last executing test programs: 6m0.510215532s ago: executing program 2 (id=2164): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="01154e00010000112233445588fbca010001160cbfbcd16470adc14fd446ccc8e55e", 0x22, 0x44011, &(0x7f0000000100)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a80)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a80)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000ac0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000ac0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b00)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b00)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b40)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b80)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000bc0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000c00)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000c00)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000c40)) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000c80)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000c80)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000cc0)=@req={0x3fc, 0x0, 0x0, 0x200}, 0x10) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r5, &(0x7f0000000d00)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) (async) write(r5, &(0x7f0000000d00)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000000)="b86b", 0x2) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000008c0)=[@timestamp, @mss={0x2, 0x5917814b}, @mss={0x2, 0x3}, @mss={0x2, 0x9}], 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000008c0)=[@timestamp, @mss={0x2, 0x5917814b}, @mss={0x2, 0x3}, @mss={0x2, 0x9}], 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x2a, &(0x7f0000000900)=ANY=[@ANYBLOB="186000000c00000000000000ffffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000dd0800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000002000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085285c6a1c000000a5000000851000000f00f2ff17110000", @ANYRES32, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000183500000300000000000000000000008520000004000000"], &(0x7f00000002c0)='GPL\x00', 0xc9e9, 0xb2, &(0x7f0000000300)=""/178, 0x41000, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x3, 0x7, 0x9}, {0x1, 0x2, 0x9, 0xc}, {0x0, 0x4, 0x7, 0x6}, {0x2, 0x5, 0x4, 0x8}, {0x2, 0x3, 0xd, 0x5341b61897eb00b0}], 0x10, 0x9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x2a, &(0x7f0000000900)=ANY=[@ANYBLOB="186000000c00000000000000ffffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000dd0800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000002000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085285c6a1c000000a5000000851000000f00f2ff17110000", @ANYRES32, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000183500000300000000000000000000008520000004000000"], &(0x7f00000002c0)='GPL\x00', 0xc9e9, 0xb2, &(0x7f0000000300)=""/178, 0x41000, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x3, 0x7, 0x9}, {0x1, 0x2, 0x9, 0xc}, {0x0, 0x4, 0x7, 0x6}, {0x2, 0x5, 0x4, 0x8}, {0x2, 0x3, 0xd, 0x5341b61897eb00b0}], 0x10, 0x9}, 0x94) 5m59.586975448s ago: executing program 2 (id=2169): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000100)=""/165, 0xa5, 0x9) 5m59.422120167s ago: executing program 2 (id=2173): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @local}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000007000000ff000000008000000003000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r7, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 5m58.954308983s ago: executing program 2 (id=2178): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="141eef1f444bce0633ba0ea7c89100000037000100fcff07000c00000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="141eef1f444bce0633ba0ea7c89100000037000100fcff07000c00000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 5m58.804811403s ago: executing program 2 (id=2180): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2eaf}, 0x94) 5m58.668270686s ago: executing program 2 (id=2183): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2, 0x5, 0x0, 0x6, 0x8}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x108) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@arena={0x21, 0x0, 0x0, 0x2d, 0x400, 0x1, 0x3, '\x00', r1, r3, 0x3, 0x1}, 0x50) 5m43.545986727s ago: executing program 32 (id=2183): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2, 0x5, 0x0, 0x6, 0x8}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x108) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@arena={0x21, 0x0, 0x0, 0x2d, 0x400, 0x1, 0x3, '\x00', r1, r3, 0x3, 0x1}, 0x50) 4.196977374s ago: executing program 4 (id=4132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x9, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @union={0x6, 0x6, 0x0, 0x5, 0x0, 0x10, [{0xb, 0x0, 0xffff5fd2}, {0x3, 0x1, 0x4}, {0xc, 0x3, 0x8}, {0x2, 0x2, 0x4}, {0x9, 0x4, 0x1000}, {0xa, 0x1, 0xf448}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0x7, 0x1}]}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @fwd={0x9}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xa}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x2}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x6}]}, {0x0, [0x61, 0x0, 0x2e, 0x71, 0x30, 0x5f, 0x30]}}, &(0x7f0000000180)=""/41, 0xe5, 0x29, 0x0, 0xc59}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.809839626s ago: executing program 0 (id=4135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xfffffffd, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40000000}]}]}, 0x5c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7001}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x4076cbba9945d516, &(0x7f00000005c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r9, 0x15809}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0xa, 0x0, 0x0, r9, 0x40, 0x10, 0x72748f52b8af0932}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x3c}}, 0x20024090) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xfffffffd, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40000000}]}]}, 0x5c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7001}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x4076cbba9945d516, &(0x7f00000005c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r9, 0x15809}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0xa, 0x0, 0x0, r9, 0x40, 0x10, 0x72748f52b8af0932}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x3c}}, 0x20024090) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 3.495030945s ago: executing program 4 (id=4137): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) accept4$llc(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x800) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080), 0x4) 3.385312188s ago: executing program 4 (id=4138): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r2 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000001700)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x802}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001740)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000001780)="190000000800aaaaaaaaaa11e002", 0xe) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/31, 0x1f}, {&(0x7f0000001240)=""/67, 0x43}, {&(0x7f00000012c0)=""/221, 0xdd}, {&(0x7f00000013c0)=""/33, 0x21}, {&(0x7f0000001400)=""/85, 0x55}, {&(0x7f0000001480)=""/251, 0xfb}], 0x7, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x10020, &(0x7f00000016c0)={0x77359400}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3.28487295s ago: executing program 5 (id=4139): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000000)=0xfdf4) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040), 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) 3.067858186s ago: executing program 5 (id=4142): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='--@}\x00', 0x20080, &(0x7f0000000080)={@align=0xf, {0x1d4, 0x400, 0x6, 0x2}}, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x2}) r1 = socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x54, 0x140f, 0x100, 0x0, 0x25dfdbfd}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x4040000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000500)={0xbbf, [0x4, 0x2], 0x4}, 0x10) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000540)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000580)='illinois', 0x8) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000700)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x0) (async) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) close(0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x44000) (async) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x44000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000040}, 0x200000c1) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000040}, 0x200000c1) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x40, r9, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x4048086) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x40, r9, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x4048086) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000380)) socket$inet6(0xa, 0x2, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000740)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ppoll(&(0x7f0000000780)=[{r11, 0x14c8}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r10, &(0x7f0000001ac0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x16f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="68000000000000002900000039000000880a010500000000fe800000000000000000000000000023fe8000000000000000000000000000bbfe8000000000000000000000000001aafe8000000000000000000000000000893c5f3283c16417aa00"/112], 0x68}}], 0x2, 0x0) 2.954585645s ago: executing program 0 (id=4143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000890}, 0x40084) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0xd, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="550a00000000000061117800000000001800000000000000000003000000000095d2470000000000"], &(0x7f0000000300)='GPL\x00'}, 0x80) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000980)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x72, r5}) (async) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r5}) (async) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r1, 0xffffffffffffffff, 0xc, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={r7, r1, 0x0, r1}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000001085200000af43030095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r11, &(0x7f0000000740)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) (async) sendmsg(r11, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', r12, 0x0, 0x0, 0x9, 0xe, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r9, &(0x7f0000000ac0)="d25be554efee5991e54a89988d8c61434a5e0dc70bd58e9296b1c288286e590ed520c7d6e9242b6c40b6f93aeb8670ae5fc41bd057acd90c34ade621d1aaccbe6f7aebe5f21934bd80da2902e1a3acc3df90f651138589674f2f0dcc3de7f6ab484ac93fbf1598b6358a2c586090291e61f08f04b6d024341d0a75840affc1649be8b394ded064956e0bd8d5", 0x8c, 0x0, 0x0, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbfb, {0x20}, [@typed={0x5, 0x163, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000301100fc010000000000000000000000000000ff02000000000000000000000000000100000e2200309078172c046f10a20b2824124752ce84df6f476aef8d2f4fa4603c3abd5bb510788b833bdd4d64c77922fcf4057d118589e08d8851add52fdd"], 0x0) 2.949203971s ago: executing program 1 (id=4144): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x10, 0x2070bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008054}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x9050}, 0x40004) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) bind(r6, &(0x7f0000000340)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000003c0)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) write(0xca, &(0x7f0000000400)="040e0c01031000ffffffdfffffffff", 0xf) write(0xca, &(0x7f0000000440)="040e0e010410000102ffffffffffffffff", 0x11) write(0xca, &(0x7f0000000480)="040e0c01032000ffffffffffffffff", 0xf) write(0xca, &(0x7f00000004c0)="040e0a01602000fb000afb000a", 0xd) write(r6, &(0x7f0000000500)="0d000000010001", 0x7) write(0xca, &(0x7f0000000540)="040e04016d0c00", 0x7) nanosleep(&(0x7f0000000580)={0x0, 0x1dcd6500}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f00000005c0)={0x0, 0x3e8}, 0x10) connect(r7, &(0x7f0000000600)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r1, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) 2.358799562s ago: executing program 4 (id=4146): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe005}, 0x20004090) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x38, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x6}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1, 0x7}, {0xffe0, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2af, 0x7, 0x1}, {{0x3}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x1000}, {0x1, 0x3, 0x2}}}]}]}]}}]}, 0x68}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) (async) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000380)=""/45, &(0x7f0000000440)=0x2d) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) (async, rerun: 32) r13 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r13, 0x65, 0x2, &(0x7f0000000000)=0x3, 0x4) bind$can_raw(r13, &(0x7f00000000c0), 0x10) (async, rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r12, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) (rerun: 64) 2.308300622s ago: executing program 0 (id=4148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @initdev, @multicast1}, &(0x7f0000000380)=0xc) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="7d6d15300dcaed66d6a45159825baa21413ee20b3fb0395de5aad392a1d52161af0b0dd48c087a5994c89c819abd89afbacdc72df4354fbe91b274ebca7f2ab58e0ccaa2320415a3867667c2a27e67cca196baf3776e8a5d82cf7fa6595c1a0e4789022962779ce09ae611be84c314e75a3d2b392ae976b01c32c9d5bc01462030583fa05a6b713e4f337710176121f749bfbf51a58b8f322a2f", 0x9a}, {&(0x7f0000000240)="a26335b1546875f3e4f8d82a0adc4a2f043f0081266c348c84c1b0c3240ce03424d1df251aada498e4bd829cc62dae2a28a1283b399161a103ea6c1df37e364d8b4b9315556d377885d8dfbb89c8c1252b0aecfc4d8c2deb46f8ca616de14f8900ae", 0x62}, {&(0x7f00000002c0)="543ed631299693763de6d1bd80a8c9b14a7acf0f9115652ef124565ecf65dc1213d6", 0x22}], 0x3, &(0x7f00000003c0)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x90}, 0x20040004) recvmmsg(r0, &(0x7f0000006040)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000540)=""/2, 0x2}], 0x2, &(0x7f0000000640)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000001640)=@generic, 0x80, &(0x7f0000003500)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/153, 0x99}, {&(0x7f0000003480)=""/22, 0x16}, {&(0x7f00000034c0)=""/55, 0x37}], 0x4, &(0x7f0000003540)=""/152, 0x98}, 0x85}, {{&(0x7f0000003600)=@alg, 0x80, &(0x7f0000003980)=[{&(0x7f0000003680)=""/222, 0xde}, {&(0x7f0000003780)=""/130, 0x82}, {&(0x7f0000003840)=""/162, 0xa2}, {&(0x7f0000003900)=""/84, 0x54}], 0x4, &(0x7f00000039c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f00000049c0)=""/7, 0x7}, {&(0x7f0000004a00)=""/230, 0xe6}, {&(0x7f0000004b00)=""/73, 0x49}, {&(0x7f0000004b80)=""/40, 0x28}, {&(0x7f0000004bc0)=""/154, 0x9a}, {&(0x7f0000004c80)=""/189, 0xbd}, {&(0x7f0000004d40)=""/115, 0x73}, {&(0x7f0000004dc0)=""/20, 0x14}], 0x8}, 0x100}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004e80)=""/6, 0x6}, {&(0x7f0000004ec0)=""/10, 0xa}, {&(0x7f0000004f00)=""/251, 0xfb}], 0x3, &(0x7f0000005040)=""/4096, 0x1000}, 0x32c5}], 0x5, 0x40010021, &(0x7f0000002380)={0x0, 0x3938700}) 2.172401657s ago: executing program 1 (id=4149): r0 = epoll_create1(0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0xa0028000}) 2.119468169s ago: executing program 5 (id=4150): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x13, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r6, 0x8995, &(0x7f0000000640)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r5, 0x1}, 0x14}}, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000140)={0x2c, 0x1, r4, 0x7, r1}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1, 0x0}, 0x8) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r8, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc06}}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x0, 0x2, 0xd, 0x7}], 0x10, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0xe, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x800}, 0x10, r8}, 0x94) 1.936346228s ago: executing program 1 (id=4151): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x138) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) 1.930316653s ago: executing program 3 (id=4152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000a00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0x366, 0x10, &(0x7f0000000b40), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000000c0)="1a00000002000000", 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)={@map=r2, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c40)={@map=r2, r1, 0x26}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.847429374s ago: executing program 0 (id=4153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0x13d8, [0x200000000cc0, 0x0, 0x0, 0x200000000cf0, 0x200000000d20], 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"]}, 0x1450) 1.748076692s ago: executing program 5 (id=4154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000200)={0x5, {{0x2, 0xfffe, @multicast1}}}, 0x88) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0x4c0, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000340), 0x4) sendmsg$kcm(r5, &(0x7f0000000380)={&(0x7f00000003c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e5700001028", 0x41}, {&(0x7f0000000500)="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", 0xce6}], 0x2}, 0x34009805) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x5, 0x5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r7 = accept4$inet6(r6, 0x0, 0x0, 0x800) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004400010029bd7000040000000200000004004880200001801c0075800400808008001700", @ANYRES64=r6, @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x20040891}, 