid length. [ 361.204056][ T9663] IPVS: set_ctl: invalid protocol: 94 172.30.1.1:20000 [ 361.405567][ T9671] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 361.499864][ T9669] macvtap1: entered promiscuous mode [ 361.529639][ T9669] macvtap1: entered allmulticast mode [ 361.556085][ T9669] veth1_vlan: entered allmulticast mode [ 361.625938][ T9673] macvtap2: entered promiscuous mode [ 361.644540][ T9673] macvtap2: entered allmulticast mode [ 361.777238][ T9671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.024333][ T9695] netlink: 'syz.2.1020': attribute type 11 has an invalid length. [ 362.127896][ T9701] __nla_validate_parse: 5 callbacks suppressed [ 362.127916][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1024'. [ 362.234200][ T9706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1025'. [ 362.627014][ T9728] openvswitch: netlink: IP tunnel dst address not specified [ 362.668865][ T9728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1031'. [ 362.902617][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 363.330018][ T9756] netlink: 'syz.4.1037': attribute type 1 has an invalid length. [ 363.379831][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 363.435577][ T9764] openvswitch: netlink: IP tunnel dst address not specified [ 363.481380][ T9759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 363.548513][ T9756] bond4: entered promiscuous mode [ 363.599636][ T9768] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 363.608673][ T9756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 363.818938][ T9768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.880874][ T9766] bond2: (slave gretap1): making interface the new active one [ 363.906245][ T9766] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 365.071318][ T9831] "syz.2.1054" (9831) uses obsolete ecb(arc4) skcipher [ 365.228043][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 365.267240][ T9838] netlink: 'syz.4.1055': attribute type 5 has an invalid length. [ 365.281700][ T9838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1055'. [ 365.354722][ T9838] geneve2: entered promiscuous mode [ 365.408885][ T9838] geneve2: entered allmulticast mode [ 365.429914][ T6735] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 365.475944][ T6735] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 365.495579][ T6735] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 365.515332][ T6735] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 365.638736][ T9848] syzkaller0: entered promiscuous mode [ 365.664850][ T9848] syzkaller0: entered allmulticast mode [ 366.078130][ T9878] nbd: must specify at least one socket [ 366.135364][ T9882] netlink: 'syz.0.1068': attribute type 9 has an invalid length. [ 366.241619][ T9891] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 366.677364][ T9910] netlink: 'syz.3.1076': attribute type 1 has an invalid length. [ 366.814989][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1078'. [ 366.833372][ T9910] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.849561][ T9916] netlink: 'syz.4.1077': attribute type 11 has an invalid length. [ 366.858444][ T9916] netlink: 'syz.4.1077': attribute type 11 has an invalid length. [ 366.867303][ T9916] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1077'. [ 367.175900][ T9931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1082'. [ 367.451196][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 367.562649][ T9948] 8021q: VLANs not supported on ip6_vti0 [ 367.935308][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 368.299880][ T9976] : entered promiscuous mode [ 368.312072][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1097'. [ 368.915150][T10012] netlink: 'syz.4.1107': attribute type 1 has an invalid length. [ 368.984521][T10012] netlink: 'syz.4.1107': attribute type 4 has an invalid length. [ 369.019125][T10012] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1107'. [ 369.071660][T10017] netlink: 'syz.1.1109': attribute type 12 has an invalid length. [ 369.090594][T10017] netlink: 'syz.1.1109': attribute type 29 has an invalid length. [ 369.141741][T10017] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1109'. [ 369.201403][T10017] netlink: 'syz.1.1109': attribute type 1 has an invalid length. [ 369.230627][T10017] netlink: 'syz.1.1109': attribute type 2 has an invalid length. [ 369.399894][T10028] netlink: 'syz.0.1111': attribute type 29 has an invalid length. [ 369.800382][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 369.959000][T10055] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1118'. [ 370.022736][T10055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1118'. [ 370.238591][T10060] xfrm0 speed is unknown, defaulting to 1000 [ 370.465602][T10078] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 370.474291][T10078] syzkaller1: group set to 0 [ 370.492477][T10078] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1125'. [ 370.717943][T10078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.740154][T10078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.753870][T10078] bond0 (unregistering): Released all slaves [ 371.107555][T10098] netlink: 'syz.2.1130': attribute type 25 has an invalid length. [ 371.243681][T10109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.252115][T10109] IPv6: NLM_F_CREATE should be set when creating new route [ 371.259489][T10109] IPv6: NLM_F_CREATE should be set when creating new route [ 371.338735][T10108] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 371.388023][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.438251][T10108] bridge_slave_0 (unregistering): left allmulticast mode [ 371.466701][T10108] bridge_slave_0 (unregistering): left promiscuous mode [ 371.489364][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.509613][T10119] netlink: 'syz.0.1137': attribute type 9 has an invalid length. [ 372.132302][T10148] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.540505][T10167] __nla_validate_parse: 6 callbacks suppressed [ 372.540525][T10167] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1151'. [ 372.602228][T10169] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1151'. [ 372.659446][ T1563] xfrm0 speed is unknown, defaulting to 1000 [ 372.667571][ T5642] xfrm0 speed is unknown, defaulting to 1000 [ 372.702761][ T5642] syz2: Port: 1 Link DOWN [ 373.587397][T10206] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 373.697104][T10217] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1166'. [ 374.758138][ T5738] IPVS: starting estimator thread 0... [ 374.804207][T10277] C: entered allmulticast mode [ 374.871588][T10273] IPVS: using max 29 ests per chain, 69600 per kthread [ 374.932467][T10280] C: left allmulticast mode [ 375.152273][T10290] validate_nla: 5 callbacks suppressed [ 375.152293][T10290] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 375.209474][T10290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.272793][T10298] nbd: socks must be embedded in a SOCK_ITEM attr [ 375.808100][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 375.840990][T10331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1194'. [ 375.856801][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1193'. [ 375.871950][T10330] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 375.889271][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 376.081836][T10330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.216111][T10331] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 376.254166][T10331] bond5 (unregistering): Released all slaves [ 376.445219][T10341] 8021q: adding VLAN 0 to HW filter on device bond5 [ 376.472322][T10341] bond5 (unregistering): Released all slaves [ 376.481703][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 376.560529][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 376.612753][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.634137][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 376.812378][T10369] Cannot find set identified by id 65534 to match [ 377.186634][T10387] bridge_slave_1: left allmulticast mode [ 377.218256][T10387] bridge_slave_1: left promiscuous mode [ 377.237112][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.308396][T10387] bond0: (slave bond_slave_0): Releasing backup interface [ 377.326957][T10387] bond0: (slave bond_slave_1): Releasing backup interface [ 377.376467][T10387] team0: Port device team_slave_0 removed [ 377.399622][T10387] team0: Port device team_slave_1 removed [ 377.407602][T10387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.415759][T10387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.438945][T10387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.450450][T10387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.463714][T10387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 378.006575][T10420] __nla_validate_parse: 63 callbacks suppressed [ 378.006597][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1217'. [ 378.076044][T10424] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1219'. [ 378.096647][T10430] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1221'. [ 