0x4008094) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r1, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800000000001}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000010) 1.635095021s ago: executing program 1 (id=4155): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x1, {0x1}, 0xff}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000580)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000300)="8e4441797ac55e8e659e54139b580494d1237bfd34aa95180c202f6bdd39aed4494c88b2c4ef285e544943f2fcc289eefe716309a0da8e3a2271e6220bdbf4b0d6a4123af4cfad26deae95afe61a09b5f35d9034574e0a0cb400a2896b0cf27b6de617f2a8ae275fe2d1aa8b52c474e12b02efc6e4778eff9d969932d227e869da1e6fecfbc04f94c7bbe4846dace51c648eb55a3d47e8ed75494a0193740419e8335ecc2d07fc582c66f3ca669c52cfd266e3c90295f64cb1280478858e0973c0fe00f014b07749945fa8f9b457f82e4a785d465a834e35af7892ce45f752fd1c4d2b1ca362", 0xe6}, {&(0x7f0000000400)="a7ecedc7bf230e3aa018", 0xa}], 0x2}}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7}, 0x94) 1.498801492s ago: executing program 3 (id=4156): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00004001", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25240000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) write$cgroup_int(r2, &(0x7f0000000300), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0xa) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000004000000010080020900010073797a30000000002c000000030a01040000000000000000010000010900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c00058006000100ee5700000c000480060001008a9500000900010073797a30"], 0x118}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x48004) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbf9, 0x40000}, 0xc) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x50, 0xffffffffffffffff, 0x0) (async) write(r3, &(0x7f00000005c0)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 1.267014148s ago: executing program 5 (id=4157): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x15}]}}}]}, 0x44}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000080), 0x4) (async) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r2, 0xff09, 0x110c2300fe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000000280)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f00000002c0)=0xc) (async) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r3, 0x84, 0x84, &(0x7f0000000300)={0x1, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x4e22}, &(0x7f00000003c0)=0x90) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r7 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000540)={r8, 0xb796, 0x7}, 0x8) (async, rerun: 32) r9 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000680)={0x8607}, 0x10) (async) sendmsg$nl_generic(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, 0x16, 0xa01, 0x80000000, 0x25dfdbfe, {0x2}, [@typed={0x4, 0xec}, @generic='!']}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000580)={r5, 0xf, 0x1ff, 0x688, 0x402, 0xed, 0x4, 0x820, {r8, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x9, 0x7, 0x6, 0x2}}, &(0x7f0000000640)=0xb0) (async) getsockname$packet(r2, &(0x7f0000000200), &(0x7f0000000240)=0x14) 1.212899246s ago: executing program 0 (id=4158): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) 850.779419ms ago: executing program 3 (id=4159): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 682.900711ms ago: executing program 1 (id=4160): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000800)={0x0, 0xfff, 0x1, [0x1, 0x80000001, 0x7, 0x3, 0xbd00], [0x5, 0x9, 0x8e54, 0x3, 0x2, 0x4, 0xfffffffffffffffe, 0x100000000, 0x7, 0x6, 0x3, 0x1, 0x101, 0xa84c, 0x800, 0x6, 0x8, 0x100000001, 0x7, 0x7f, 0x10000, 0xced8, 0x4, 0x3, 0x2, 0xd, 0xb, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0xffffffff, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x68f, 0xfffffffffffffffe, 0x4, 0x7, 0xffff, 0x59bd, 0x6, 0x8, 0x7, 0x4, 0x4, 0x4, 0xe, 0x9, 0x6, 0xa0, 0x8000, 0x0, 0x5e, 0x6, 0x1ae, 0x28, 0x9, 0x1, 0x8a13, 0x3, 0xfffffffffffffff8, 0x5, 0x8, 0x1, 0x7, 0x1, 0x5, 0x0, 0x9, 0x5, 0x66a, 0x6, 0x2, 0x3, 0xffffffffc8a42a1e, 0x9, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x0, 0x6272, 0x4, 0x6, 0x6, 0x6, 0x8000, 0xb, 0x5, 0x6, 0x0, 0x80000001, 0x6, 0x100000000, 0xffffffff, 0x7, 0xd, 0x4, 0xfff, 0x3, 0xfd1, 0x9, 0x4, 0x7, 0x100, 0x0, 0x3, 0x10001, 0x40, 0x4, 0x39, 0x7fffffffffffffff, 0x100, 0xfffffffffffffffc, 0x3, 0xa610, 0x5, 0x9, 0x2, 0x101]}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000007c0)="00214500001400000000400600000a0000010a000002005000500000ffff00000001683003e80000e40201010101", 0x2e}], 0x1, 0x3, 0x0) 626.711551ms ago: executing program 3 (id=4161): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x14}, 0xffffffff, 0x2, 0x3, 0x1, 0xf, 0x8001}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000c0000000c000000020000000000000040a5b4e5ebe1d9000000100000ca42"], 0x0, 0x26}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioctl(r3, 0x8b32, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030300000e00000000001100000708000300", @ANYRES32=r4, @ANYBLOB="0a0006"], 0x28}}, 0x14014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x90) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000640)=""/78, &(0x7f00000006c0)=0x4e) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xca, r0, 0x18}, 0x38) syz_emit_ethernet(0xda, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 543.354714ms ago: executing program 4 (id=4162): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000900000000000004000000000000018000"/28], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xb, 0x800, 0x1d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x80, 0xffff, 0x9}}) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="43aa1d918d69542a3a20dafc853379b0a063fdfa022012fda1d39715bd91425984070e872eb608cada7f222525dba37a021b10c1cb51b339ffdb914dc4b861e9fc0c5d657a7e58aab833423e69b064b4a2fbc1691c94b4704a99df8497002878ba4c1af24f719780cacfc13d5c9942aa14a3e2d89d0c96559107cc72c2fc0c7c3b0f13201ed2924929099719b5a1ca5da094ed09acd1ae79c58f9f605500b5bd614393ebfca839d6bd444a", 0xab}, {&(0x7f0000000100)="f0935e87791e040f2a682349440c52b4eef204860b657204d1b50cbc39cb1216faa63f6e481f872b7c8e8f7e9e79138bc024dca942428b0f83ab1749e490c93cfa2cbeb8bc3ce2363cee5acc805e92664ef560b8e048eb97a2248f36c3eea567d81b2fb4c9bda074aeea2ae673e0f49abc2ac181d035671f951f4c824ec01a6d37280fd6e2ca295326382797ef6b3df850371f05dd94668a64c9ba67d70ae57a9aca1fe94d5e9911b8e0c2610297e30e275241d016", 0xb5}, {&(0x7f00000001c0)="b5d03ecb14c7c569c8cdca9c10f1006202d1ec8fb25ff16b3d5cd5b77052385fd0699096129a92d97a20ed86a341299cec542eed971b542bbb34a077a018e9a0ce58df9be0487ae88860ef335602a1be5dfe7be96d3416e2bb789eee9049a05b3f76d7ca52db9a190212672d22b6de73b2dda1c67bd94eeb50ceee7fbc8235de810f7509466ac1d88051bbc82f550515d2b5aeaeb6476f8f72627e559bc08c5c2470445f3d4817", 0xa7}], 0x3, &(0x7f0000000600)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0xa, 0x1, [{0x2, 0x4, "4dca"}]}, @rr={0x7, 0x1f, 0x4b, [@rand_addr=0x64010101, @local, @private=0xa010100, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x2, [{@empty, 0x3ff}, {@private=0xa010101, 0xc7}, {@broadcast, 0x1000}]}, @timestamp_addr={0x44, 0x3c, 0xfc, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcf}, {@private=0xa010102, 0xd0}, {@rand_addr=0x64010100, 0x1e91}, {@broadcast}, {@loopback, 0x7}, {@broadcast, 0x40}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2c}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x148}, 0x20000051) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) 466.941295ms ago: executing program 0 (id=4163): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='&\x00', 0x80, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x4]}, {0xf, 0x5, 0x5, 0x1}}, 0xfffffffe, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0x69, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x1, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x0, 0xd, 0x10001, 0x3}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r1, 0xfff}, &(0x7f00000002c0)=0x8) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async, rerun: 64) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000300), 0x4) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x29}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40064}, 0x8050) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000500)) poll(&(0x7f0000000540)=[{r0, 0x24}, {r2, 0x10}, {r2, 0x450}, {r2}, {r0, 0xc049}, {r0, 0x10a0}], 0x6, 0x8193) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x2, 0x3}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000600)={r5, 0x5}, 0x8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) (async) r8 = socket(0x1d, 0x8100d, 0x70) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000800)={r2, &(0x7f0000000700)='{}]*}#\x00', 0x109000, &(0x7f0000000740)={@align=0x9bb0, {0x8, 0x5, 0x28, 0x3}}, 0x4, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0xb4}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, r7, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '@'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9222}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040801) ioctl$XFS_IOC_SCRUBV_METADATA(r8, 0xc0285840, &(0x7f0000000a80)={0x8001, 0x2, 0x3a, 0x0, 0x6, 0x9, 0x0, &(0x7f00000009c0)=[{0xffffffff, 0x101, 0x7fff}, {0x0, 0x101, 0x100}, {0x14, 0x0, 0xd9}, {0x17, 0x101, 0x6}, {0x17, 0xfe, 0x7fff}, {0xffffffff, 0x1ff, 0x4}, {0x4, 0x0, 0x2}, {0x15, 0x1ff, 0x3}, {0x4, 0x1ff, 0x80000000}]}) (async) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x4002841) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) (async, rerun: 32) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c80), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x16c, r10, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x686b434a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eaf54d0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30dc7bce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d304be6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x444db09f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fe98d84}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5aa1cc43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7aeac471}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b3306cf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x266cdf87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48e3b7ae}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76bc3f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfb84a2f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e56947c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60feeae7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66ca2b90}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32d16d33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bc70cce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x150f609e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10a2e731}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fa8fb18}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x100f6961}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15971160}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dbc86e5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9ba4651}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x81) (async) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000f80)=@get={0x1, &(0x7f0000000ec0)=""/173, 0x6}) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000000fc0)={'bridge_slave_1\x00'}) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000001040)={@local, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd, 0x5, 0x8000, 0x400, 0x7, 0x20300, r12}) 392.610364ms ago: executing program 3 (id=4164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) (rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@delpolicy={0xe8, 0x14, 0x300, 0x70bd28, 0x25dfdbff, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4e21, 0x3, 0x4e20, 0x0, 0xa, 0x0, 0x60, 0x2c, 0x0, r1}, 0x6e6bbb, 0x2}, [@policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in6=@empty, @in6=@mcast2, 0x0, 0x2}}, @etimer_thresh={0x8, 0xc, 0xc}, @tfcpad={0x8, 0x16, 0xc057}, @replay_thresh={0x8}, @tfcpad={0x8, 0x16, 0x1}, @lifetime_val={0x24, 0x9, {0xff, 0xba0, 0x5}}, @coaddr={0x14, 0xe, @in=@local}, @iptfs_max_qsize={0x8, 0x28, 0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008801}, 0x24008090) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 206.695255ms ago: executing program 3 (id=4165): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e07856e51d2cbd14732c0aea635630d7eb2e8752b52777f07355d7c609a4961301e7d933db6e668ac4c10a87151640f520ff2", @ANYRES16=r0, @ANYBLOB="000226bd7000fedbdf25090000000c009900000200002500000014000a0097c8911cee8dbbfdd700b3228b61e78c08003700000000000400280004000b0008005080040005000800090001ac0f000b000a004bb666db48714a000a000600080211000000000011000700f0eb239917d616281086b2ad95000000"], 0x80}, 0x1, 0x0, 0x0, 0x8008004}, 0x4010080) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/248, 0xf8}], 0x1}, 0x11f42) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000540)=0x207, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa006, 0x8}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'ip6tnl0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000680)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f00000006c0)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r2, &(0x7f0000000680)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f00000006c0)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sendmsg$nl_generic(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x2c, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@generic="cbd30d11251c9a26"]}, @nested={0x4, 0x7}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004b80)={0x2c, 0x41, 0x200, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@typed={0x8, 0xa4, 0x0, 0x0, @pid=r6}, @typed={0xc, 0x15a, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004b80)={0x2c, 0x41, 0x200, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@typed={0x8, 0xa4, 0x0, 0x0, @pid=r6}, @typed={0xc, 0x15a, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000840)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000840)=0xc) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="640bca38dd2f20099662e838b879fcea373bf742514caebf5c6f95bcde1da993f298dead6d6a2e9acb59441934e9f5d2792c8fca0f1e8f379936e5e2e371", @ANYRES16=r7, @ANYBLOB="00042cbd7000fedbdf2500000000080008000200000014000b00fe8000000000000000000000000000aa"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 177.031059ms ago: executing program 1 (id=4166): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xfffff001, @mcast1, 0x7}, 0x1c) (async) connect$inet6(r1, &(0x7f0000001080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001200)={'syztnl2\x00', &(0x7f0000001180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x9, 0x10000, 0x40, @remote, @local, 0x8, 0x7, 0xed6, 0x4}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000e00)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c, &(0x7f0000000f40), &(0x7f0000000f80)}, 0x40) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x810) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000f40)={0x200, 0x8, 0x0, 0x1, 0x0, [0x3e, 0xff, 0x3cd, 0xf4e0]}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r7) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r9, @ANYBLOB="2c002f800c0002000201aaaaa2aaaaaa1400038008000100010000000500020001000000060001"], 0x48}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000002c0)={0x0, 0x62, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r5, 0xf21, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x0, 0x3, r9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40085}, 0x40000000) (async) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001000)='syz1\x00', 0x200002, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), r11) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001040)={r3, r10, 0xe, 0x0, @void}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x3, 0x0, 0x0) (async) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x8b5, 0xfff, 0x5, 0xd, 0xd, 0x7, 0x5}}, @TCA_RED_PARMS={0x14, 0x1, {0x7fffffff, 0xf, 0x6, 0x14, 0x20, 0x3, 0x3}}]}}]}, 0x58}}, 0x4c840) (async) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 174.721031ms ago: executing program 4 (id=4167): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x0, 0x4}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) 0s ago: executing program 5 (id=4168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0x13d8, [0x200000000cc0, 0x0, 0x0, 0x200000000cf0, 0x200000000d20], 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000100000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000d000000001c0000000000000000000000000000000073797a6b616c6c657231000000000000697036746e6c300000000000000000006e657470636930000000000000000000aaaaaaaaaaaaffff00ffffff8e26d153fdea0000ffff00000000b01100003812000070120000616d6f6e67000000000000000000000000000000000000000000000000000000b8080000000000000c0000005c04000002000000ffffffff01000000b60a00000800000001040000030000000600000004000000fdffffff04000000070000000600000003000000f8ffffff0004000040000000000000000a000000040000000900000004000000feffffff08000000ffffff7f6f000000040000000800000004000000030000000100000001000000a2f6ffff0100000006000000040000000a000000040000000800000002000000020000000800000007000000e21f00001a43d568000000000200000005000000ff030000d4fffffffbffffff05000000060000000300000002000000439800000a02000000000000030000000900000005000000b1000000060000000600000003000000010000007f00000000000000e8340000070000000900000005000000000400000000000102000000020000000100000065930000030000000200000004000000040000007e0000000100000000001000dd910000cb00000002000000050000000600000000010000070000000500000009000000f8ffffff0500000001000000070000001a020000ffffffff000000000900000009000000060000000500000000100000bb21000002000000000400000400fff689fc000000000100030000000800000005000000070000000400000000000000080000000100000000000000d6810000020000000100000051570000100c000092090000ce0900000300000005000000bbe30000040000000000000007000000ff070000cf000000010000000300000010000000040000005800000005000000110700000200000002000000010000004e0f000002000000fdffffff0800000005000000060000000000800004000000000000000700000000d8000004000000ff0f00000a000000010000000700000007000000ffffff7f070000000000008001000100060000000300000006000000080000000300000006000000320a00000900000006000000ff030000f209000000020000070000000100008001000000030000000f00000008000000ff01000001000000080000007c00000025000000050000000600000002000000060000000300000005000000000000000600000007000000ffffffff8900000002000000060000000c000000008000000600000000000000ff0100000500000007000000ff7f0000000000f803000000030000000600000053ea0000070000000000000009000000f7ffffff7f000000000000000f00000081000000ff7f0000ff01000078e4b94d00040000080000000100000007000000010000000400000009000000000000003529000004000000040000001e000000ffff0000e40d0000080000000e0000000f0000000000000001800000ffffff7f0300000003000000670e000001000000dd000000050000009db100004000000008000000ff0f00007aca0000060000000900000002000000ac14141003000000030000000a0101010f00000004000000ac1414aa09000000d9000000ac1414aa050000000300000064010101040000000000000064010100770000000000000000040000080000000600000001000000ff0000000600000000800000d900000007000000018000000000000000000000000000001a000000050000009c9bfb590600000003000000ff0700000c000000090000005d8f00000700000002000000240000000101000008000000ffffffff01000000ff030000080000000000d8cf010100000100ffff0100000002000000000000000100000006000000020000000100000000000000050000009b00000001000080fcffffff070000000a0000000100000021080000080000000700000006000000020000000001000045000000cd0c0000040000002c010000fdfffffff7000000ff0000000900000009000000090000002635000001000000030000007200000008000000060000000700000009000000030000000100000009000000ff00000006000000030000008100000022fcffff09000000f7ffffff00800000010001000000000007000000010000004cd9000001000000090000000900000015030000d70100000700000001800000400000000000000004000000000000f80000000003000000ffffffff710d0000018000000200000004000000c3ee0000080000000d000000010000000000010002000000b20d0000ff03000023000000050000008100000004000000ff03000004000000040000000100000000000000b68500007f000000feffffff0700000003000000ff7f00000080dd4f060000000000000007000000f8ffffff01000000090000000700000004000000090000000300000008000000030000004000000034000000ff0700000400000011274b29ff030000ff0700000100000000000100810000000800000003000000ff030000cb050000a800000001000000060000000300000005000000000000800900000002000000050000000004000008000000090000000800000040020000fbffffff09000000ff030000040000000e00000009000000fffeffff20940000ffffffff01000000fffbffff0008000001000000ff01000001010000000000000100000004000000000000000000000004000000f0ea000006000000ff0f0000010000000f000000030000000100000006000000d15e00000080000005000000ffff000004000000030000000180000001f0ffff740000000002000001000100020000000b00000007000000ff0f000009000000c40900000600000048df0000050000000600000009600000ffff0000030000004500000003000000040000007f000000030000000300000000000000f7ffffff00000000090000000c0000000b000000030000000700000001ffffff81000000050000004c07000000000100d70b0000070000000700000023000000fe00000005000000020100007d03000081000000c61e0000090000000c0000000700000004000000810000006401010001000000080000000a0101010600000009000000ac1e000102000000080000000000000009000000ff070000ffffffffffffffff040000000a010101090000000100000064010101616d6f6e67000000000000000000000000000000000000000000000000000000380800000000000000000000140400000200000007000000070000000600000004000000001c00000010000000010000060000000f00000000000000064c000005000000010100000400000007000000090000000200000007000000010000000080000001000000060000006d00000000000000090000000600000001800000e1800000010000800000010006000000020000000400000007000000f8ce0000040000000800000000000000020000000900000004000000ff0f0000080000000300000008000000020000000400000008000000040000000010000038000000020000000600000027000000ff0100007f000000020000009206000001000000040000000b0000000b00000002000000030000000bf0ffff00000000030000000600000009000000030000000400000008000000ff010000000001000400000001000000fcffffff6a0300000300000080020000290f0000520000000c0000000500000010000000ff7fffff02000000000007000000008005000000020000000400000003000000070000000800000000000080ff0a0000080000007e0100000ee79761ff07000005000000ffffffff05000000080000007f000000060000009507213b0600000003000000f6ffffff0800000042f2000009000000fcff0100ffffff7f00000080050000007f000000010000000a0000000400000001000080f6ffffffcd7b0000ff030000070000000400000010000000f5440000fbffffff7a7f0000040000007001000000000000070d00007308000000000060000000000900000000000080400000000208000001000000fbffffff05000000090000000200000000000000d6d0000063000000000000000400000000000080b44b0000040000007f00000007000000ff0000000000010001010000aa0000000100000002000000080000000000000000002000090000000800000000000000ff0f0000060000000b000000010000000100010003000000090000000000080063000000010000000100000002000000080000007f0c000000020000faffffff0900000009000000000000000900000006000000001000000200000001010000040000000900000008000000020000000000000008000000a571000000000000090000000800000004000000010000000800000006000000080000000100010004000000f7ffffff0080ffff400000000900000000000100020000000300000080000000b40300000700000081000000080000000300000004000000070000000000000008000000040000000800000009000000030000000500000081000000000000000000000005000000ab0a000005000000feffffff010000000100000010000000ffff00001124000005000000020000000600000000000000f8ffffff020000006703000000000012100000000d000000b0000000f8ffffff00000000ffffffff4000000007000000000200000900000040000000050000000700000001000000d40d000007000000018000002000000080000000020000000008000000000000ff010000040000000300000001000000cf0d0000090000000700000006000000d00300001000000007000000060000000700000002000000fcffffff09000000ff7f000009000000000000000800000004000000000000000000000009000000b70000002e0000000900000004000000faffffff000000000f000000ffffffff03000000da00000000000000f0ffffff080000000200000006000000040000000100000005000000020000003f0000000001000001000100f96c000004000000faffffff03000000060000000000000007000000620100000600000043ffffff000400000800000002000000010000000600000000000000420800000500000005000000ffffff7f070000000600000009000000f8ffffff010000000200000009000000ff0f000001000000010000000100000001000000070000001000000005000000860e0000060000000900000003000000000000800008000001000000ffff000008000000faffffff08000000ff0000007f000000060000000180000007000000020000000008000009000000ff07000007000000050000002200000005000000ad0b000001000000ffff000009000000d4000000070000000200000007000000020000000000000000000000ff0f00000900000001feffff0500000002000000ffffffff00100000080000000800000007000000e6560000060000000000000007000000cd0f0000080000000800000000f0ffff0200000007000000000000007e070000000200000600000000010000edee00008100000008000000070000004d060000030000000200000001000000090000000100008010000000ff000000420800000a000000010000000600000002000000ff070000050000000200000001000000800000000200000059a100000c000000ff0f0000030000000000000006000000000000040700000009000000340600008d000000020000000200000001000000030000000300000007000000050000006c08000003000000030000000101000005000000060000000500000007000000018000000900000001000000080000007900000004000000010000000400000008000000030000007405000004000000f9ffffffc6be00000180000005000000ff00000005000000080000000300000000000000080000000700000009a50000020000000000400603000000010000000a0000000300000006000000060000000600000009000000020000000000000009000000000000800600000006000000abdb00000400000000040000ff07000009000000080000000ada000004000000f200000006000000020000000900000002000000ac14143a0600000081000000ac1414aa00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000feffffff000000006c6f670000000000000000000000000000000000000000000000000000000000280000000000000003fb18f3f2ca945e55f9195c1e4ba71cac24f0b855afeb80eb7b2090e5dd410004000000000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000090000000000000022eb677265746170300000000000000000006d6163766c616e30000000000000000067656e657665310000000000000000006d616373656330000000000000000000aaaaaaaaaa11ffffff000000bbbbbbbbbbbb00ffff00000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000ffffffff00000000"]}, 0x1450) kernel console output (not intermixed with test programs): 426] veth1_to_bridge: entered promiscuous mode [ 507.824435][T17426] bridge_slave_1: entered promiscuous mode [ 507.824501][T17426] bridge_slave_1: left allmulticast mode [ 507.833573][T17426] veth0_to_bond: entered promiscuous mode [ 507.859511][T17426] veth1_to_bond: entered promiscuous mode [ 507.872326][T17426] veth0_to_team: entered promiscuous mode [ 507.894873][T17426] veth1_to_team: entered promiscuous mode [ 507.919109][T17426] veth0_to_batadv: entered promiscuous mode [ 507.925899][T17426] xfrm0: entered promiscuous mode [ 507.944129][T17426] veth0_to_hsr: entered promiscuous mode [ 507.967244][T17426] veth1_to_hsr: entered promiscuous mode [ 507.967273][T17426] veth1_to_hsr: left allmulticast mode [ 507.986747][T17426] hsr0: entered promiscuous mode [ 508.014807][T17426] vlan0: entered promiscuous mode [ 508.036908][T17426] vlan1: entered promiscuous mode [ 508.066338][T17426] macvlan1: entered promiscuous mode [ 508.084028][T17426] ipvlan0: entered promiscuous mode [ 508.096579][T17426] ipvlan1: entered promiscuous mode [ 508.127586][T17426] macvtap0: entered promiscuous mode [ 508.136333][T17426] macsec0: entered promiscuous mode [ 508.149304][T17426] geneve0: entered promiscuous mode [ 508.153174][T17426] geneve1: entered promiscuous mode [ 508.173965][T17426] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 508.185693][T17426] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 508.197957][ T5620] Bluetooth: hci4: command tx timeout [ 508.202374][T17426] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 508.222628][T17426] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 508.225385][T17426] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 508.225660][T17426] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 508.225831][T17426] gtp0: entered promiscuous mode [ 508.225990][T17426] bond1: entered promiscuous mode [ 508.226383][T17426] ipip0: entered promiscuous mode [ 508.250782][T17426] veth2: entered promiscuous mode [ 508.251356][T17426] veth3: entered promiscuous mode [ 508.251396][T17426] veth3: left allmulticast mode [ 508.257618][T17426] bond2: entered promiscuous mode [ 508.270481][T17426] vxlan0: entered promiscuous mode [ 508.285035][T17426] bond3: entered promiscuous mode [ 508.286459][T17426] bridge0: entered promiscuous mode [ 508.290156][T17426] erspan1: entered promiscuous mode [ 508.290529][T17426] veth4: entered promiscuous mode [ 508.290964][T17426] veth5: entered promiscuous mode [ 508.293523][T17426] macsec1: entered promiscuous mode [ 508.295794][T17426] ipip1: entered promiscuous mode [ 508.295843][T17426] ipip1: left allmulticast mode [ 508.311674][T17426] bond4: entered promiscuous mode [ 508.347751][T17426] macvlan2: entered promiscuous mode [ 508.375116][T17426] syzkaller0: entered promiscuous mode [ 508.383788][T17426] bridge1: left allmulticast mode [ 508.395205][T17426] bond6: entered promiscuous mode [ 508.396048][T17426] geneve2: entered promiscuous mode [ 508.396098][T17426] geneve2: left allmulticast mode [ 508.397060][T17452] netlink: 'syz.3.2895': attribute type 1 has an invalid length. [ 508.407671][T17426] mac80211_hwsim hwsim16 wlan2: entered promiscuous mode [ 508.421411][T17426] macsec2: entered promiscuous mode [ 508.421756][T17426] bond7: entered promiscuous mode [ 508.422042][T17426] veth6: entered promiscuous mode [ 508.430810][T17426] veth7: entered promiscuous mode [ 508.436255][T17426] gtp1: entered promiscuous mode [ 508.459375][T17426] mac80211_hwsim hwsim19 wlan3: entered promiscuous mode [ 508.459562][T17426] mac80211_hwsim hwsim20 wlan4: entered promiscuous mode [ 508.459728][T17426] mac80211_hwsim hwsim22 wlan5: entered promiscuous mode [ 508.463419][T17426] bridge2: entered promiscuous mode [ 508.472630][T17426] gretap1: entered promiscuous mode [ 508.507175][T17426] batadv1: entered promiscuous mode [ 508.510212][T17426] bridge3: entered promiscuous mode [ 508.521148][T17426] virt_wifi0: entered promiscuous mode [ 508.521315][T17426] bond9: entered promiscuous mode [ 508.521332][T17426] bridge4: entered promiscuous mode [ 508.523216][T17426] gre1: entered promiscuous mode [ 508.525460][T17426] vlan3: entered promiscuous mode [ 508.525634][T17426] vlan3: left allmulticast mode [ 508.525649][T17426] bond0: left allmulticast mode [ 508.525663][T17426] bond_slave_0: left allmulticast mode [ 508.525680][T17426] bond_slave_1: left allmulticast mode [ 508.526206][T17426] bond10: entered promiscuous mode [ 508.527386][T17426] vlan4: entered promiscuous mode [ 508.527676][T17426] geneve3: entered promiscuous mode [ 508.533886][T17426] bond11: entered promiscuous mode [ 508.533939][T17426] bridge5: entered promiscuous mode [ 508.543358][T17426] bridge6: entered promiscuous mode [ 508.547204][T17426] ipip2: entered promiscuous mode [ 508.554834][T17426] bond12: left allmulticast mode [ 508.555209][T17426] veth8: entered promiscuous mode [ 508.570983][T17426] veth9: left allmulticast mode [ 508.579189][ T7221] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.579284][ T7221] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.589549][T17397] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.589628][T17397] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.589769][T17397] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.589847][T17397] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.589949][T17397] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.590019][T17397] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.368399][T17395] wg0 speed is unknown, defaulting to 1000 [ 509.689218][T17479] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2902'. [ 509.689370][T17479] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2902'. [ 510.125530][T17497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.173957][T17494] netlink: 14207 bytes leftover after parsing attributes in process `syz.5.2907'. [ 510.278289][ T5620] Bluetooth: hci4: command tx timeout [ 510.486823][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2905'. [ 510.679826][T17512] xt_HMARK: spi-set and port-set can't be combined [ 510.949366][T17502] smbdirect: ib_dev[syz1] removed [ 511.514590][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2912'. [ 511.697028][T17395] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.697553][T17395] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.706657][T17395] bridge_slave_0: entered allmulticast mode [ 511.724452][T17395] bridge_slave_0: entered promiscuous mode [ 511.765274][T17395] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.765393][T17395] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.766862][T17395] bridge_slave_1: entered allmulticast mode [ 511.793636][T17395] bridge_slave_1: entered promiscuous mode [ 511.999293][T17395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.044950][T17395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.045138][T17541] netlink: 3728 bytes leftover after parsing attributes in process `syz.5.2915'. [ 512.075306][T17544] netlink: 3784 bytes leftover after parsing attributes in process `syz.5.2915'. [ 512.120518][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'. [ 512.268437][T17558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2916'. [ 512.268963][T17557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2916'. [ 512.358140][ T5620] Bluetooth: hci4: command tx timeout [ 512.385320][T17395] team0: Port device team_slave_0 added [ 512.417203][T17395] team0: Port device team_slave_1 added [ 512.632635][T17395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.632655][T17395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.632685][T17395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.643250][T17395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.643317][T17395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.643406][T17395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.077523][T17395] hsr_slave_0: entered promiscuous mode [ 513.100160][T17395] hsr_slave_1: entered promiscuous mode [ 513.106181][T17395] debugfs: 'hsr0' already exists in 'hsr' [ 513.106205][T17395] Cannot create hsr debugfs directory [ 513.805067][T17604] IPVS: Error connecting to the multicast addr [ 513.808308][ T6622] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.808365][ T6622] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.808410][ T6622] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.808454][ T6622] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.438308][ T5620] Bluetooth: hci4: command tx timeout [ 515.401321][T17653] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 515.461126][T17395] .