378.144553][T10433] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 378.159064][T10430] openvswitch: netlink: Missing key (keys=40, expected=100) [ 378.411435][T10442] syzkaller0: entered promiscuous mode [ 378.431367][T10442] syzkaller0: entered allmulticast mode [ 378.469274][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 378.525748][T10448] xfrm0 speed is unknown, defaulting to 1000 [ 378.572931][T10451] veth0: entered promiscuous mode [ 378.632055][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.756080][ T13] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 379.288232][T10469] syzkaller0: entered promiscuous mode [ 379.308335][T10469] syzkaller0: entered allmulticast mode [ 381.216611][T10450] veth0: left promiscuous mode [ 381.228483][T10451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.544396][ T5642] IPVS: starting estimator thread 0... [ 381.652232][T10502] IPVS: using max 27 ests per chain, 64800 per kthread [ 381.786317][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 381.886273][T10511] macsec2: entered promiscuous mode [ 381.898640][T10511] bridge0: entered promiscuous mode [ 381.914958][T10511] macsec2: entered allmulticast mode [ 381.924527][T10511] bridge0: entered allmulticast mode [ 381.937846][T10511] bridge0: port 1(macsec2) entered blocking state [ 381.954369][T10511] bridge0: port 1(macsec2) entered disabled state [ 381.982376][T10511] bridge0: left allmulticast mode [ 382.018851][ T5642] bridge0: left promiscuous mode [ 382.352525][T10532] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 382.395867][T10536] netlink: 'syz.2.1246': attribute type 9 has an invalid length. [ 382.405706][ T6727] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 382.694893][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 382.820034][T10567] netlink: 'syz.4.1256': attribute type 28 has an invalid length. [ 382.885488][T10567] netlink: 'syz.4.1256': attribute type 3 has an invalid length. [ 382.899482][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 382.909719][T10567] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1256'. [ 382.989700][T10570] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.034301][T10570] bond5: (slave lo): Enslaving as an active interface with an up link [ 383.045262][T10570] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 383.299271][T10588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.441669][T10590] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1262'. [ 383.466780][T10594] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1265'. [ 383.533669][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'. [ 383.569038][T10598] netlink: 'syz.0.1266': attribute type 10 has an invalid length. [ 383.579103][T10594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1265'. [ 383.602611][T10598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.628571][T10598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.995668][T10615] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1271'. [ 384.124685][T10615] vlan2: entered allmulticast mode [ 384.158800][T10615] bond0: entered allmulticast mode [ 384.181799][T10615] bond_slave_0: entered allmulticast mode [ 384.198834][T10615] bond_slave_1: entered allmulticast mode [ 384.243873][T10615] team0: entered allmulticast mode [ 384.278530][T10615] team_slave_1: entered allmulticast mode [ 384.313672][T10628] tipc: Started in network mode [ 384.331528][T10628] tipc: Node identity ac14140f, cluster identity 4711 [ 384.374319][T10636] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.1276'. [ 384.390368][T10628] tipc: Enabled bearer , priority 10 [ 384.460025][T10631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1277'. [ 384.504315][T10640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1280'. [ 384.589032][T10643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1281'. [ 384.614419][T10644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.722499][T10648] gtp0: entered allmulticast mode [ 384.746124][T10648] team0: Device gtp0 is of different type [ 384.771497][T10652] x_tables: duplicate underflow at hook 1 [ 384.848111][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 384.883446][T10657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.270558][T10674] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 385.503711][ T5738] tipc: Node number set to 2886997007 [ 386.084984][T10707] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 386.585902][T10737] xt_limit: Overflow, try lower: 271964/0 [ 386.707468][T10738] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 386.744783][T10738] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 386.777355][T10739] nbd: must specify an index to disconnect [ 386.822701][T10738] team0: Failed to send options change via netlink (err -105) [ 386.830433][T10738] team0: Port device batadv1 added [ 387.146544][T10758] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 387.227598][T10759] vlan2: entered promiscuous mode [ 387.234159][T10759] bridge0: entered promiscuous mode [ 387.589692][T10786] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 387.621988][T10786] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 388.250517][T10822] sctp: [Deprecated]: syz.4.1335 (pid 10822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.250517][T10822] Use struct sctp_sack_info instead [ 388.855976][T10843] netlink: 'syz.2.1341': attribute type 10 has an invalid length. [ 389.207189][T10860] __nla_validate_parse: 7 callbacks suppressed [ 389.207209][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1346'. [ 389.229274][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1346'. [ 389.399690][T10869] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1351'. [ 389.416554][T10870] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1352'. [ 389.419670][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1351'. [ 389.435332][T10869] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1351'. [ 389.445761][T10869] netlink: 'syz.3.1351': attribute type 2 has an invalid length. [ 389.455261][T10869] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1351'. [ 389.466123][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1352'. [ 389.475800][T10870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1352'. [ 389.631453][T10874] netlink: 'syz.3.1353': attribute type 4 has an invalid length. [ 389.641729][T10875] veth0: entered promiscuous mode [ 389.650482][T10873] veth0: left promiscuous mode [ 389.650565][T10874] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1353'. [ 389.835754][T10879] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 389.925789][T10883] IPVS: set_ctl: invalid protocol: 0 172.20.20.60:20003 [ 390.222881][T10901] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 390.236083][T10901] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 390.513529][T10909] netlink: 'syz.4.1364': attribute type 83 has an invalid length. [ 391.196977][T10934] veth3: entered allmulticast mode [ 391.207759][T10948] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 391.375258][T10948] bond3: entered promiscuous mode [ 391.381851][T10948] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.493387][T10951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.509184][T10951] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 391.541369][T10951] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 391.568862][T10951] bond3: (slave ip6gre1): making interface the new active one [ 391.576937][T10951] ip6gre1: entered promiscuous mode [ 391.602073][T10951] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 391.701412][ T6735] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.726379][T10974] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 391.778150][T10974] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 391.856804][T10974] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 391.877562][ T6727] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.921506][ T6727] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.944565][ T6727] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.016910][T10974] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 392.103659][T10986] sock: sock_set_timeout: `syz.2.1382' (pid 10986) tries to set negative timeout [ 392.576059][T11000] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 392.924253][T11020] netlink: 'syz.3.1393': attribute type 11 has an invalid length. [ 393.448315][T11040] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 393.472362][T11040] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 393.617951][T11053] syzkaller0: entered promiscuous mode [ 393.629520][T11053] syzkaller0: entered allmulticast mode [ 393.641972][T11056] netlink: 'syz.4.1408': attribute type 11 has an invalid length. [ 394.024957][T11074] netlink: 'syz.0.1409': attribute type 7 has an invalid length. [ 394.311685][T11068] __nla_validate_parse: 17 callbacks suppressed [ 394.311707][T11068] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1410'. [ 394.345599][T11083] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.352933][T11083] bridge0: port 