`: (slave netdevsim1): Releasing backup interface [ 515.648785][T17659] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 515.655317][T17659] sctp: [Deprecated]: syz.4.2938 (pid 17659) Use of int in maxseg socket option. [ 515.655317][T17659] Use struct sctp_assoc_value instead [ 515.836489][T17663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.988561][T17671] netlink: 'syz.3.2940': attribute type 1 has an invalid length. [ 515.988588][T17671] netlink: 'syz.3.2940': attribute type 1 has an invalid length. [ 516.230244][T17674] netlink: 'syz.5.2942': attribute type 1 has an invalid length. [ 516.288722][T17677] xt_hashlimit: size too large, truncated to 1048576 [ 516.423205][T17678] __nla_validate_parse: 9 callbacks suppressed [ 516.423229][T17678] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.2941'. [ 516.423432][T17678] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 516.551013][T17678] 0ªX¹¦Dö»: entered allmulticast mode [ 516.569273][T17683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2944'. [ 517.022391][T17395] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.052701][T17395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.064970][T17395] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 517.164194][T17395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.179738][T17395] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 517.217271][T17395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.231873][T17395] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 517.283820][T17395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.808307][T17395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.972512][T17395] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.017746][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.018038][ T7221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.123688][T17399] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.123798][T17399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.326469][T17730] netlink: 'syz.3.2950': attribute type 2 has an invalid length. [ 518.326494][T17730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2950'. [ 518.391139][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2954'. [ 518.392746][T17725] syzkaller0: entered promiscuous mode [ 518.392771][T17725] syzkaller0: entered allmulticast mode [ 518.501112][T17728] syzkaller1: entered promiscuous mode [ 518.501143][T17728] syzkaller1: entered allmulticast mode [ 518.641274][T17723] syzkaller1: entered allmulticast mode [ 519.261124][T17754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.369311][T17754] geneve4: entered promiscuous mode [ 519.369496][T17754] tun0: entered promiscuous mode [ 519.720687][T17763] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2958'. [ 519.723975][T17763] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 520.205663][T17395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.495022][T17779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2960'. [ 520.495176][T17779] hsr_slave_0: left promiscuous mode [ 520.515252][T17779] hsr_slave_1: left promiscuous mode [ 520.597545][T17395] veth0_vlan: entered promiscuous mode [ 520.720803][T17395] veth1_vlan: entered promiscuous mode [ 520.814953][T17395] veth0_macvtap: entered promiscuous mode [ 520.837492][T17395] veth1_macvtap: entered promiscuous mode [ 520.873358][T17395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.905856][T17395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.068492][ T7219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.068899][ T7219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.068945][ T7219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.068987][ T7219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.303494][T17732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.306953][T17740] netlink: 'syz.0.2954': attribute type 1 has an invalid length. [ 521.306979][T17740] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2954'. [ 521.614529][ T6622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.614556][ T6622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.863812][ T7221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.863839][ T7221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.015442][T17793] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2964'. [ 522.265827][T17805] netlink: 'syz.4.2968': attribute type 1 has an invalid length. [ 523.087361][T17833] syzkaller0: entered promiscuous mode [ 523.087386][T17833] syzkaller0: entered allmulticast mode [ 523.193260][T17836] ip_tables: iptables: counters copy to user failed while replacing table [ 523.221398][T17837] TC_ACT_REPEAT abuse ? [ 523.695543][T17846] bond4 (unregistering): Released all slaves [ 523.875781][T17839] wg0 speed is unknown, defaulting to 1000 [ 524.057556][T17844] syzkaller1: entered promiscuous mode [ 524.057582][T17844] syzkaller1: entered allmulticast mode [ 524.482917][T17846] bond4 (unregistering): Released all slaves [ 524.947571][T17923] netlink: 'syz.3.2981': attribute type 1 has an invalid length. [ 525.112558][T17927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2981'. [ 525.461270][T17933] netlink: 'syz.4.2983': attribute type 10 has an invalid length. [ 525.561647][T17923] bond1: entered promiscuous mode [ 525.563441][T17945] netlink: 'syz.4.2983': attribute type 1 has an invalid length. [ 525.580530][T17923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.613706][T17927] bond1: entered allmulticast mode [ 525.683789][T17933] dummy0: left allmulticast mode [ 525.683820][T17933] dummy0: left promiscuous mode [ 525.684176][T17933] bridge0: port 1(dummy0) entered disabled state [ 525.742249][T17947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.783730][T17933] dummy0: entered promiscuous mode [ 525.785036][T17933] team0: Port device dummy0 added [ 526.900818][T17977] netlink: 'syz.3.2991': attribute type 4 has an invalid length. [ 527.405290][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2994'. [ 527.862924][T18015] ebt_among: dst integrity fail: 200 [ 528.392578][T18037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3008'. [ 528.476559][T18038] ip_tables: iptables: counters copy to user failed while replacing table [ 528.852624][T18041] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 528.856150][T18041] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 528.856585][T18041] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 528.898001][T18041] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 528.898445][T18041] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 528.898859][T18041] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 528.908380][T18041] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 528.909037][T18041] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 528.969554][T18041] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 529.411657][T18046] netlink: 'syz.4.3012': attribute type 1 has an invalid length. [ 529.412421][T18046] sctp: [Deprecated]: syz.4.3012 (pid 18046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.412421][T18046] Use struct sctp_sack_info instead [ 529.586926][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3011'. [ 529.587427][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3011'. [ 529.587730][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3011'. [ 529.650400][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3011'. [ 529.651420][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3011'. [ 529.652330][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3011'. [ 529.653348][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3011'. [ 529.654555][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3011'. [ 529.756772][T18066] ebt_among: dst integrity fail: 200 [ 530.084858][T18077] Bluetooth: hci0: unsupported parameter 5135 [ 530.084885][T18077] Bluetooth: hci0: unsupported parameter 8192 [ 530.084902][T18077] Bluetooth: hci0: unsupported parameter 5135 [ 530.084917][T18077] Bluetooth: hci0: unsupported parameter 8192 [ 530.526174][T18102] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 530.660672][T18110] lo: Caught tx_queue_len zero misconfig [ 532.433880][T18170] __nla_validate_parse: 61 callbacks suppressed [ 532.433902][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3039'. [ 533.318954][T18131] Bluetooth: hci4: command 0x0405 tx timeout [ 533.443421][T18190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3042'. [ 533.470272][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3042'. [ 533.513805][T18195] ebt_among: dst integrity fail: 200 [ 533.615573][T18202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3047'. [ 534.004800][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3048'. [ 534.206252][T18131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 534.233988][T18131] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 534.236592][T18131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 534.260017][T18131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 534.276089][T18131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 534.571906][T18219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3051'. [ 534.736080][T18219] gre1: entered promiscuous mode [ 534.736108][T18219] gre1: entered allmulticast mode [ 535.409237][T18248] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3057'. [ 535.773961][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3059'. [ 535.880944][T18254] netlink: 'syz.5.3059': attribute type 10 has an invalid length. [ 535.955943][T18257] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20004 [ 535.984520][T18254] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 536.008617][T18254] team0: Port device wlan0 added [ 536.008707][T18212] wg0 speed is unknown, defaulting to 1000 [ 536.141023][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3059'. [ 536.170881][T18254] netlink: 'syz.5.3059': attribute type 10 has an invalid length. [ 536.359881][T18131] Bluetooth: hci1: command tx timeout [ 536.842063][T18287] netlink: 'syz.1.3064': attribute type 21 has an invalid length. [ 536.902618][T18284] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3063'. [ 537.054707][T18295] Bluetooth: MGMT ver 1.23 [ 537.559168][T18303] netlink: 'syz.1.3065': attribute type 10 has an invalid length. [ 537.604847][T18303] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.640226][T18303] bond0: (slave team0): Enslaving as an active interface with an up link [ 537.811548][T18212] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.815935][T18212] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.816152][T18212] bridge_slave_0: entered allmulticast mode [ 537.837622][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 537.854239][T18212] bridge_slave_0: entered promiscuous mode [ 537.914541][T18212] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.915187][T18212] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.915561][T18212] bridge_slave_1: entered allmulticast mode [ 537.945162][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 537.945706][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 537.971446][T18212] bridge_slave_1: entered promiscuous mode [ 538.188098][T18306] team0 (unregistering): Port device team_slave_0 removed [ 538.222414][T18306] team0 (unregistering): Port device team_slave_1 removed [ 538.287019][T18311] netlink: 'syz.1.3068': attribute type 83 has an invalid length. [ 538.438421][ T5620] Bluetooth: hci1: command tx timeout [ 538.580904][T18313] xt_connbytes: Forcing CT accounting to be enabled [ 538.711119][T18212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.766230][T18212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.071378][T18212] team0: Port device team_slave_0 added [ 539.101294][T18212] team0: Port device team_slave_1 added [ 539.153844][T18212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.153865][T18212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.153898][T18212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.156272][T18212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.156290][T18212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.156476][T18212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.158666][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 539.684581][T18212] hsr_slave_0: entered promiscuous mode [ 539.704375][T18212] hsr_slave_1: entered promiscuous mode [ 539.706597][T18212] debugfs: 'hsr0' already exists in 'hsr' [ 539.706621][T18212] Cannot create hsr debugfs directory [ 539.728031][T18331] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3073'. [ 540.345659][T18344] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3075'. [ 540.501151][T18348] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3075'. [ 540.524810][T18131] Bluetooth: hci1: command tx timeout [ 541.149893][T18354] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 541.615796][T18354] bond1: entered promiscuous mode [ 541.644780][T18354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.091369][T18371] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 542.598531][T18131] Bluetooth: hci1: command tx timeout [ 543.763222][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'. [ 544.335163][T18423] netlink: 'syz.1.3087': attribute type 1 has an invalid length. [ 544.520558][T18423] bond2: option mode: invalid value (7) [ 544.546067][T18423] bond2 (unregistering): Released all slaves [ 544.723580][T18431] tipc: Enabling of bearer rejected, media not registered [ 545.043110][T18212] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 545.072363][T18212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.086950][T18212] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 545.119243][T18212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.127490][T18212] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 545.207351][T18212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.216100][T18212] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 545.795431][T18212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.882595][T18469] syz_tun: entered allmulticast mode [ 545.962235][T18474] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 546.475658][T18487] gtp1: entered promiscuous mode [ 546.475686][T18487] gtp1: entered allmulticast mode [ 546.503872][T18463] syz_tun: left allmulticast mode [ 546.972003][T18500] gre1: entered promiscuous mode [ 546.972043][T18500] gre1: entered allmulticast mode [ 547.169003][T18212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.319686][T18212] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.446005][T18515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3105'. [ 547.446031][T18515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3105'. [ 547.494861][T18512] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3105'. [ 547.630196][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.630311][ T7221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.632949][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.633069][ T7221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.857428][T18525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.022466][T18533] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 548.022573][T18533] syzkaller1: Refused to change device type [ 548.304697][T18536] net_ratelimit: 32 callbacks suppressed [ 548.304731][T18536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.138394][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3118'. [ 549.138424][T18562] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3118'. [ 549.138481][T18562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3118'. [ 549.571515][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3122'. [ 549.682452][T18131] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 549.716511][T18580] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3123'. [ 549.841195][T18586] x_tables: duplicate underflow at hook 1 [ 549.911803][T18588] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3125'. [ 549.978203][T18583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 549.978238][T18583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 549.978318][T18583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 550.977631][T18580] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.978532][T18580] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.025305][T18580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.126459][T18580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.355851][ T39] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.355927][ T39] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.355972][ T39] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.356016][ T39] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.793647][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3128'. [ 554.819627][T18212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.916595][T18635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3133'. [ 555.430811][T18648] ebt_among: dst integrity fail: 200 [ 556.324988][T18212] veth0_vlan: entered promiscuous mode [ 556.349815][T18212] veth1_vlan: entered promiscuous mode [ 556.375674][T18678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3143'. [ 556.461477][T18679] netlink: 'syz.0.3144': attribute type 21 has an invalid length. [ 556.477675][T18679] ip_tables: iptables: counters copy to user failed while replacing table [ 556.487371][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 556.487459][T18679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3144'. [ 556.569416][T18212] veth0_macvtap: entered promiscuous mode [ 556.632359][T18212] veth1_macvtap: entered promiscuous mode [ 556.689878][T18682] ebt_among: dst integrity fail: 200 [ 556.806711][T18212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.863650][T18212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.930804][ T7203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.933635][ T6622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.933869][ T6622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.933915][ T6622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.614534][T18701] netlink: 'syz.0.3150': attribute type 3 has an invalid length. [ 557.697217][T18701] ksmbd: Unknown IPC event: 6, ignore. [ 557.709927][ T7208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.709952][ T7208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.879196][T18707] netlink: 'syz.3.3151': attribute type 1 has an invalid length. [ 558.063614][T17397] bridge0: left allmulticast mode [ 558.214639][T17397] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 559.220692][T17397] bond3 (unregistering): (slave bridge0): Releasing backup interface [ 559.337549][T17397] bond9 (unregistering): (slave bridge4): Releasing active interface [ 559.384766][T17397] bond11 (unregistering): (slave bridge5): Releasing backup interface [ 559.384792][T17397] bond11 (unregistering): (slave bridge5): the permanent HWaddr of slave - 32:90:87:0f:2f:0a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 559.384831][T17397] bond11 (unregistering): (slave bridge6): making interface the new active one [ 559.464569][T17397] bond11 (unregistering): (slave bridge6): Releasing backup interface [ 559.534357][T17397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.537134][T17397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.578871][T17397] bond0 (unregistering): Released all slaves [ 559.613412][T17397] bond1 (unregistering): (slave lo): Releasing backup interface [ 559.614046][T17397] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 559.614841][T17397] bond1 (unregistering): Released all slaves [ 559.683571][T17397] bond2 (unregistering): Released all slaves [ 