1(bridge_slave_0) entered listening state [ 394.398994][T11083] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1410'. [ 394.442767][T11083] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.488730][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 394.562000][T11086] team0: entered promiscuous mode [ 394.575269][T11086] batadv1: entered promiscuous mode [ 394.648988][T11089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1416'. [ 394.799802][T11099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1417'. [ 394.880523][T11099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1417'. [ 394.891222][T11099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1417'. [ 395.079562][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1421'. [ 395.119949][T11115] netlink: 'syz.2.1421': attribute type 7 has an invalid length. [ 395.129177][T11115] netlink: 'syz.2.1421': attribute type 8 has an invalid length. [ 395.139577][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 395.155790][T11108] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 395.164794][T11108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1421'. [ 395.175720][T11108] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 395.362118][T11121] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 397.149741][T11127] syzkaller0: entered promiscuous mode [ 397.156012][T11127] syzkaller0: entered allmulticast mode [ 397.668772][T11093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.026992][T11145] vlan3: entered promiscuous mode [ 398.032496][T11145] gretap0: entered promiscuous mode [ 398.076581][T11139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.088184][T11140] syzkaller1: entered promiscuous mode [ 398.096170][T11152] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 398.120847][T11140] syzkaller1: entered allmulticast mode [ 398.329591][T11157] xt_bpf: check failed: parse error [ 398.532477][T11164] netlink: 'syz.0.1434': attribute type 32 has an invalid length. [ 398.608874][T11173] x_tables: duplicate underflow at hook 2 [ 398.658354][T11171] syzkaller0: entered promiscuous mode [ 398.685793][T11171] syzkaller0: entered allmulticast mode [ 398.725276][T11177] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 399.679696][T11223] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.953893][T11243] __nla_validate_parse: 9 callbacks suppressed [ 399.953912][T11243] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1451'. [ 400.043543][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1451'. [ 400.348652][T11259] syzkaller0: entered promiscuous mode [ 400.365983][T11259] syzkaller0: entered allmulticast mode [ 400.403397][T11259] FAULT_INJECTION: forcing a failure. [ 400.403397][T11259] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 400.428489][T11259] CPU: 1 UID: 0 PID: 11259 Comm: syz.2.1455 Not tainted syzkaller #0 PREEMPT(full) [ 400.428518][T11259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.428539][T11259] Call Trace: [ 400.428548][T11259] [ 400.428562][T11259] dump_stack_lvl+0xe8/0x150 [ 400.428599][T11259] should_fail_ex+0x412/0x560 [ 400.428627][T11259] _copy_from_iter+0x1d3/0x1670 [ 400.428649][T11259] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 400.428684][T11259] ? __pfx__copy_from_iter+0x10/0x10 [ 400.428713][T11259] ? dev_get_by_index+0x22/0x2e0 [ 400.428738][T11259] ? dev_get_by_index+0x22/0x2e0 [ 400.428769][T11259] packet_sendmsg+0x2e19/0x4fb0 [ 400.428813][T11259] ? __lock_acquire+0x6b5/0x2cf0 [ 400.428849][T11259] ? __lock_acquire+0x6b5/0x2cf0 [ 400.428899][T11259] ? __pfx_packet_sendmsg+0x10/0x10 [ 400.428926][T11259] ? aa_sk_perm+0x6d5/0x900 [ 400.428965][T11259] ? __pfx_aa_sk_perm+0x10/0x10 [ 400.428993][T11259] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 400.429033][T11259] ? aa_sock_msg_perm+0xf1/0x1b0 [ 400.429070][T11259] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.429099][T11259] ? __pfx_packet_sendmsg+0x10/0x10 [ 400.429129][T11259] __sys_sendto+0x672/0x710 [ 400.429164][T11259] ? __pfx___sys_sendto+0x10/0x10 [ 400.429193][T11259] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 400.429229][T11259] ? __fget_files+0x3a0/0x420 [ 400.429269][T11259] ? ksys_write+0x242/0x270 [ 400.429304][T11259] ? __pfx_ksys_write+0x10/0x10 [ 400.429341][T11259] __x64_sys_sendto+0xde/0x100 [ 400.429385][T11259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.429409][T11259] do_syscall_64+0x174/0x580 [ 400.429429][T11259] ? trace_irq_disable+0x3b/0x140 [ 400.429459][T11259] ? clear_bhb_loop+0x40/0x90 [ 400.429484][T11259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.429505][T11259] RIP: 0033:0x7f393399ce59 [ 400.429536][T11259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.429553][T11259] RSP: 002b:00007f39347f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 400.429580][T11259] RAX: ffffffffffffffda RBX: 00007f3933c15fa0 RCX: 00007f393399ce59 [ 400.429595][T11259] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000009 [ 400.429609][T11259] RBP: 00007f39347f3090 R08: 0000200000000140 R09: 0000000000000014 [ 400.429622][T11259] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 400.429634][T11259] R13: 00007f3933c16038 R14: 00007f3933c15fa0 R15: 00007ffd7967f718 [ 400.429668][T11259] [ 401.266401][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1464'. [ 401.274461][T11291] syzkaller0: entered promiscuous mode [ 401.329225][T11291] syzkaller0: entered allmulticast mode [ 401.492973][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1467'. [ 401.503366][T11305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1467'. [ 401.669608][T11318] netlink: zone id is out of range [ 401.711720][T11302] syzkaller0: entered allmulticast mode [ 401.719198][T11318] netlink: zone id is out of range [ 401.750579][T11312] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 401.793499][T11322] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1469'. [ 401.910362][T11313] netlink: set zone limit has 4 unknown bytes [ 401.926437][T11324] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1470'. [ 401.936355][T11324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1470'. [ 401.992163][T11327] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 2, id = 0 [ 402.096181][T11331] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 402.147570][T11331] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 402.162499][T11336] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 402.170524][T11336] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1473'. [ 402.181095][T11336] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 402.188989][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1473'. [ 402.201703][T11331] FAULT_INJECTION: forcing a failure. [ 402.201703][T11331] name failslab, interval 1, probability 0, space 0, times 1 [ 402.215614][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.4.1472 Not tainted syzkaller #0 PREEMPT(full) [ 402.215647][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 402.215660][T11331] Call Trace: [ 402.215668][T11331] [ 402.215678][T11331] dump_stack_lvl+0xe8/0x150 [ 402.215709][T11331] should_fail_ex+0x412/0x560 [ 402.215739][T11331] should_failslab+0xa8/0x100 [ 402.215762][T11331] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 402.215794][T11331] ? __alloc_skb+0x186/0x7d0 [ 402.215823][T11331] ? __alloc_skb+0x1d0/0x7d0 [ 402.215851][T11331] ? __local_bh_enable_ip+0xd0/0x130 [ 402.215878][T11331] __alloc_skb+0x1d0/0x7d0 [ 402.215920][T11331] ? __might_fault+0xaf/0x130 [ 402.215969][T11331] alloc_skb_with_frags+0xc8/0x760 [ 402.216014][T11331] sock_alloc_send_pskb+0x878/0x990 [ 402.216045][T11331] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 402.216081][T11331] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 402.216110][T11331] ? dev_get_by_index+0x22/0x2e0 [ 402.216143][T11331] ? dev_get_by_index+0x22/0x2e0 [ 402.216175][T11331] packet_sendmsg+0x315a/0x4fb0 [ 402.216217][T11331] ? __lock_acquire+0x6b5/0x2cf0 [ 402.216253][T11331] ? __lock_acquire+0x6b5/0x2cf0 [ 402.216298][T11331] ? __pfx_packet_sendmsg+0x10/0x10 [ 402.216325][T11331] ? aa_sk_perm+0x6d5/0x900 [ 402.216364][T11331] ? __pfx_aa_sk_perm+0x10/0x10 [ 402.216392][T11331] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 402.216433][T11331] ? aa_sock_msg_perm+0xf1/0x1b0 [ 402.216467][T11331] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.216495][T11331] ? __pfx_packet_sendmsg+0x10/0x10 [ 402.216525][T11331] __sys_sendto+0x672/0x710 [ 402.216560][T11331] ? __pfx___sys_sendto+0x10/0x10 [ 402.216588][T11331] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 402.216626][T11331] ? __fget_files+0x3a0/0x420 [ 402.216665][T11331] ? ksys_write+0x242/0x270 [ 402.216699][T11331] ? __pfx_ksys_write+0x10/0x10 [ 402.216736][T11331] __x64_sys_sendto+0xde/0x100 [ 402.216768][T11331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.216793][T11331] do_syscall_64+0x174/0x580 [ 402.216815][T11331] ? trace_irq_disable+0x3b/0x140 [ 402.216847][T11331] ? clear_bhb_loop+0x40/0x90 [ 402.216874][T11331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.216895][T11331] RIP: 0033:0x7f72ecb9ce59 [ 