559.716326][T17397] bond3 (unregistering): Released all slaves [ 559.755309][T17397] bond4 (unregistering): Released all slaves [ 559.786404][T17397] bond5 (unregistering): Released all slaves [ 559.829822][T17397] bond6 (unregistering): Released all slaves [ 559.874848][T17397] bond7 (unregistering): (slave veth7): Releasing active interface [ 559.876095][T17397] bond7 (unregistering): Released all slaves [ 559.922102][T17397] bond8 (unregistering): Released all slaves [ 559.962318][T17397] bond9 (unregistering): Released all slaves [ 560.004749][T17397] bond10 (unregistering): Released all slaves [ 560.038054][T17397] bond11 (unregistering): Released all slaves [ 560.076042][T17397] bond12 (unregistering): Released all slaves [ 560.104855][T17397] bond13 (unregistering): Released all slaves [ 560.275805][ T7203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.275831][ T7203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.829616][T18736] ebt_among: dst integrity fail: 200 [ 561.557671][T18756] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3161'. [ 561.766687][T18763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3164'. [ 562.075795][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3163'. [ 562.204028][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 562.228017][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 562.230612][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 562.231878][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 562.232547][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 562.860408][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.411089][T18799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3168'. [ 563.552372][T18792] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 563.692485][T18798] netlink: 'syz.3.3167': attribute type 2 has an invalid length. [ 563.847292][T18798] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3167'. [ 564.039714][T18799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.047710][T18799] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.093668][T18799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.291562][T18799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.312494][T18799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.349934][T18799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 564.349964][T18799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.392582][T18799] veth1_vlan: left promiscuous mode [ 564.394184][T18799] veth0_vlan: left promiscuous mode [ 564.413845][T18799] veth0_vlan: entered promiscuous mode [ 564.438652][T18131] Bluetooth: hci0: command tx timeout [ 564.442825][T18799] veth1_vlan: entered promiscuous mode [ 564.537005][T18799] veth1_macvtap: left promiscuous mode [ 564.552794][T18799] veth0_macvtap: left promiscuous mode [ 564.570077][T18799] veth0_macvtap: entered promiscuous mode [ 564.577275][T18799] veth1_macvtap: entered promiscuous mode [ 564.645324][T18799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 564.670329][T18799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.700986][T18799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 564.706902][T18799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 564.741596][T18799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.764412][T18799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.822520][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.822716][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.861659][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.861794][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.272641][T18811] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 565.450588][ T7203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.457514][ T6622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.457712][ T6622] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.468881][ T6622] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.926941][T18833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3176'. [ 565.989067][T18838] nft_compat: unsupported protocol 1 [ 566.197055][T18841] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3178'. [ 566.517940][T18131] Bluetooth: hci0: command tx timeout [ 567.157217][T18771] wg0 speed is unknown, defaulting to 1000 [ 567.748187][T18872] RDS: rds_bind could not find a transport for fe88::106, load rds_tcp or rds_rdma? [ 568.400461][T18894] openvswitch: netlink: IP tunnel dst address not specified [ 568.598955][T18131] Bluetooth: hci0: command tx timeout [ 569.872488][T17397] team0 (unregistering): Port device team_slave_1 removed [ 569.983105][T17397] team0 (unregistering): Port device team_slave_0 removed [ 570.607209][T17397] dummy0 (unregistering): left promiscuous mode [ 570.633316][T17397] team0 (unregistering): Port device dummy0 removed [ 570.678103][T18131] Bluetooth: hci0: command tx timeout [ 570.857487][T18904] ipvlan2: entered allmulticast mode [ 570.857514][T18904] virt_wifi0: entered allmulticast mode [ 571.422493][ T7207] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 571.551968][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3201'. [ 571.606762][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3201'. [ 571.607019][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3201'. [ 571.607296][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3201'. [ 571.607621][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3201'. [ 571.664452][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3201'. [ 571.682888][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3201'. [ 571.686243][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3201'. [ 571.694054][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3201'. [ 571.730334][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3201'. [ 571.907228][T18947] batman_adv: batadv0: Adding interface: syzkaller0 [ 571.910221][T18947] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.910265][T18947] batman_adv: batadv0: Interface activated: syzkaller0 [ 572.117044][T18943] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 572.770605][T18943] batman_adv: batadv0: Removing interface: syzkaller0 [ 572.985952][T17397] IPVS: stop unused estimator thread 0... [ 573.105075][T18971] ebt_among: dst integrity fail: 200 [ 573.530070][T18771] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.530648][T18771] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.531654][T18771] bridge_slave_0: entered allmulticast mode [ 573.536679][T18771] bridge_slave_0: entered promiscuous mode [ 573.580528][T18771] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.582162][T18771] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.582339][T18771] bridge_slave_1: entered allmulticast mode [ 573.585837][T18771] bridge_slave_1: entered promiscuous mode [ 573.713774][T18771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.733530][T18771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.106848][T18771] team0: Port device team_slave_0 added [ 574.133214][T18771] team0: Port device team_slave_1 added [ 574.187562][T18928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.344832][T18771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.344850][T18771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.344874][T18771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.424785][T18771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.424806][T18771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.424839][T18771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.260068][T18771] hsr_slave_0: entered promiscuous mode [ 575.264628][T18771] hsr_slave_1: entered promiscuous mode [ 575.660059][T19028] ebt_among: dst integrity fail: 200 [ 575.678274][T19019] bridge_slave_1: left allmulticast mode [ 575.678305][T19019] bridge_slave_1: left promiscuous mode [ 575.678601][T19019] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.755789][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888047d52400: rx timeout, send abort [ 575.805868][T19019] bridge_slave_0: left allmulticast mode [ 575.805900][T19019] bridge_slave_0: left promiscuous mode [ 575.806247][T19019] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.987365][T19041] __nla_validate_parse: 62 callbacks suppressed [ 576.987389][T19041] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3215'. [ 577.036582][T19041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3215'. [ 577.201690][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3215'. [ 577.201722][T19046] block nbd1: Unsupported socket: should be TCP or UNIX. [ 577.287374][T19044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3216'. [ 577.310540][T19041] Bluetooth: MGMT ver 1.23 [ 577.614875][T19059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3218'. [ 578.161646][T19059] bond2: entered allmulticast mode [ 579.090472][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.090516][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.702074][T18771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.702119][T18771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.902717][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.902764][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.285672][T18771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.285717][T18771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.432396][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.432441][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.572160][T18771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.572364][T18771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.786332][T19125] Bluetooth: MGMT ver 1.23 [ 580.973131][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.973180][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.276283][T18771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.276330][T18771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.470043][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3239'. [ 581.471088][T19143] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3239'. [ 581.471126][T19143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3239'. [ 581.471525][T19143] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3239'. [ 581.472936][T19144] batman_adv: batadv0: Adding interface: gretap2 [ 581.472959][T19144] batman_adv: batadv0: Interface activated: gretap2 [ 582.000311][T19157] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3243'. [ 582.000601][T19160] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3243'. [ 582.490751][T19170] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3244'. [ 582.499277][T19170] netlink: 'syz.1.3244': attribute type 24 has an invalid length. [ 582.561269][ T39] pim6reg: left allmulticast mode [ 582.561512][ T39] pimreg: left allmulticast mode [ 582.672874][T19171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3244'. [ 583.344168][ T39] erspan0 (unregistering): left promiscuous mode [ 583.427442][ T39] bond1 (unregistering): (slave gretap1): Releasing active interface [ 583.466523][ T39] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 583.610412][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.611132][ T39] bond_slave_0: left allmulticast mode [ 583.614829][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.615642][ T39] bond_slave_1: left allmulticast mode [ 583.617611][ T39] bond0 (unregistering): Released all slaves [ 583.693027][ T39] bond1 (unregistering): Released all slaves [ 583.731872][ T39] bond2 (unregistering): Released all slaves [ 583.762437][ T39] bond3 (unregistering): Released all slaves [ 583.799640][ T39] bond4 (unregistering): Released all slaves [ 583.824715][ T39] bond5 (unregistering): Released all slaves [ 583.864647][ T39] bond6 (unregistering): Released all slaves [ 584.136434][ T39] ovs-s: left promiscuous mode [ 584.292193][T19189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3247'. [ 584.292224][T19189] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3247'. [ 584.411423][T19194] xt_ecn: cannot match TCP bits for non-tcp packets [ 584.491072][T19197] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3249'. [ 584.533633][T19184] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.535483][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.600854][ T7704] wg0 speed is unknown, defaulting to 1000 [ 584.600921][ T7704] syz0: Port: 1 Link DOWN [ 584.861178][ T39] : left promiscuous mode [ 584.981086][T18771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 585.044639][T18771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.058458][T18771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 585.097384][T18771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.098388][ T39] tipc: Left network mode [ 585.121306][T18771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 585.142714][T19202] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3251'. [ 585.231094][T18771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.232028][T18771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 585.300620][T18771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.884215][T19226] netlink: 'syz.5.3255': attribute type 10 has an invalid length. [ 586.021260][T19226] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 586.021453][T19226] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 586.559331][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 586.864058][ T39] hsr_slave_0: left promiscuous mode [ 586.878302][ T39] hsr_slave_1: left promiscuous mode [ 586.893522][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.893586][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.895164][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.895188][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.056214][ T39] veth0_macvtap: left promiscuous mode [ 587.056346][ T39] veth1_vlan: left promiscuous mode [ 587.056440][ T39] veth0_vlan: left promiscuous mode [ 587.134136][T19248] netlink: 'syz.1.3261': attribute type 30 has an invalid length. [ 587.134164][T19248] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3261'. [ 587.870121][ T39] team0 (unregistering): Port device team_slave_1 removed [ 587.899071][ T39] team0 (unregistering): Port device team_slave_0 removed [ 588.178682][ T7203] smbdirect: ib_dev[syz0] removed [ 588.342769][T19247] gretap0: entered promiscuous mode [ 588.427200][T19248] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3261'. [ 588.641160][T18771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.700927][T18771] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.772560][T18771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 588.772595][T18771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.833279][T17397] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.833392][T17397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.877547][T17397] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.877669][T17397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.929178][T19267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3266'. [ 589.097263][T19270] ip_tables: iptables: counters copy to user failed while replacing table [ 589.206127][T19269] bridge0: entered promiscuous mode [ 589.206200][T19269] bridge0: entered allmulticast mode [ 589.292405][T19267] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 589.315014][T19291] ip_tables: iptables: counters copy to user failed while replacing table [ 589.796228][ T39] IPVS: stop unused estimator thread 0... [ 589.947124][T19311] netlink: 'syz.4.3269': attribute type 39 has an invalid length. [ 590.166265][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3269'. [ 590.166453][T19316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.271648][T19314] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 591.174449][T19338] tipc: Started in network mode [ 591.174490][T19338] tipc: Node identity d238915b5399, cluster identity 4711 [ 591.174886][T19338] tipc: Enabled bearer , priority 0 [ 591.367368][T19338] syzkaller0: entered promiscuous mode [ 591.367397][T19338] syzkaller0: entered allmulticast mode [ 591.382610][T19338] tipc: Resetting bearer [ 591.398853][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 591.574626][T17401] tipc: Resetting bearer [ 591.588827][T19337] tipc: Resetting bearer [ 594.870039][T19337] tipc: Disabling bearer [ 594.911798][T17783] tipc: Node number set to 2174849371 [ 595.483361][T18771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.744504][T19398] ebt_among: dst integrity fail: 200 [ 595.855426][T18771] veth0_vlan: entered promiscuous mode [ 595.911198][T18771] veth1_vlan: entered promiscuous mode [ 596.129143][T18771] veth0_macvtap: entered promiscuous mode [ 596.153798][T19406] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 596.179683][T18771] veth1_macvtap: entered promiscuous mode [ 596.209799][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3294'. [ 596.335812][T18771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.406167][T18771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.521397][ T7203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.521492][ T7203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.521540][ T7203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.521586][ T7203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.016516][T17401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.016544][T17401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.282633][T17399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.282658][T17399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.512770][T19440] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 597.676231][T19445] ebt_among: dst integrity fail: 200 [ 598.067401][T19458] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3304'. [ 598.303357][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'. [ 598.456643][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 598.586602][T19470] geneve2: entered promiscuous mode [ 598.607131][T17399] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 59348 - 0 [ 598.607204][T17399] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 59348 - 0 [ 598.607248][T17399] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 