402.216916][T11331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.216933][T11331] RSP: 002b:00007f72ed9ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 402.216955][T11331] RAX: ffffffffffffffda RBX: 00007f72ece15fa0 RCX: 00007f72ecb9ce59 [ 402.216971][T11331] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000009 [ 402.216985][T11331] RBP: 00007f72ed9ea090 R08: 0000200000000140 R09: 0000000000000014 [ 402.216999][T11331] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 402.217011][T11331] R13: 00007f72ece16038 R14: 00007f72ece15fa0 R15: 00007ffc8c6b4038 [ 402.217046][T11331] [ 402.519248][T11336] erspan0: entered promiscuous mode [ 402.526411][T11336] vlan0: entered promiscuous mode [ 402.556195][ T5642] IPVS: starting estimator thread 0... [ 402.651490][T11338] IPVS: using max 30 ests per chain, 72000 per kthread [ 403.596983][T11392] ipt_rpfilter: unknown options [ 403.951329][T11398] bond3: entered promiscuous mode [ 404.029361][T11399] macvlan0: entered promiscuous mode [ 404.044171][T11399] macvlan0: entered allmulticast mode [ 404.051128][T11399] bond3: (slave macvlan0): Opening slave failed [ 404.177336][T11398] macvlan0: entered promiscuous mode [ 404.193404][T11398] macvlan0: entered allmulticast mode [ 404.255941][T11398] bond3: (slave macvlan0): Opening slave failed [ 404.383144][ T73] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.418670][ T1563] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.434012][ T73] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.495114][T11398] macvlan0: entered promiscuous mode [ 404.517651][T11398] macvlan0: entered allmulticast mode [ 404.533598][T11398] bond3: (slave macvlan0): Opening slave failed [ 404.582183][ T1563] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.800032][T11445] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 404.866086][T11445] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 404.986414][T11457] __nla_validate_parse: 5 callbacks suppressed [ 404.986431][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 405.322088][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1515'. [ 405.350437][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 405.397904][T11484] netlink: 'syz.0.1517': attribute type 24 has an invalid length. [ 405.421948][ T1563] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.482223][T11473] hsr_slave_1 (unregistering): left promiscuous mode [ 405.504007][T11487] kthread_run failed with err -4 [ 405.685370][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'. [ 405.773178][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 405.806336][T11501] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 405.834055][T11507] netlink: 'syz.0.1520': attribute type 1 has an invalid length. [ 405.845505][T11501] bond1: left promiscuous mode [ 405.852761][T11501] vti0: left promiscuous mode [ 405.860101][T11501] bridge3: left promiscuous mode [ 406.417408][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1529'. [ 406.701732][T11543] IPVS: length: 8 != 1152 [ 406.769675][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1533'. [ 406.815460][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1534'. [ 406.880192][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1534'. [ 406.961461][T11550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1536'. [ 407.039548][T11550] gretap2: entered promiscuous mode [ 407.063425][T11550] gretap2: entered allmulticast mode [ 407.143311][T11555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.206400][T11562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.289745][T11555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.778133][T11591] netlink: 'syz.0.1548': attribute type 3 has an invalid length. [ 407.910413][T11601] tc_dump_action: action bad kind [ 408.214181][T11621] xfrm1: entered allmulticast mode [ 408.700871][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.794680][T11656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.299325][ T73] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 410.361477][T11694] ipt_REJECT: TCP_RESET invalid for non-tcp [ 410.633964][T11713] __nla_validate_parse: 12 callbacks suppressed [ 410.633984][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 410.658647][T11713] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1571'. [ 410.700038][T11713] 8021q: VLANs not supported on ip6gre0 [ 412.122827][T11632] Set syz1 is full, maxelem 65536 reached [ 413.138258][T11701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.149036][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 413.458622][T11750] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1577'. [ 413.498663][T11751] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 413.536162][T11751] netlink: 'syz.2.1578': attribute type 4 has an invalid length. [ 413.558430][T11751] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.1578'. [ 413.576040][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 413.593642][T11756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1579'. [ 414.077977][T11775] netlink: 'syz.1.1585': attribute type 39 has an invalid length. [ 414.294197][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1586'. [ 414.385959][T11759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.589634][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 414.641107][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 414.888892][T11801] bridge0: port 3(veth1_to_bridge) entered blocking state [ 414.934957][T11801] bridge0: port 3(veth1_to_bridge) entered disabled state [ 414.983558][T11801] veth1_to_bridge: entered allmulticast mode [ 415.034386][T11801] veth1_to_bridge: entered promiscuous mode [ 415.061423][T11801] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.103822][T11801] bridge0: port 3(veth1_to_bridge) entered blocking state [ 415.111180][T11801] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 415.314820][T11824] syzkaller0: entered promiscuous mode [ 415.354810][T11824] syzkaller0: entered allmulticast mode [ 415.847910][T11849] __nla_validate_parse: 2 callbacks suppressed [ 415.847930][T11849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1605'. [ 416.164215][T11861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1607'. [ 416.290583][T11869] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1608'. [ 416.324124][T11869] netlink: Conntrack attr has 4 unknown bytes [ 416.567153][T11882] netlink: 'syz.3.1612': attribute type 6 has an invalid length. [ 416.602937][T11885] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 416.651777][T11884] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 417.255230][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 417.525717][T11921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1624'. [ 417.609668][T11919] syzkaller0: entered promiscuous mode [ 417.630169][T11919] syzkaller0: entered allmulticast mode [ 417.655971][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 417.665275][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.758743][T11938] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1626'. [ 417.900202][ T6733] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 418.054456][T11949] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1628'. [ 418.129895][T11932] 8021q: adding VLAN 0 to HW filter on device bond5 [ 418.155693][T11947] macvlan2: entered promiscuous mode [ 418.162017][T11947] macvlan2: entered allmulticast mode [ 418.169103][T11947] bond5: entered promiscuous mode [ 418.177444][T11947] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 418.193899][T11947] bond5: left promiscuous mode [ 418.441698][T11960] ±ÿª¨úrBº“: renamed from lo (while UP) [ 418.469275][T11962] xt_hashlimit: size too large, truncated to 1048576 [ 418.488840][T11963] xt_hashlimit: size too large, truncated to 1048576 [ 418.613117][T11970] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1633'. [ 418.626904][T11969] syzkaller1: entered promiscuous mode [ 418.633701][T11969] syzkaller1: entered allmulticast mode [ 418.639427][T11970] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 418.743305][T11975] syzkaller0: entered promiscuous mode [ 418.748939][T11975] syzkaller0: entered allmulticast mode [ 419.758826][T11977] netlink: 'syz.1.1636': attribute type 21 has an invalid length. [ 419.766879][T11977] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1636'. [ 420.601834][T11934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.427361][T12007] syzkaller0: entered promiscuous mode [ 421.452474][T12007] syzkaller0: entered allmulticast mode [ 421.491463][T12022] __nla_validate_parse: 1 callbacks suppressed [ 421.491483][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 421.755559][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 421.961530][T12033] team0: Port device team_slave_0 removed [ 422.071229][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 422.135063][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 422.152887][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 422.201408][T12049] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1653'. [ 422.217726][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1653'. [ 422.325996][T12038] syzkaller0: entered promiscuous mode [ 422.337703][T12050] tipc: Started in network mode [ 422.346035][T12050] tipc: Node identity 92290621e438, cluster identity 4711 [ 422.355205][T12050] tipc: Enabled bearer , priority 0 [ 422.362721][T12051] syzkaller0: entered promiscuous mode [ 422.368343][T12051] syzkaller0: entered allmulticast mode [ 422.376255][T12059] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 422.744324][T12074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1661'. [ 422.801520][T12077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1661'. [ 424.621168][T12050] tipc: Resetting bearer [ 424.644606][T12048] tipc: Resetting bearer [ 424.747343][T12048] tipc: Disabling bearer [ 424.797755][ T10] tipc: Node number set to 1980827169 [ 424.852055][T12089] Cannot find del_set index 4 as target [ 424.888596][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 425.111535][T12108] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 425.141644][T12109] sctp: [Deprecated]: syz.4.1670 (pid 12109) Use of int in max_burst socket option. [ 425.141644][T12109] Use struct sctp_assoc_value instead [ 425.659626][T12131] netlink: 'syz.1.1675': attribute type 12 has an invalid length. [ 425.688796][T12131] netlink: 'syz.1.1675': attribute type 29 has an invalid length. [ 426.245572][T12162] x_tables: duplicate underflow at hook 1 [ 426.711638][T12187] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 426.734948][T12187] netlink: 'syz.3.1690': attribute type 2 has an invalid length. [ 426.748796][T12187] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 426.761826][T12187] __nla_validate_parse: 4 callbacks suppressed [ 426.761844][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1690'. [ 426.959549][T12191] netlink: 'syz.3.1691': attribute type 1 has an invalid length. [ 426.986966][T12191] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1691'. [ 427.068422][T12193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1692'. [ 427.107768][T12193] netlink: 'syz.2.1692': attribute type 1 has an invalid length. [ 427.146468][T12193] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 427.157119][T12193] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 427.227710][T12197] C: entered allmulticast mode [ 427.246635][T12197] tunl0: entered allmulticast mode [ 427.255705][T12197] gre0: entered allmulticast mode [ 427.303679][T12197] gretap0: entered allmulticast mode [ 427.316373][T12197] erspan0: entered allmulticast mode [ 427.326519][T12197] ip_vti0: entered allmulticast mode [ 427.334373][T12197] ip6_vti0: entered allmulticast mode [ 427.343743][T12197] sit0: entered allmulticast mode [ 427.357159][T12197] ip6tnl0: entered allmulticast mode [ 427.378761][T12197] ip6gre0: entered allmulticast mode [ 427.405899][T12197] ip6gretap0: entered allmulticast mode [ 427.459203][T12197] bridge0: entered allmulticast mode [ 427.490585][T12197] vcan0: entered allmulticast mode [ 427.538793][T12197] bond0: entered allmulticast mode [ 427.561479][T12197] bond_slave_0: entered allmulticast mode [ 427.579048][T12197] bond_slave_1: entered allmulticast mode [ 427.601840][T12197] team0: entered allmulticast mode [ 427.614217][T12197] team_slave_0: entered allmulticast mode [ 427.628755][T12197] team_slave_1: entered allmulticast mode [ 427.659081][T12197] dummy0: entered allmulticast mode [ 427.738260][T12197] nlmon0: entered allmulticast mode [ 427.761727][T12197] batadv0: entered allmulticast mode [ 427.776449][T12197] vxcan0: entered allmulticast mode [ 427.786750][T12197] vxcan1: entered allmulticast mode [ 427.799700][T12197] veth0: entered allmulticast mode [ 427.818574][T12197] veth1: entered allmulticast mode [ 427.841041][T12197] wg0: entered allmulticast mode [ 427.859189][T12197] wg1: entered allmulticast mode [ 427.883539][T12197] wg2: entered allmulticast mode [ 427.907460][T12197] veth0_to_bridge: entered allmulticast mode [ 427.929200][T12197] veth1_to_bridge: entered allmulticast mode [ 427.979001][T12197] veth0_to_bond: entered allmulticast mode [ 428.003938][T12197] veth1_to_bond: entered allmulticast mode [ 428.066768][T12197] veth0_to_team: entered allmulticast mode [ 428.085980][T12197] veth1_to_team: entered allmulticast mode [ 428.114340][T12197] veth0_to_batadv: entered allmulticast mode [ 428.176342][T12197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.236315][T12197] batadv_slave_0: entered allmulticast mode [ 428.245459][T12224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.285037][T12197] veth1_to_batadv: entered allmulticast mode [ 428.317585][T12197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.327964][T12197] batadv_slave_1: entered allmulticast mode [ 428.338838][T12197] xfrm0: entered allmulticast mode [ 428.359207][T12197] veth0_to_hsr: entered allmulticast mode [ 428.369991][T12197] hsr_slave_0: entered allmulticast mode [ 428.379938][T12197] veth1_to_hsr: entered allmulticast mode [ 428.388972][T12197] hsr_slave_1: entered allmulticast mode [ 428.397654][T12197] hsr0: entered allmulticast mode [ 428.408318][T12197] veth1_vlan: entered allmulticast mode [ 428.420067][T12197] veth0_vlan: entered allmulticast mode [ 428.427059][T12197] vlan0: entered allmulticast mode [ 428.433593][T12235] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20002 [ 428.441238][T12197] vlan1: entered allmulticast mode [ 428.449227][T12235] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.458044][T12197] macvlan0: entered allmulticast mode [ 428.471831][T12197] macvlan1: entered allmulticast mode [ 428.479866][T12197] ipvlan0: entered allmulticast mode [ 428.488443][T12197] ipvlan1: entered allmulticast mode [ 428.496197][T12197] veth1_macvtap: entered allmulticast mode [ 428.506596][T12197] veth0_macvtap: entered allmulticast mode [ 428.516238][T12197] macvtap0: entered allmulticast mode [ 428.524457][T12197] macsec0: entered allmulticast mode [ 428.533514][T12197] geneve0: entered allmulticast mode [ 428.546344][T12197] geneve1: entered allmulticast mode [ 428.555122][T12197] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 428.565291][T12197] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 428.577966][T12197] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 428.589482][T12197] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 428.599676][T12197] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 428.608354][T12197] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 428.615968][T12197] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 428.625126][T12197] bridge1: entered allmulticast mode [ 428.633827][T12197] wireguard0: entered allmulticast mode [ 428.642954][T12197] @: entered allmulticast mode [ 428.661453][T12197] ip6gretap0.4: entered allmulticast mode [ 428.667880][T12197] bond1: entered allmulticast mode [ 428.679468][T12197] vti0: entered allmulticast mode [ 428.689086][T12197] bond2: entered allmulticast mode [ 428.696568][T12197] bridge2: entered allmulticast mode [ 428.702677][T12197] ip6erspan0: entered allmulticast mode [ 428.708589][T12197] ipip0: entered allmulticast mode [ 428.718201][T12197] bridge4: entered allmulticast mode [ 428.724016][T12197] geneve2: entered allmulticast mode [ 428.729538][T12197] vlan0.0: entered allmulticast mode [ 428.735367][T12197] bridge5: entered allmulticast mode [ 428.743434][T12197] bond3: entered allmulticast mode [ 428.759571][T12197] bond4: entered allmulticast mode [ 428.765599][T12197] wireguard1: entered allmulticast mode [ 428.772183][T12197] gretap1: entered allmulticast mode [ 428.777645][T12197] bridge6: entered allmulticast mode [ 428.784154][T12197] mac80211_hwsim hwsim10 pim6reg0: entered allmulticast mode [ 428.793110][T12197] syztnl1: entered allmulticast mode [ 428.802628][T12197] bond5: entered allmulticast mode [ 428.809377][T12197] bridge7: entered allmulticast mode [ 428.816033][T12200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1693'. [ 428.884211][ T6727] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.935574][ T6727] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.009342][ T6727] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.034841][ T6727] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.047756][T12239] openvswitch: netlink: IP tunnel dst address not specified [ 429.062441][ T6727] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.079444][ T6727] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.089801][ T1012] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.153669][ T1012] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.163565][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 429.221063][T12237] netlink: 'syz.3.1703': attribute type 1 has an invalid length. [ 429.244259][T12237] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1703'. [ 429.254972][T12248] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1706'. [ 429.265016][T12251] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 429.326216][T12257] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1708'. [ 429.660924][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'. [ 429.686489][T12267] vlan1: entered allmulticast