59348 - 0 [ 598.628959][ T39] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 59348 - 0 [ 599.061604][T19480] gretap1: entered promiscuous mode [ 599.078207][T19480] batman_adv: batadv0: Adding interface: gretap1 [ 599.078227][T19480] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 599.078253][T19480] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 599.212145][T19488] x_tables: duplicate underflow at hook 3 [ 599.331225][T19488] netlink: 'syz.0.3313': attribute type 1 has an invalid length. [ 599.667291][T19507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3316'. [ 599.825701][T19499] lo: entered promiscuous mode [ 599.825736][T19499] lo: entered allmulticast mode [ 599.840777][T19499] tunl0: entered promiscuous mode [ 599.840801][T19499] tunl0: entered allmulticast mode [ 599.864328][T19499] gre0: entered promiscuous mode [ 599.864350][T19499] gre0: entered allmulticast mode [ 599.930178][T19499] gretap0: entered allmulticast mode [ 599.953132][T19499] erspan0: entered promiscuous mode [ 599.953156][T19499] erspan0: entered allmulticast mode [ 599.992283][T19499] ip_vti0: entered promiscuous mode [ 599.992309][T19499] ip_vti0: entered allmulticast mode [ 599.996264][T19499] ip6_vti0: entered promiscuous mode [ 599.996284][T19499] ip6_vti0: entered allmulticast mode [ 600.047149][T19499] sit0: entered promiscuous mode [ 600.047174][T19499] sit0: entered allmulticast mode [ 600.111113][T19499] ip6tnl0: entered promiscuous mode [ 600.111139][T19499] ip6tnl0: entered allmulticast mode [ 600.163378][T19499] ip6gre0: entered promiscuous mode [ 600.163546][T19499] ip6gre0: entered allmulticast mode [ 600.192214][T19499] syz_tun: entered promiscuous mode [ 600.192237][T19499] syz_tun: entered allmulticast mode [ 600.226504][T19499] ip6gretap0: entered promiscuous mode [ 600.226528][T19499] ip6gretap0: entered allmulticast mode [ 600.252330][T19499] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.252878][T19499] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.257385][T19499] bridge0: entered promiscuous mode [ 600.257407][T19499] bridge0: entered allmulticast mode [ 600.294955][T19499] vcan0: entered promiscuous mode [ 600.294979][T19499] vcan0: entered allmulticast mode [ 600.310419][T19499] bond0: entered promiscuous mode [ 600.310441][T19499] bond_slave_0: entered promiscuous mode [ 600.310637][T19499] bond_slave_1: entered promiscuous mode [ 600.310823][T19499] team0: entered promiscuous mode [ 600.310840][T19499] team_slave_0: entered promiscuous mode [ 600.311058][T19499] team_slave_1: entered promiscuous mode [ 600.314782][T19499] bond0: entered allmulticast mode [ 600.314803][T19499] bond_slave_0: entered allmulticast mode [ 600.314821][T19499] bond_slave_1: entered allmulticast mode [ 600.314837][T19499] team0: entered allmulticast mode [ 600.314850][T19499] team_slave_0: entered allmulticast mode [ 600.314868][T19499] team_slave_1: entered allmulticast mode [ 600.395263][T19499] dummy0: entered promiscuous mode [ 600.395287][T19499] dummy0: entered allmulticast mode [ 600.452139][T19499] nlmon0: entered promiscuous mode [ 600.452171][T19499] nlmon0: entered allmulticast mode [ 600.454574][T19499] batadv0: entered promiscuous mode [ 600.454594][T19499] batadv0: entered allmulticast mode [ 600.483944][T19499] vxcan0: entered promiscuous mode [ 600.483970][T19499] vxcan0: entered allmulticast mode [ 600.502341][T19499] vxcan1: entered promiscuous mode [ 600.502366][T19499] vxcan1: entered allmulticast mode [ 600.507715][T19499] veth0: entered promiscuous mode [ 600.533019][T19499] veth0: entered allmulticast mode [ 600.556540][T19499] veth1: entered promiscuous mode [ 600.556561][T19499] veth1: entered allmulticast mode [ 600.582126][T19499] wg0: entered promiscuous mode [ 600.582148][T19499] wg0: entered allmulticast mode [ 600.587297][T19499] wg1: entered promiscuous mode [ 600.587317][T19499] wg1: entered allmulticast mode [ 600.619689][T19499] wg2: entered promiscuous mode [ 600.619712][T19499] wg2: entered allmulticast mode [ 600.621628][T19499] veth0_to_bridge: entered promiscuous mode [ 600.622306][T19499] veth0_to_bridge: entered allmulticast mode [ 600.660952][T19499] veth1_to_bridge: entered promiscuous mode [ 600.660982][T19499] veth1_to_bridge: entered allmulticast mode [ 600.686992][T19499] veth0_to_bond: entered promiscuous mode [ 600.687017][T19499] veth0_to_bond: entered allmulticast mode [ 600.709723][T19499] veth1_to_bond: entered promiscuous mode [ 600.709747][T19499] veth1_to_bond: entered allmulticast mode [ 600.716678][T19499] veth0_to_team: entered promiscuous mode [ 600.716699][T19499] veth0_to_team: entered allmulticast mode [ 600.773186][T19499] veth1_to_team: entered promiscuous mode [ 600.773212][T19499] veth1_to_team: entered allmulticast mode [ 600.803340][T19499] veth0_to_batadv: entered promiscuous mode [ 600.803368][T19499] veth0_to_batadv: entered allmulticast mode [ 600.835303][T19499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.835365][T19499] batadv_slave_0: entered promiscuous mode [ 600.835385][T19499] batadv_slave_0: entered allmulticast mode [ 600.876671][T19499] veth1_to_batadv: entered promiscuous mode [ 600.876697][T19499] veth1_to_batadv: entered allmulticast mode [ 600.893475][T19499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.893533][T19499] batadv_slave_1: entered promiscuous mode [ 600.893551][T19499] batadv_slave_1: entered allmulticast mode [ 600.923579][T19499] xfrm0: entered promiscuous mode [ 600.923602][T19499] xfrm0: entered allmulticast mode [ 600.943740][T19499] veth0_to_hsr: entered promiscuous mode [ 600.946731][T19499] veth0_to_hsr: entered allmulticast mode [ 600.965196][T19499] hsr_slave_0: entered allmulticast mode [ 601.014560][T19499] veth1_to_hsr: entered promiscuous mode [ 601.014584][T19499] veth1_to_hsr: entered allmulticast mode [ 601.036721][T19499] hsr_slave_1: entered allmulticast mode [ 601.064748][T19499] hsr0: entered promiscuous mode [ 601.065168][T19499] hsr0: entered allmulticast mode [ 601.079025][T19499] veth1_virt_wifi: entered promiscuous mode [ 601.079052][T19499] veth1_virt_wifi: entered allmulticast mode [ 601.085888][T19499] veth0_virt_wifi: entered promiscuous mode [ 601.085913][T19499] veth0_virt_wifi: entered allmulticast mode [ 601.139108][T19499] virt_wifi0: entered promiscuous mode [ 601.142462][T19499] veth1_vlan: entered allmulticast mode [ 601.153791][T19499] veth0_vlan: entered allmulticast mode [ 601.176450][T19499] vlan0: entered promiscuous mode [ 601.177529][T19499] vlan0: entered allmulticast mode [ 601.194161][T19499] vlan1: entered promiscuous mode [ 601.194443][T19499] vlan1: entered allmulticast mode [ 601.212570][T19499] macvlan0: entered promiscuous mode [ 601.212592][T19499] macvlan0: entered allmulticast mode [ 601.229748][T19499] macvlan1: entered promiscuous mode [ 601.229770][T19499] macvlan1: entered allmulticast mode [ 601.235683][T19499] ipvlan0: entered promiscuous mode [ 601.235703][T19499] ipvlan0: entered allmulticast mode [ 601.266545][T19499] ipvlan1: entered promiscuous mode [ 601.266581][T19499] ipvlan1: entered allmulticast mode [ 601.283528][T19499] veth1_macvtap: entered allmulticast mode [ 601.294121][T19499] veth0_macvtap: entered allmulticast mode [ 601.304992][T19499] macvtap0: entered promiscuous mode [ 601.305014][T19499] macvtap0: entered allmulticast mode [ 601.321148][T19499] macsec0: entered promiscuous mode [ 601.321189][T19499] macsec0: entered allmulticast mode [ 601.326825][T19499] geneve0: entered promiscuous mode [ 601.326846][T19499] geneve0: entered allmulticast mode [ 601.360370][T19499] geneve1: entered promiscuous mode [ 601.360400][T19499] geneve1: entered allmulticast mode [ 601.366184][T19499] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 601.366212][T19499] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 601.395045][T19499] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 601.395076][T19499] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 601.432315][T19499] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 601.432343][T19499] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 601.435823][T19499] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 601.435849][T19499] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 601.476627][T19499] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 601.476654][T19499] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 601.502909][T19499] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 601.502936][T19499] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 601.506515][T19499] bond1: entered allmulticast mode [ 601.522593][T19499] bond2: entered promiscuous mode [ 601.522638][T19499] bond2: entered allmulticast mode [ 601.527145][T19499] veth2: entered promiscuous mode [ 601.527197][T19499] veth2: entered allmulticast mode [ 601.551616][T19499] veth3: entered promiscuous mode [ 601.551636][T19499] veth3: entered allmulticast mode [ 601.555156][T19499] ipvlan2: entered promiscuous mode [ 601.556287][T19499] ip6tnl1: entered promiscuous mode [ 601.556305][T19499] ip6tnl1: entered allmulticast mode [ 601.576249][T19499] erspan1: entered promiscuous mode [ 601.576299][T19499] erspan1: entered allmulticast mode [ 601.605092][T19499] macvlan2: entered promiscuous mode [ 601.605115][T19499] macvlan2: entered allmulticast mode [ 601.620521][T19499] macvlan3: entered promiscuous mode [ 601.620543][T19499] macvlan3: entered allmulticast mode [ 601.624561][T19499] gretap1: entered allmulticast mode [ 601.652644][ T6622] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.654953][ T6622] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.654998][ T6622] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.655046][ T6622] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.827071][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 602.099613][T19537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3321'. [ 602.375852][T19553] --map-set only usable from mangle table [ 602.930935][T19573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3330'. [ 603.360196][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3333'. [ 604.488167][T19639] netlink: 'syz.5.3343': attribute type 1 has an invalid length. [ 604.541130][T19638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3344'. [ 604.651518][T19639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 604.836915][T19653] bond5: (slave geneve4): making interface the new active one [ 604.884141][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3347'. [ 604.884380][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3347'. [ 604.900736][T19653] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 604.983785][T19655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3347'. [ 605.450311][T19677] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3350'. [ 605.751827][T19683] ebt_among: dst integrity fail: 200 [ 605.800198][T19680] bond6: option min_links: invalid value (18446744073709551614) [ 605.800227][T19680] bond6: option min_links: allowed values 0 - 2147483647 [ 605.821409][T19680] bond6 (unregistering): Released all slaves [ 606.425467][T19707] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3362'. [ 606.425512][T19707] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 606.785053][T19715] tipc: Enabling of bearer rejected, failed to enable media [ 608.018893][T19732] xt_nfacct: accounting object `syz0' does not exist [ 609.931650][T18131] block nbd1: Receive control failed (result -32) [ 609.932200][ T5620] block nbd1: Receive control failed (result -32) [ 610.077245][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3377'. [ 610.315205][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f7dec00: rx timeout, send abort [ 610.815269][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f7dec00: abort rx timeout. Force session deactivation [ 610.819441][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f7de400: rx timeout, send abort [ 611.135913][T19763] pimreg: entered allmulticast mode [ 611.317318][T19772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3380'. [ 611.319544][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88801f7de400: abort rx timeout. Force session deactivation [ 611.486424][T19773] batman_adv: batadv0: Adding interface: syzkaller0 [ 611.486450][T19773] batman_adv: batadv0: Interface activated: syzkaller0 [ 611.834838][T19771] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 612.092438][T19771] batman_adv: batadv0: Removing interface: syzkaller0 [ 612.154115][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'. [ 612.154158][T19793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.248747][T19790] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 612.248838][T19790] gretap1: entered promiscuous mode [ 612.248855][T19790] gretap1: entered allmulticast mode [ 612.294811][T19795] bridge0: left promiscuous mode [ 612.294835][T19795] bridge0: left allmulticast mode [ 612.906331][T19802] bond6: Unable to set up delay as MII monitoring is disabled [ 612.988383][T19802] bond6 (unregistering): Released all slaves [ 613.134665][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3393'. [ 613.420027][T19805] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 613.464097][T19805] bond6: (slave lo): Enslaving as an active interface with an up link [ 613.506738][T19805] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 613.847563][T19833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3396'. [ 613.907562][T19836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3397'. [ 613.907598][T19836] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 613.927132][T19836] netlink: 69 bytes leftover after parsing attributes in process `syz.0.3397'. [ 613.994188][T19833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3396'. [ 614.081560][T19844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3398'. [ 614.107413][T19844] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3398'. [ 614.182477][T19842] wg0 speed is unknown, defaulting to 1000 [ 614.192015][T19845] tipc: Enabled bearer , priority 0 [ 614.193000][T19842] wg0 speed is unknown, defaulting to 1000 [ 614.235985][T19842] wg0 speed is unknown, defaulting to 1000 [ 614.260979][T19842] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 614.261018][T19842] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 614.261061][T19842] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 614.315196][ T31] audit: type=1107 audit(1791926495.843:7): pid=19846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 614.411536][T19842] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 614.718437][T19842] wg0 speed is unknown, defaulting to 1000 [ 614.756600][T19842] wg0 speed is unknown, defaulting to 1000 [ 614.790514][T19842] wg0 speed is unknown, defaulting to 1000 [ 614.811913][T19842] wg0 speed is unknown, defaulting to 1000 [ 614.892163][T19837] tipc: Disabling bearer [ 615.039263][T19842] wg0 speed is unknown, defaulting to 1000 [ 615.121364][T19842] wg0 speed is unknown, defaulting to 1000 [ 615.134443][T19842] wg0 speed is unknown, defaulting to 1000 [ 615.149284][T19842] wg0 speed is unknown, defaulting to 1000 [ 615.465460][T19880] ebt_among: dst integrity fail: 200 [ 615.549341][T19881] __nla_validate_parse: 1 callbacks suppressed [ 615.549363][T19881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3407'. [ 615.584157][T19895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3409'. [ 615.986347][T19903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3414'. [ 616.001022][T19907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.066381][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.068857][T19897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3411'. [ 616.068882][T19897] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3411'. [ 616.068902][T19897] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3411'. [ 616.085557][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.166161][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.199325][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3414'. [ 616.204864][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.210371][T19911] netlink: 'syz.1.3414': attribute type 10 has an invalid length. [ 616.210410][T19911] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 616.225785][T19911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.272990][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.302744][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.346321][T19916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.359134][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.365401][T19911] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 616.365980][T19911] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 616.405064][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.451790][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.521794][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.545573][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.604990][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.625776][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.663646][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.679454][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.711449][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.762707][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.765914][T19923] xt_limit: Overflow, try lower: 536871034/0 [ 616.795426][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.886597][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.904525][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.932115][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.943821][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.972190][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.997464][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.018513][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.036775][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'. [ 