mode [ 429.706638][T12267] bond0: entered allmulticast mode [ 429.717293][T12272] netlink: zone id is out of range [ 429.722054][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 429.734340][T12270] tc_dump_action: action bad kind [ 429.754160][T12272] netlink: zone id is out of range [ 429.775340][T12272] netlink: zone id is out of range [ 429.781418][T12272] netlink: zone id is out of range [ 429.788291][T12272] netlink: zone id is out of range [ 429.834282][T12272] netlink: zone id is out of range [ 429.855788][T12272] netlink: zone id is out of range [ 429.864784][T12272] netlink: zone id is out of range [ 430.259816][T12289] syzkaller0: entered promiscuous mode [ 430.283576][T12289] syzkaller0: entered allmulticast mode [ 432.417186][T12315] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 432.654503][T12332] netlink: 'syz.4.1731': attribute type 10 has an invalid length. [ 432.693648][T12338] __nla_validate_parse: 3 callbacks suppressed [ 432.693665][T12338] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1732'. [ 432.717565][T12332] veth1_macvtap: left promiscuous mode [ 432.735117][T12332] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 432.799348][T12341] netlink: 'syz.3.1728': attribute type 1 has an invalid length. [ 432.933654][T12344] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1733'. [ 432.958394][T12344] netlink: 'syz.2.1733': attribute type 9 has an invalid length. [ 433.297211][T12357] veth5: entered allmulticast mode [ 433.731838][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'. [ 433.756237][T12374] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 433.777171][T12378] netlink: 'syz.3.1742': attribute type 5 has an invalid length. [ 433.786087][T12378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1742'. [ 433.798316][T12374] bond5 (unregistering): Released all slaves [ 433.901608][T12378] geneve3: entered promiscuous mode [ 433.929956][T12378] geneve3: entered allmulticast mode [ 433.949092][ T6734] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 433.978862][ T6734] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 434.007405][ T6734] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 434.048659][ T6734] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 434.118987][T12386] netlink: 'syz.2.1743': attribute type 13 has an invalid length. [ 434.139505][T12386] netlink: 'syz.2.1743': attribute type 58 has an invalid length. [ 434.178375][T12386] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1743'. [ 434.238987][T12386] netlink: 'syz.2.1743': attribute type 13 has an invalid length. [ 434.274509][T12386] netlink: 'syz.2.1743': attribute type 58 has an invalid length. [ 434.289453][T12386] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1743'. [ 434.300826][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.735600][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1751'. [ 435.940111][T12439] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1753'. [ 435.977576][T12440] nft_compat: unsupported protocol 0 [ 436.155157][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 436.194371][T12445] netlink: 'syz.4.1755': attribute type 32 has an invalid length. [ 436.224259][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 436.367431][T12445] bond5: option coupled_control: invalid value (192) [ 436.384782][T12445] bond5 (unregistering): Released all slaves [ 437.182273][T12484] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 437.404211][T12502] net_ratelimit: 46 callbacks suppressed [ 437.404232][T12502] netlink: ct family unspecified [ 437.465190][T12484] 8021q: adding VLAN 0 to HW filter on device bond6 [ 437.513956][T12487] bond6: (slave geneve4): making interface the new active one [ 437.524686][T12487] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 437.680401][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 437.715577][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 437.773069][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 437.829904][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 437.922458][T12522] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 437.949621][T12522] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 437.962400][T12523] __nla_validate_parse: 4 callbacks suppressed [ 437.962418][T12523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1769'. [ 437.974202][T12525] nbd: must specify a size in bytes for the device [ 437.984301][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1769'. [ 438.002181][T12522] team_slave_1: entered promiscuous mode [ 438.368597][T12537] xfrm0 speed is unknown, defaulting to 1000 [ 438.870604][T12557] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 438.907645][T12559] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 438.934369][T12562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1779'. [ 439.093667][T12566] tipc: Started in network mode [ 439.126626][T12566] tipc: Node identity 2e8c0291c9c7, cluster identity 4711 [ 439.154253][T12566] tipc: Enabled bearer , priority 11 [ 439.182011][T12566] netem: change failed [ 439.189205][T12572] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1784'. [ 439.227237][T12568] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1782'. [ 439.253182][T12574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1784'. [ 439.322963][T12575] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1783'. [ 439.332850][T12572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1784'. [ 439.420223][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1786'. [ 439.442592][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1786'. [ 439.573207][T12570] bond7: option fail_over_mac: invalid value (16) [ 439.583995][T12570] bond7 (unregistering): Released all slaves [ 439.624508][T12582] IPv6: sit1: Disabled Multicast RS [ 439.633906][T12581] veth1_to_bond: entered allmulticast mode [ 439.653200][T12580] veth1_to_bond: left allmulticast mode [ 439.833251][T12590] netlink: 'syz.2.1788': attribute type 7 has an invalid length. [ 439.858122][T12590] netlink: 'syz.2.1788': attribute type 7 has an invalid length. [ 439.887253][T12593] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 440.062918][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.151483][T12598] netlink: 'syz.3.1791': attribute type 21 has an invalid length. [ 440.311348][T12604] netlink: 'syz.1.1792': attribute type 1 has an invalid length. [ 440.352305][T12604] nbd: error processing sock list [ 440.372061][ T5642] tipc: Node number set to 3880452753 [ 440.546802][T12606] syzkaller1: entered promiscuous mode [ 440.584580][T12606] syzkaller1: entered allmulticast mode [ 440.713085][T12622] geneve5: entered promiscuous mode [ 440.749932][ T73] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 46343 - 0 [ 440.794289][ T73] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 46343 - 0 [ 440.824278][ T73] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 46343 - 0 [ 440.833549][ T73] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 46343 - 0 [ 441.744762][T12677] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 442.438428][T12702] netlink: 'syz.4.1819': attribute type 12 has an invalid length. [ 442.471756][T12703] netlink: 'syz.4.1819': attribute type 12 has an invalid length. [ 442.558128][T12702] netlink: 'syz.4.1819': attribute type 12 has an invalid length. [ 443.126458][T12730] __nla_validate_parse: 15 callbacks suppressed [ 443.126478][T12730] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1826'. [ 443.685059][T12757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1832'. [ 443.982760][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 444.628155][T12793] pimreg3: entered allmulticast mode [ 444.866320][T12801] validate_nla: 1 callbacks suppressed [ 444.866342][T12801] netlink: 'syz.4.1848': attribute type 1 has an invalid length. [ 445.792582][T12823] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 446.031790][T12827] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1855'. [ 448.470353][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 448.621585][T12841] netlink: zone id is out of range [ 448.645248][T12841] netlink: zone id is out of range [ 448.660935][T12841] netlink: zone id is out of range [ 448.671116][T12841] netlink: del zone limit has 4 unknown bytes [ 448.737593][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 449.680418][T12862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1859'. [ 449.934664][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1861'. [ 450.328683][T12877] syzkaller0: entered promiscuous mode [ 450.393850][T12877] syzkaller0: entered allmulticast mode [ 450.923962][T12889] netlink: 'syz.4.1867': attribute type 3 has an invalid length. [ 451.017549][T12889] netlink: 'syz.4.1867': attribute type 1 has an invalid length. [ 451.112167][T12889] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1867'. [ 451.230974][T12889] NCSI netlink: No device for ifindex 813332851 [ 451.834364][T12906] netlink: 'syz.1.1871': attribute type 1 has an invalid length. [ 452.069645][T12908] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1871'. [ 