617.045081][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.069917][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.073999][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.107289][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.139557][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.170197][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.173799][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.285583][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.303026][T19910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.357635][T19935] ebt_among: dst integrity fail: 200 [ 617.536887][T19917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.676730][T19941] syzkaller0: entered promiscuous mode [ 617.676755][T19941] syzkaller0: entered allmulticast mode [ 618.092935][T19968] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3427'. [ 618.289307][T19968] team0: Device ipvlan0 failed to register rx_handler [ 618.506533][T19979] tipc: Failed to remove unknown binding: 66,0,0/0:1869644964/1869644965 [ 618.523809][T19979] tipc: Failed to remove unknown binding: 66,0,0/0:1869644964/1869644965 [ 618.562377][T19982] netlink: 'syz.3.3430': attribute type 3 has an invalid length. [ 618.615954][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3430'. [ 618.836428][T19995] ebt_among: dst integrity fail: 200 [ 619.048536][T20000] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 619.071462][T20003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 620.254562][T20044] ip_tables: iptables: counters copy to user failed while replacing table [ 620.257472][T20044] netlink: 'syz.4.3446': attribute type 4 has an invalid length. [ 620.793299][T20061] netlink: 'syz.4.3448': attribute type 4 has an invalid length. [ 621.011196][T20073] __nla_validate_parse: 1 callbacks suppressed [ 621.011218][T20073] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3452'. [ 621.135849][T20076] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3454'. [ 621.239270][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 621.601141][T20098] netlink: 'syz.4.3457': attribute type 2 has an invalid length. [ 621.718652][T18131] Bluetooth: hci0: command tx timeout [ 621.913486][T20109] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 622.055051][T20109] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 622.277410][T20133] ebt_among: dst integrity fail: 200 [ 622.894941][T20152] netlink: 'syz.0.3468': attribute type 1 has an invalid length. [ 623.211996][T20152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 623.219344][T20152] netlink: 'syz.0.3468': attribute type 1 has an invalid length. [ 623.329108][T20156] bond1: (slave veth3): Enslaving as an active interface with a down link [ 623.445805][T20156] bond1: (slave veth5): Enslaving as an active interface with a down link [ 623.575470][T20149] veth0_virt_wifi: entered promiscuous mode [ 623.619860][T20149] bond1: (slave veth0_virt_wifi): making interface the new active one [ 623.640473][T20149] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 623.934040][T20156] bond1: (slave veth7): Enslaving as an active interface with a down link [ 624.105659][T20188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3473'. [ 624.106033][T20188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3473'. [ 624.285248][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.474372][T20211] netlink: 'syz.4.3480': attribute type 1 has an invalid length. [ 624.474399][T20211] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3480'. [ 624.522116][T20211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3480'. [ 624.624060][T20215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.626404][T20215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.626818][T20215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.627228][T20215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.672323][T20215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.904596][T20206] netlink: 'syz.0.3479': attribute type 1 has an invalid length. [ 624.979927][T20206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 625.001039][T20221] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3483'. [ 625.278258][T20232] xt_ecn: cannot match TCP bits for non-tcp packets [ 625.341592][T20236] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3488'. [ 625.426142][T20238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3490'. [ 625.426170][T20238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3490'. [ 625.476204][T20238] openvswitch: netlink: Duplicate or invalid key (type 0). [ 625.702765][T20250] netlink: 'syz.0.3491': attribute type 29 has an invalid length. [ 626.126376][T20264] netlink: 'syz.1.3495': attribute type 2 has an invalid length. [ 626.171694][T20266] netlink: 'syz.1.3495': attribute type 2 has an invalid length. [ 626.274892][T20271] __nla_validate_parse: 2 callbacks suppressed [ 626.274915][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 626.274944][T20271] netlink: 'syz.1.3497': attribute type 4 has an invalid length. [ 626.911401][T20288] xt_CONNSECMARK: invalid mode: 0 [ 627.321089][T20293] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 627.321516][T20293] gretap3: entered promiscuous mode [ 627.321534][T20293] gretap3: entered allmulticast mode [ 627.375028][T20298] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3502'. [ 627.450298][T20309] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 627.456272][T20293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3502'. [ 627.552962][T20312] netlink: 'syz.3.3506': attribute type 1 has an invalid length. [ 627.666966][T20317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3506'. [ 627.667005][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3506'. [ 627.667282][T20312] bond3: entered promiscuous mode [ 627.706559][T20312] 8021q: adding VLAN 0 to HW filter on device bond3 [ 627.731387][T20312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3506'. [ 628.214649][T20334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3510'. [ 628.748941][T20320] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.749100][T20320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.750166][T20320] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.750303][T20320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.833418][T20320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.871100][ T30] wg0 speed is unknown, defaulting to 1000 [ 629.075220][T20343] netlink: 'syz.0.3514': attribute type 29 has an invalid length. [ 629.257172][T20353] netlink: 'syz.3.3513': attribute type 12 has an invalid length. [ 629.420152][T20359] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 629.489426][T18131] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 629.682080][T20364] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3520'. [ 629.708408][T20364] netlink: 'syz.3.3520': attribute type 2 has an invalid length. [ 629.860027][T20369] tipc: Enabling of bearer rejected, failed to enable media [ 629.909714][T20370] tipc: Enabling of bearer rejected, failed to enable media [ 630.125009][T20378] sock: sock_set_timeout: `syz.3.3524' (pid 20378) tries to set negative timeout [ 630.389787][T20392] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3529'. [ 630.504494][T20393] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3525'. [ 630.748582][T20403] geneve3: entered promiscuous mode [ 630.748607][T20403] geneve3: entered allmulticast mode [ 631.004378][T20413] netlink: NAT attribute has 8 unknown bytes [ 631.004417][T20413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.170691][T20419] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 631.236216][T20419] 8021q: VLANs not supported on ip6_vti0 [ 631.481230][T18131] Bluetooth: hci4: command 0x0406 tx timeout [ 631.623448][T20114] IPVS: starting estimator thread 0... [ 631.640684][T20441] __nla_validate_parse: 3 callbacks suppressed [ 631.640705][T20441] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3545'. [ 631.641525][T20441] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3545'. [ 631.679969][T20441] netlink: 'syz.1.3545': attribute type 32 has an invalid length. [ 631.679994][T20441] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3545'. [ 631.727376][T20442] IPVS: using max 29 ests per chain, 69600 per kthread [ 632.575840][T20471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3553'. [ 632.575866][T20471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3553'. [ 632.655812][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'. [ 633.205116][T20489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3559'. [ 633.978392][T20516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 633.999217][T20516] ip_tables: iptables: counters copy to user failed while replacing table [ 634.208857][T20524] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 634.208885][T20524] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 634.248446][T20524] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 634.334687][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3575'. [ 634.598937][T20532] team0 (unregistering): Port device team_slave_0 removed [ 634.712921][T20532] team0 (unregistering): Port device team_slave_1 removed [ 634.845459][T20552] netlink: 'syz.1.3581': attribute type 32 has an invalid length. [ 634.845484][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3581'. [ 635.060385][T20552] bond5: option coupled_control: invalid value (192) [ 635.190876][T20552] bond5 (unregistering): Released all slaves [ 635.521158][T20560] ebt_among: dst integrity fail: 200 [ 635.841015][T17399] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.841055][T17399] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 59348 - 0 [ 636.131087][T20582] smc: net device lo applied user defined pnetid SYZ0 [ 636.131115][T20582] smc: smcd device lo applied user defined pnetid SYZ0 [ 636.899588][T20610] IPv6: sit1: Disabled Multicast RS [ 637.009441][T20623] __nla_validate_parse: 2 callbacks suppressed [ 637.009462][T20623] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3596'. [ 637.351513][T20632] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 637.357494][T20632] bond3 (unregistering): Released all slaves [ 637.576795][T20645] batman_adv: batadv0: Adding interface: syzkaller0 [ 637.576815][T20645] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.576848][T20645] batman_adv: batadv0: Interface activated: syzkaller0 [ 637.623618][T20643] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 637.703157][T20643] batman_adv: batadv0: Removing interface: syzkaller0 [ 638.007857][T20659] ip_tables: iptables: counters copy to user failed while replacing table [ 638.014447][T20659] netlink: 'syz.4.3609': attribute type 4 has an invalid length. [ 638.434399][T20672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'. [ 638.576666][T20674] nft_compat: unsupported protocol 5 [ 638.672744][T20676] x_tables: duplicate underflow at hook 1 [ 638.854848][T20678] ip_tables: iptables: counters copy to user failed while replacing table [ 638.970702][T20682] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3616'. [ 639.028425][T20685] netlink: 'syz.1.3618': attribute type 1 has an invalid length. [ 639.045519][T20683] xt_cluster: node mask cannot exceed total number of nodes [ 639.095292][T20683] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 639.139205][T20688] netlink: 'syz.5.3616': attribute type 1 has an invalid length. [ 639.419683][T20695] vlan2: entered allmulticast mode [ 639.419708][T20695] bond0: entered allmulticast mode [ 639.419724][T20695] bond_slave_0: entered allmulticast mode [ 639.419742][T20695] bond_slave_1: entered allmulticast mode [ 639.884175][T20701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3622'. [ 639.884347][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3622'. [ 640.222547][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3624'. [ 640.669162][T20709] ipvlan0: entered allmulticast mode [ 640.669188][T20709] virt_wifi0: entered allmulticast mode [ 640.670703][T20709] batman_adv: batadv0: Adding interface: ipvlan0 [ 640.670826][T20709] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.670861][T20709] batman_adv: batadv0: Interface activated: ipvlan0 [ 641.111690][T20725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.114790][T20725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3629'. [ 641.120681][T20725] netlink: 'syz.3.3629': attribute type 4 has an invalid length. [ 641.149054][T20725] sctp: [Deprecated]: syz.3.3629 (pid 20725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 641.149054][T20725] Use struct sctp_sack_info instead [ 641.153419][T20725] netlink: 'syz.3.3629': attribute type 4 has an invalid length. [ 641.196052][T20719] syzkaller0: entered promiscuous mode [ 641.196075][T20719] syzkaller0: entered allmulticast mode [ 641.285514][T20719] netlink: 'syz.4.3627': attribute type 4 has an invalid length. [ 641.551109][T20742] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 641.616480][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3632'. [ 641.784898][T20751] netlink: 'syz.1.3636': attribute type 3 has an invalid length. [ 641.810423][T20751] netlink: 'syz.1.3636': attribute type 3 has an invalid length. [ 642.297824][T20770] netlink: 'syz.3.3640': attribute type 11 has an invalid length. [ 642.297848][T20770] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.3640'. [ 642.411420][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3640'. [ 642.450814][T20770] syz_tun: entered promiscuous mode [ 642.716931][T20781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 642.724874][T20781] bridge0: port 3(bond1) entered blocking state [ 642.725062][T20781] bridge0: port 3(bond1) entered disabled state [ 642.725228][T20781] bond1: entered allmulticast mode [ 642.733324][T20781] bond1: entered promiscuous mode [ 642.738791][T20781] bridge0: port 3(bond1) entered blocking state [ 642.738917][T20781] bridge0: port 3(bond1) entered forwarding state [ 642.789209][T17403] bridge0: port 3(bond1) entered disabled state [ 642.874468][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3643'. [ 642.874494][T20790] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3643'. [ 643.443865][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3652'. [ 643.491587][T20805] syzkaller0: entered promiscuous mode [ 643.491633][T20805] syzkaller0: entered allmulticast mode [ 643.675782][T20816] netlink: Invalid conntrack timeout [ 643.675815][T20816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.692791][T20817] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003 [ 643.731702][T20820] netlink: Invalid conntrack timeout [ 643.731753][T20820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.086246][T20827] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3656'. [ 644.228707][T20826] syzkaller0: entered promiscuous mode [ 644.228914][T20826] syzkaller0: entered allmulticast mode [ 644.277249][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3658'. [ 644.277273][T20832] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3658'. [ 644.543635][T20842] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 644.705282][ T7220] tipc: Subscription rejected, illegal request [ 644.858697][T20856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3664'. [ 644.858744][T20856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3664'. [ 645.151771][T20862] netlink: 'syz.1.3665': attribute type 12 has an invalid length. [ 645.334214][T20866] pim6reg: entered allmulticast mode [ 645.494705][T20871] bridge_slave_1: left allmulticast mode [ 645.495076][T20871] bridge_slave_1: left promiscuous mode [ 645.496051][T20871] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.528640][T20871] bridge_slave_0: left allmulticast mode [ 645.530923][T20871] bridge_slave_0: left promiscuous mode [ 645.532069][T20871] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.900579][T20869] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 645.909184][T20869] bond4 (unregistering): Released all slaves [ 646.330028][T20882] syzkaller1: entered promiscuous mode [ 646.330056][T20882] syzkaller1: entered allmulticast mode [ 647.891139][T20932] __nla_validate_parse: 3 callbacks suppressed [ 647.891161][T20932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3682'. [ 647.927068][T20932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.685658][T20959] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3687'. [ 648.685688][T20959] openvswitch: netlink: Message has 512 unknown bytes. [ 648.712505][T20959] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3687'. [ 648.712531][T20959] openvswitch: netlink: Message has 512 unknown bytes. [ 648.742170][T20959] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3687'. [ 648.742197][T20959] openvswitch: netlink: Message has 512 unknown bytes. [ 648.742873][T20959] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3687'. [ 648.742897][T20959] openvswitch: netlink: Message has 512 unknown bytes. [ 648.767243][T20959] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3687'. [ 648.767267][T20959] openvswitch: netlink: Message has 512 unknown bytes. [ 648.797554][T20959] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3687'. [ 648.797619][T20959] openvswitch: netlink: Message has 512 unknown bytes. [ 648.817530][T20959] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3687'. [ 648.817554][T20959] openvswitch: netlink: Message has 512 unknown bytes. [ 648.829474][T20959] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3687'. [ 648.829526][T20959] openvswitch: netlink: Message has 512 unknown bytes. [ 648.867655][T20959] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3687'. [ 648.867679][T20959] openvswitch: netlink: Message has 512 unknown bytes. [ 648.882168][T20959] openvswitch: netlink: Message has 512 unknown bytes. [ 649.231775][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807920c400: rx timeout, send abort [ 649.232219][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807920c400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 649.740012][T20988] netlink: 'syz.5.3695': attribute type 5 has an invalid length. [ 649.760395][T20992] netlink: 'syz.1.3693': attribute type 1 has an invalid length. [ 649.765907][T20988] geneve5: entered promiscuous mode [ 649.766123][T20988] geneve5: entered allmulticast mode [ 650.027703][T20992] bond5: entered promiscuous mode [ 650.031073][T20992] 