452.149596][T12912] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 452.743459][T12923] bond7: (slave geneve6): making interface the new active one [ 452.824026][T12923] bond7: (slave geneve6): Enslaving as an active interface with an up link [ 453.210527][T12934] netlink: 'syz.1.1877': attribute type 8 has an invalid length. [ 453.315647][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 453.500318][T12921] syzkaller0: entered promiscuous mode [ 453.556118][T12921] syzkaller0: entered allmulticast mode [ 453.596629][ T6734] netdevsim netdevsim3 netdevsim0: set [1, 3] type 2 family 0 port 20004 - 0 [ 453.623220][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1879'. [ 453.664643][ T6734] netdevsim netdevsim3 netdevsim1: set [1, 3] type 2 family 0 port 20004 - 0 [ 453.837826][T12934] veth1_to_team: entered promiscuous mode [ 453.878966][T12934] hsr1: entered promiscuous mode [ 453.898870][T12939] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1879'. [ 453.933032][T12939] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1879'. [ 454.012614][ T6734] netdevsim netdevsim3 netdevsim2: set [1, 3] type 2 family 0 port 20004 - 0 [ 454.139824][ T6734] netdevsim netdevsim3 netdevsim3: set [1, 3] type 2 family 0 port 20004 - 0 [ 454.943538][T12967] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 455.752851][T12981] netlink: 'syz.1.1887': attribute type 1 has an invalid length. [ 462.097539][T12981] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 462.614010][T12995] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.685404][T12999] netlink: 7986 bytes leftover after parsing attributes in process `syz.4.1889'. [ 462.803724][T13003] netlink: 'syz.1.1891': attribute type 29 has an invalid length. [ 462.870291][T12994] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 462.895762][T13005] netlink: 'syz.1.1891': attribute type 29 has an invalid length. [ 462.956744][T12995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1891'. [ 463.039253][T13003] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1891'. [ 463.153914][T13003] unsupported nla_type 58 [ 463.188710][T13007] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1892'. [ 463.284361][T13008] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 463.311258][T13008] netlink: 'syz.2.1893': attribute type 2 has an invalid length. [ 463.364665][T13013] sctp: [Deprecated]: syz.2.1893 (pid 13013) Use of int in maxseg socket option. [ 463.364665][T13013] Use struct sctp_assoc_value instead [ 463.861555][T13021] netlink: 'syz.4.1897': attribute type 5 has an invalid length. [ 464.593326][T13031] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 464.607700][T13033] netlink: 'syz.4.1901': attribute type 21 has an invalid length. [ 464.675895][T13033] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1901'. [ 464.788803][T13041] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 464.831714][T13031] bond4: entered promiscuous mode [ 464.867042][T13031] 8021q: adding VLAN 0 to HW filter on device bond4 [ 465.088372][T13040] bond4: (slave bridge6): making interface the new active one [ 465.147122][T13040] bridge6: entered promiscuous mode [ 465.190327][T13040] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 465.296959][T13033] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1901'. [ 465.924297][T13051] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1905'. [ 466.165369][T13057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1907'. [ 466.483295][T13057] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 466.572328][T13057] gretap1: entered promiscuous mode [ 466.630371][T13057] gretap1: entered allmulticast mode [ 467.394590][T13083] tipc: Enabling of bearer rejected, failed to enable media [ 467.581639][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.352342][T13096] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 468.562924][T13105] netlink: 'syz.1.1915': attribute type 2 has an invalid length. [ 471.099294][T13139] syzkaller1: entered promiscuous mode [ 471.150975][T13139] syzkaller1: entered allmulticast mode [ 471.798371][T13159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1927'. [ 471.808394][T13162] netlink: 'syz.2.1930': attribute type 23 has an invalid length. [ 471.857250][T13159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1927'. [ 471.969271][T13167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1930'. [ 472.039675][T13163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1929'. [ 472.136321][T13166] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1929'. [ 472.207268][T13166] netlink: Conntrack attr has 4 unknown bytes [ 472.693547][T13176] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 472.847794][T13176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1932'. [ 473.167253][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 473.248862][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1934'. [ 473.405752][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 481.940643][ C0] sched: DL replenish lagged too much [ 484.189752][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1934'. [ 504.085479][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.226805][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.914784][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.500588][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 578.507612][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13182/1:b..l [ 578.516088][ C1] rcu: (detected by 1, t=10503 jiffies, g=63445, q=2274 ncpus=2) [ 578.523935][ C1] task:syz.4.1934 state:R running task stack:25480 pid:13182 tgid:13177 ppid:5636 task_flags:0x400140 flags:0x00080002 [ 578.538462][ C1] Call Trace: [ 578.541786][ C1] [ 578.544755][ C1] __schedule+0x1821/0x5740 [ 578.549449][ C1] ? clockevents_program_event+0x4bb/0x630 [ 578.555297][ C1] ? __pfx___schedule+0x10/0x10 [ 578.560220][ C1] preempt_schedule_irq+0x4d/0xa0 [ 578.565286][ C1] irqentry_exit+0x14f/0x8b0 [ 578.569917][ C1] ? trace_irq_disable+0x3b/0x140 [ 578.574998][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 578.581014][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 578.586353][ C1] Code: ff ff ff e8 31 bf 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b 5a 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 ed 91 [ 578.606078][ C1] RSP: 0018:ffffc9000d956d18 EFLAGS: 00000286 [ 578.612179][ C1] RAX: 8e5b67d57634f800 RBX: 0000000000000000 RCX: 0000000000000046 [ 578.620220][ C1] RDX: 000000008ac5a3d7 RSI: ffffffff8e2173a5 RDI: ffffffff8c28b8e0 [ 578.628229][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 578.636240][ C1] R10: ffffc9000d956e78 R11: ffffffff81b0e0e0 R12: 0000000000000002 [ 578.644248][ C1] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 578.652259][ C1] ? unwind_next_frame+0xa6/0x2550 [ 578.657434][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 578.663655][ C1] ? unwind_next_frame+0xa6/0x2550 [ 578.668818][ C1] ? stack_trace_save+0xa9/0x100 [ 578.673795][ C1] ? unwind_next_frame+0xa6/0x2550 [ 578.678940][ C1] unwind_next_frame+0xc3/0x2550 [ 578.683918][ C1] ? unwind_next_frame+0xa6/0x2550 [ 578.689088][ C1] ? __unwind_start+0x5b8/0x760 [ 578.693977][ C1] ? stack_trace_save+0xa9/0x100 [ 578.698956][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 578.705160][ C1] arch_stack_walk+0x11b/0x150 [ 578.709985][ C1] ? stack_trace_save+0xa9/0x100 [ 578.714977][ C1] stack_trace_save+0xa9/0x100 [ 578.719787][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 578.725210][ C1] ? stack_trace_save+0xa9/0x100 [ 578.730199][ C1] ? stack_depot_save_flags+0x33/0x810 [ 578.735781][ C1] kasan_save_track+0x3e/0x80 [ 578.740556][ C1] __kasan_slab_alloc+0x6c/0x80 [ 578.745455][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 578.751418][ C1] ? __alloc_skb+0x27d/0x7d0 [ 578.756127][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 578.762244][ C1] __alloc_skb+0x27d/0x7d0 [ 578.766700][ C1] ? _raw_spin_unlock+0x28/0x50 [ 578.771591][ C1] nci_send_cmd+0x90/0x360 [ 578.776178][ C1] nci_dev_up+0x34f/0xdd0 [ 578.780558][ C1] ? __pfx_nci_dev_up+0x10/0x10 [ 578.785449][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 578.791326][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 578.797187][ C1] nfc_dev_up+0x16d/0x350 [ 578.801664][ C1] nfc_genl_dev_up+0x89/0xe0 [ 578.806290][ C1] genl_family_rcv_msg_doit+0x22a/0x330 [ 578.811931][ C1] ? __asan_memcpy+0x40/0x70 [ 578.816574][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 578.822687][ C1] ? bpf_lsm_capable+0x9/0x20 [ 578.827415][ C1] ? security_capable+0x7e/0x2c0 [ 578.832466][ C1] genl_rcv_msg+0x61c/0x7a0 [ 578.837022][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.842082][ C1] ? __pfx_nfc_genl_dev_up+0x10/0x10 [ 578.847423][ C1] netlink_rcv_skb+0x232/0x4b0 [ 578.852316][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.857390][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.862731][ C1] ? down_read+0x270/0x2e0 [ 578.867183][ C1] ? genl_rcv+0xd/0x40 [ 578.871699][ C1] genl_rcv+0x28/0x40 [ 578.875719][ C1] netlink_unicast+0x75c/0x8e0 [ 578.880528][ C1] netlink_sendmsg+0x813/0xb40 [ 578.885356][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.890696][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 578.895916][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 578.901246][ C1] ____sys_sendmsg+0x972/0x9f0 [ 578.906083][ C1] ? __might_fault+0xaf/0x130 [ 578.910811][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.916149][ C1] ? import_iovec+0x73/0xa0 [ 578.920747][ C1] ___sys_sendmsg+0x2a5/0x360 [ 578.925450][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 578.930434][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.935675][ C1] ? futex_wake+0x4ac/0x580 [ 578.940242][ C1] ? __fget_files+0x2a/0x420 [ 578.944863][ C1] ? __fget_files+0x3a0/0x420 [ 578.949586][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 578.954568][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 578.960077][ C1] ? rcu_is_watching+0x15/0xb0 [ 578.964904][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.971022][ C1] do_syscall_64+0x174/0x580 [ 578.975739][ C1] ? trace_irq_disable+0x3b/0x140 [ 578.980810][ C1] ? clear_bhb_loop+0x40/0x90 [ 578.985604][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.991546][ C1] RIP: 0033:0x7f72ecb9ce59 [ 578.995992][ C1] RSP: 002b:00007f72ed9ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.004885][ C1] RAX: ffffffffffffffda RBX: 00007f72ece15fa0 RCX: 00007f72ecb9ce59 [ 579.012928][ C1] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000007 [ 579.020974][ C1] RBP: 00007f72ecc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 579.029082][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.037082][ C1] R13: 00007f72ece16038 R14: 00007f72ece15fa0 R15: 00007ffc8c6b4038 [ 579.045114][ C1] [ 579.048164][ C1] rcu: rcu_preempt kthread starved for 1018 jiffies! g63445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 579.059297][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 579.069293][ C1] rcu: RCU grace-period kthread stack dump: [ 579.075203][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 579.088741][ C1] Call Trace: [ 579.092054][ C1] [ 579.095017][ C1] __schedule+0x1821/0x5740 [ 579.099563][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 579.104565][ C1] ? __pfx___schedule+0x10/0x10 [ 579.109479][ C1] ? schedule+0x90/0x360 [ 579.113772][ C1] schedule+0x164/0x360 [ 579.117977][ C1] schedule_timeout+0x158/0x2c0 [ 579.122876][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 579.128314][ C1] ? __pfx_process_timeout+0x10/0x10 [ 579.133645][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 579.139516][ C1] ? prepare_to_swait_event+0x340/0x370 [ 579.145106][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 579.150006][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 579.156193][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 579.161511][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 579.166766][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 579.171394][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 579.176620][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 579.182468][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 579.187474][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 579.192537][ C1] kthread+0x389/0x470 [ 579.196641][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 579.201864][ C1] ? __pfx_kthread+0x10/0x10 [ 579.206491][ C1] ret_from_fork+0x514/0xb70 [ 579.211118][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 579.216259][ C1] ? __switch_to+0xc79/0x1410 [ 579.220990][ C1] ? __pfx_kthread+0x10/0x10 [ 579.225621][ C1] ret_from_fork_asm+0x1a/0x30 [ 579.230439][ C1] [ 579.233478][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 579.239840][ C1] Sending NMI from CPU 1 to CPUs 0: [ 579.245078][ C0] NMI backtrace for cpu 0 [ 579.245094][ C0] CPU: 0 UID: 0 PID: 73 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 579.245114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 579.245127][ C0] Workqueue: krds_cp_wq#4/5 rds_connect_worker [ 579.245228][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x1f/0x90 [ 579.245257][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 08 45 72 11 65 8b 0d 29 45 72 11 81 e1 00 01 ff 00 74 11 <81> f9 00 01 00 00 75 5b 83 ba ec 16 00 00 00 74 52 8b 8a c8 16 00 [ 579.245273][ C0] RSP: 0018:ffffc90000007270 EFLAGS: 00000206 [ 579.245288][ C0] RAX: ffffffff897ab23b RBX: ffff888159ccc000 RCX: 0000000000000100 [ 579.245301][ C0] RDX: ffff88801d390000 RSI: 0000000000000001 RDI: 0000000000000000 [ 579.245313][ C0] RBP: 0000000000001303 R08: ffff88801d390000 R09: 0000000000000004 [ 579.245325][ C0] R10: 0000000000000003 R11: ffffffff8a7890c0 R12: dffffc0000000000 [ 579.245338][ C0] R13: ffffffff8a7890c0 R14: ffff888058fc4000 R15: ffff888058fc40b0 [ 579.245352][ C0] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 579.245366][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.245378][ C0] CR2: 0000555563ced4e8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 579.245395][ C0] Call Trace: [ 579.245401][ C0] [ 579.245408][ C0] is_skb_forwardable+0x4b/0x200 [ 579.245493][ C0] br_dev_queue_push_xmit+0x50/0x4b0 [ 579.245539][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 579.245557][ C0] NF_HOOK+0x360/0x3f0 [ 579.245575][ C0] ? NF_HOOK+0xa2/0x3f0 [ 579.245590][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 579.245607][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 579.245632][ C0] br_forward_finish+0xd3/0x130 [ 579.245647][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 579.245665][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 579.245682][ C0] NF_HOOK+0x360/0x3f0 [ 579.245700][ C0] ? NF_HOOK+0xa2/0x3f0 [ 579.245715][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 579.245732][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 579.245751][ C0] ? __skb_clone+0x483/0x7a0 [ 579.245788][ C0] ? br_handle_vlan+0x61/0x530 [ 579.245908][ C0] __br_forward+0x397/0x540 [ 579.245923][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 579.245943][ C0] br_flood+0x6ee/0xb80 [ 579.245969][ C0] br_handle_frame_finish+0x1521/0x1c80 [ 579.245997][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 579.246018][ C0] ? net_generic+0x1e/0x240 [ 579.246056][ C0] ? net_generic+0x1e/0x240 [ 579.246073][ C0] ? net_generic+0x1e/0x240 [ 579.246089][ C0] ? br_cfm_cc_ccm_tx+0x1b0/0x470 [ 579.246107][ C0] ? br_nf_pre_routing+0xc4e/0x14c0 [ 579.246131][ C0] br_handle_frame+0x80f/0x1510 [ 579.246156][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 579.246176][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 579.246197][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 579.246232][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 579.246250][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 579.246302][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 579.246324][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 579.246347][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 579.246376][ C0] ? process_backlog+0x3eb/0x1950 [ 579.246420][ C0] ? lock_acquire+0x106/0x350 [ 579.246437][ C0] ? process_backlog+0x3eb/0x1950 [ 579.246470][ C0] ? process_backlog+0x3eb/0x1950 [ 579.246493][ C0] ? process_backlog+0x3eb/0x1950 [ 579.246516][ C0] ? process_backlog+0x3eb/0x1950 [ 579.246539][ C0] process_backlog+0x76d/0x1950 [ 579.246573][ C0] __napi_poll+0xae/0x340 [ 579.246593][ C0] ? skb_defer_free_flush+0x233/0x260 [ 579.246617][ C0] net_rx_action+0x627/0xf70 [ 579.246640][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 579.246673][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 579.246706][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 579.246736][ C0] handle_softirqs+0x22a/0x840 [ 579.246755][ C0] ? do_softirq+0x76/0xd0 [ 579.246774][ C0] ? __inet6_bind+0x30c/0xf60 [ 579.246816][ C0] do_softirq+0x76/0xd0 [ 579.246832][ C0] [ 579.246838][ C0] [ 579.246843][ C0] __local_bh_enable_ip+0xf8/0x130 [ 579.246861][ C0] __inet6_bind+0x30c/0xf60 [ 579.246887][ C0] kernel_bind+0x13e/0x1c0 [ 579.246905][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 579.246930][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 579.246956][ C0] ? rds_tcp_conn_path_connect+0x335/0x930 [ 579.247026][ C0] rds_tcp_conn_path_connect+0x53e/0x930 [ 579.247058][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 579.247084][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 579.247110][ C0] ? process_scheduled_works+0xa70/0x1860 [ 579.247129][ C0] ? process_scheduled_works+0xa70/0x1860 [ 579.247150][ C0] rds_connect_worker+0x1d8/0x290 [ 579.247169][ C0] ? process_scheduled_works+0xa70/0x1860 [ 579.247187][ C0] process_scheduled_works+0xb5d/0x1860 [ 579.247221][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 579.247242][ C0] ? assign_work+0x3d5/0x5e0 [ 579.247260][ C0] worker_thread+0xa53/0xfc0 [ 579.247292][ C0] kthread+0x389/0x470 [ 579.247313][ C0] ? __pfx_worker_thread+0x10/0x10 [ 579.247330][ C0] ? __pfx_kthread+0x10/0x10 [ 579.247352][ C0] ret_from_fork+0x514/0xb70 [ 579.247371][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 579.247388][ C0] ? __switch_to+0xc79/0x1410 [ 579.247415][ C0] ? __pfx_kthread+0x10/0x10 [ 579.247437][ C0] ret_from_fork_asm+0x1a/0x30 [ 579.247471][ C0]