8021q: adding VLAN 0 to HW filter on device bond5 [ 650.088647][T20993] bond5: entered allmulticast mode [ 650.191798][T20992] bond5: (slave bridge2): making interface the new active one [ 650.191826][T20992] bridge2: entered promiscuous mode [ 650.192234][T20992] bridge2: entered allmulticast mode [ 650.206120][T20992] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 650.250449][ T6618] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 650.252924][ T13] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 650.252988][ T13] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 650.253034][ T13] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 650.746641][T21022] smc: net device lo erased user defined pnetid SYZ0 [ 650.746706][T21022] smc: smcd device lo erased user defined pnetid SYZ0 [ 650.806056][T21028] netlink: 'syz.4.3703': attribute type 2 has an invalid length. [ 652.121451][T21079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.121472][T21079] IPv6: NLM_F_CREATE should be set when creating new route [ 652.121541][T21079] IPv6: NLM_F_CREATE should be set when creating new route [ 652.335425][T21083] netlink: 'syz.1.3715': attribute type 10 has an invalid length. [ 652.335462][T21083] bridge0: left promiscuous mode [ 652.335481][T21083] bridge0: left allmulticast mode [ 652.370133][T21083] bridge0: entered promiscuous mode [ 652.370318][T21083] bridge0: entered allmulticast mode [ 652.370757][T21083] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 652.434024][T21087] xt_cgroup: no path or classid specified [ 653.034780][T21102] __nla_validate_parse: 65 callbacks suppressed [ 653.034805][T21102] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.3718'. [ 653.065907][T21092] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.096148][T21092] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.227519][T21092] bond0: (slave bridge0): Releasing backup interface [ 653.232708][T21092] bridge0 (unregistering): left promiscuous mode [ 653.233637][T21092] bridge0 (unregistering): left allmulticast mode [ 653.692828][T21126] net_ratelimit: 55 callbacks suppressed [ 653.692849][T21126] ip_tables: iptables: counters copy to user failed while replacing table [ 653.751851][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 653.751929][T21133] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 653.752819][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 653.752892][T21133] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 653.753729][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 653.753794][T21133] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 653.754618][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 653.754681][T21133] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 653.755501][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 653.755564][T21133] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 653.756439][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 653.756503][T21133] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 653.757322][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 653.757386][T21133] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 653.837094][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 653.837291][T21133] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 653.909565][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 653.909646][T21133] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 654.048550][T21136] wireguard0: entered promiscuous mode [ 655.210459][T21187] netlink: 'syz.0.3739': attribute type 1 has an invalid length. [ 655.350052][T21187] bond4: entered promiscuous mode [ 655.350431][T21187] 8021q: adding VLAN 0 to HW filter on device bond4 [ 655.435960][T21189] 8021q: adding VLAN 0 to HW filter on device bond4 [ 655.436308][T21189] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 655.436325][T21189] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 655.486648][T21189] bond4: (slave xfrm1): making interface the new active one [ 655.486673][T21189] xfrm1: entered promiscuous mode [ 655.523152][T21189] xfrm1: left promiscuous mode [ 655.954997][T21203] ip6erspan0: entered allmulticast mode [ 656.696061][T21229] ebt_among: dst integrity fail: 200 [ 656.925680][T21241] xt_connbytes: Forcing CT accounting to be enabled [ 656.925923][T21241] Cannot find set identified by id 0 to match [ 657.077849][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 658.827076][T21294] __nla_validate_parse: 61 callbacks suppressed [ 658.827100][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3764'. [ 659.627058][T21313] netlink: 'syz.3.3769': attribute type 1 has an invalid length. [ 659.688046][T21313] netlink: 'syz.3.3769': attribute type 1 has an invalid length. [ 659.893274][T21324] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3771'. [ 659.936893][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3771'. [ 660.044155][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3771'. [ 660.097572][T21330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.166683][T21330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.195196][T21330] batman_adv: batadv0: Removing interface: gretap1 [ 660.306739][T21334] 8021q: VLANs not supported on gre0 [ 660.557342][T21343] ªªªªª»: renamed from dummy0 (while UP) [ 660.650744][T21349] lo: entered promiscuous mode [ 660.651250][T21349] lo: left promiscuous mode [ 660.729741][T21349] bond0: (slave bond_slave_0): Releasing backup interface [ 660.749368][T21349] bond_slave_0: left allmulticast mode [ 661.147187][T21362] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3781'. [ 661.230020][T21349] bond0: (slave bond_slave_1): Releasing backup interface [ 661.295973][T21349] bond_slave_1: left allmulticast mode [ 661.388786][T21349] team0: Port device team_slave_0 removed [ 661.462822][T21349] team0: Port device team_slave_1 removed [ 661.463729][T21349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.463751][T21349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.496308][T21349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.496333][T21349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.520218][T21349] net_ratelimit: 59 callbacks suppressed [ 661.520239][T21349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 661.587973][T21350] team0: Port device xfrm0 added [ 661.708365][T21367] tipc: Started in network mode [ 661.708400][T21367] tipc: Node identity 8ec6510d0662, cluster identity 4711 [ 661.708652][T21367] tipc: Enabled bearer , priority 0 [ 661.904401][T21363] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3780'. [ 661.929747][T21366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 662.257169][T21387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3784'. [ 662.414419][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3786'. [ 662.414449][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3786'. [ 662.830133][T21388] bond5: entered promiscuous mode [ 662.830160][T21388] bond5: entered allmulticast mode [ 662.899631][T21397] vlan2: entered allmulticast mode [ 662.899655][T21397] bond0: entered allmulticast mode [ 662.899670][T21397] bond_slave_0: entered allmulticast mode [ 662.899688][T21397] bond_slave_1: entered allmulticast mode [ 662.899983][ T30] tipc: Node number set to 2292470029 [ 663.135856][T21410] netlink: 'syz.1.3791': attribute type 21 has an invalid length. [ 663.437575][T21423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 663.604146][T21426] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3796'. [ 663.771773][T21416] bond2 (unregistering): Released all slaves [ 663.913930][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'. [ 663.913961][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'. [ 663.914030][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'. [ 664.158941][T21440] netlink: 'syz.0.3800': attribute type 33 has an invalid length. [ 664.354112][T21440] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 664.357345][T21440] bond6 (unregistering): Released all slaves [ 664.423179][T21447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.543634][T21449] bond5: entered promiscuous mode [ 664.543712][T21449] bond5: entered allmulticast mode [ 664.544221][T21449] 8021q: adding VLAN 0 to HW filter on device bond5 [ 664.848942][T21468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.853310][T21468] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3807'. [ 664.853448][T21468] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3807'. [ 664.854189][T21469] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3807'. [ 664.855529][T21468] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3807'. [ 664.928268][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'. [ 664.929997][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'. [ 665.662451][T21506] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3815'. [ 665.721260][T21512] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 666.680532][T21542] netlink: 'syz.3.3824': attribute type 21 has an invalid length. [ 666.729845][T21545] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 667.467159][T21573] netlink: 'syz.4.3837': attribute type 10 has an invalid length. [ 667.757523][T21584] netlink: 'syz.0.3838': attribute type 1 has an invalid length. [ 667.757547][T21584] netlink: 'syz.0.3838': attribute type 2 has an invalid length. [ 667.822862][T21588] ebt_among: dst integrity fail: 200 [ 667.953792][T21598] openvswitch: netlink: Multiple metadata blocks provided [ 668.671600][T21644] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 669.527209][T21653] __nla_validate_parse: 6 callbacks suppressed [ 669.527232][T21653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3856'. [ 669.564012][T21653] xt_socket: unknown flags 0xc [ 671.406914][T21629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.761614][T21670] ip_tables: iptables: counters copy to user failed while replacing table [ 672.062561][T21678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.500708][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3866'. [ 672.625930][T21694] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3868'. [ 672.626742][T21695] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3868'. [ 672.803016][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3869'. [ 672.805105][T21693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3868'. [ 672.805131][T21693] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3868'. [ 672.947512][T21699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.091324][T21699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3870'. [ 673.091505][T21700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3870'. [ 673.098245][T21710] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3871'. [ 673.380407][T21718] netlink: 'syz.5.3875': attribute type 8 has an invalid length. [ 673.401819][T21719] netlink: 'syz.5.3875': attribute type 8 has an invalid length. [ 673.610718][T21723] xfrm1: entered promiscuous mode [ 673.610975][T21723] xfrm1: entered allmulticast mode [ 673.661307][T21727] geneve6: entered promiscuous mode [ 673.661331][T21727] geneve6: entered allmulticast mode [ 673.848683][T21732] ipvlan2: entered allmulticast mode [ 673.848707][T21732] virt_wifi0: entered allmulticast mode [ 674.651938][T21766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.655186][T21766] xt_hashlimit: size too large, truncated to 1048576 [ 674.720612][T21771] xt_hashlimit: size too large, truncated to 1048576 [ 675.520414][T21797] syzkaller0: entered promiscuous mode [ 675.520441][T21797] syzkaller0: entered allmulticast mode [ 675.616160][T21817] netlink: 'syz.3.3901': attribute type 5 has an invalid length. [ 677.825897][T21778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.872144][T21796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.326867][T21842] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 679.585446][T21867] __nla_validate_parse: 8 callbacks suppressed [ 679.585467][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3910'. [ 680.136404][T21882] netlink: 'syz.1.3914': attribute type 2 has an invalid length. [ 680.222985][T21888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3916'. [ 681.129936][T21925] batman_adv: batadv0: Adding interface: syzkaller0 [ 681.129957][T21925] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.129994][T21925] batman_adv: batadv0: Interface activated: syzkaller0 [ 681.139297][ T7220] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.140144][ T7220] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.140188][ T7220] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.140226][ T7220] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.612636][T21934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3927'. [ 681.612663][T21934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3927'. [ 682.004364][T21949] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3929'. [ 682.079378][T21954] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 682.422071][T21966] ip_tables: iptables: counters copy to user failed while replacing table [ 682.470073][T21967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3937'. [ 682.855023][T21976] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 682.858116][T21976] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 682.966891][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3941'. [ 682.996318][T21979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3941'. [ 683.456085][T21993] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3946'. [ 683.456114][T21993] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3946'. [ 683.456132][T21993] netlink: 'syz.4.3946': attribute type 6 has an invalid length. [ 683.456146][T21993] netlink: 'syz.4.3946': attribute type 5 has an invalid length. [ 684.268941][T22021] syzkaller0: entered promiscuous mode [ 684.269220][T22021] syzkaller0: entered allmulticast mode [ 684.650517][T22033] __nla_validate_parse: 9 callbacks suppressed [ 684.650540][T22033] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3959'. [ 684.701512][T22036] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3959'. [ 684.841562][T22042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3961'. [ 685.302117][T22048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3960'. [ 685.450523][T22051] tipc: Started in network mode [ 685.450557][T22051] tipc: Node identity 5a44283a0b2c, cluster identity 4711 [ 685.450724][T22051] tipc: Enabled bearer , priority 0 [ 685.550172][T22053] syzkaller0: entered promiscuous mode [ 685.550200][T22053] syzkaller0: entered allmulticast mode [ 685.552467][T22053] tipc: Resetting bearer [ 685.556309][T22049] tipc: Resetting bearer [ 685.721078][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.026942][T22068] x_tables: duplicate underflow at hook 2 [ 686.136771][T22072] x_tables: duplicate underflow at hook 1 [ 688.796095][T22049] tipc: Disabling bearer [ 689.052037][ T5723] tipc: Node number set to 1365780538 [ 689.081042][T22085] netlink: 'syz.1.3968': attribute type 8 has an invalid length. [ 689.128570][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3968'. [ 689.375954][T22096] veth1_to_bond: entered allmulticast mode [ 689.761402][T22112] netlink: 'syz.0.3973': attribute type 4 has an invalid length. [ 689.792344][T22112] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 689.792387][T22112] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 689.813452][T22093] veth1_to_bond: left allmulticast mode [ 689.968522][T17403] IPVS: starting estimator thread 0... [ 690.049193][T22120] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3974'. [ 690.069432][T22116] IPVS: using max 24 ests per chain, 57600 per kthread [ 690.131472][T22123] netlink: 'syz.1.3978': attribute type 4 has an invalid length. [ 690.131496][T22123] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3978'. [ 690.355913][T22127] netlink: 'syz.3.3977': attribute type 1 has an invalid length. [ 690.523204][T22127] bond6: entered promiscuous mode [ 690.523918][T22127] 8021q: adding VLAN 0 to HW filter on device bond6 [ 692.084634][T22178] netlink: 'syz.0.3993': attribute type 1 has an invalid length. [ 692.098773][T22178] netlink: 'syz.0.3993': attribute type 2 has an invalid length. [ 692.253115][T22185] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3997'. [ 692.253793][T22185] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3997'. [ 692.253814][T22185] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3997'. [ 692.301977][T22186] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3997'. [ 692.349199][T22190] netlink: 'syz.5.3996': attribute type 1 has an invalid length. [ 692.602201][T22190] 8021q: adding VLAN 0 to HW filter on device bond7 [ 692.679248][T22192] vlan3: entered promiscuous mode [ 692.679272][T22192] bond7: entered promiscuous mode [ 692.680522][T22203] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4000'. [ 692.685831][T22199] batadv_slave_0: entered promiscuous mode [ 695.067167][T22203] gretap0: entered promiscuous mode [ 695.202362][T22197] batadv_slave_0: left promiscuous mode [ 695.725595][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4008'. [ 696.545615][T22269] ebt_among: dst integrity fail: 200 [ 697.124586][T22277] netlink: 'syz.0.4018': attribute type 13 has an invalid length. [ 697.501081][T22291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4022'. [ 698.025610][T22312] xt_hashlimit: size too large, truncated to 1048576 [ 698.290064][T22320] xt_hashlimit: size too large, truncated to 1048576 [ 698.656350][T22327] xt_hashlimit: size too large, truncated to 1048576 [ 698.656594][T22327] xt_hashlimit: max too large, truncated to 1048576 [ 698.656686][T22327] xt_hashlimit: invalid rate [ 699.957830][ T5620] Bluetooth: hci0: command 0x0c13 tx timeout [ 699.959701][T18131] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 700.581697][T22295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.921278][T22340] netlink: 288 bytes leftover after parsing attributes in process `syz.5.4034'. [ 700.927367][T22345] netlink: 'syz.3.4036': attribute type 33 has an invalid length. [ 700.959381][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4034'. [ 701.039844][T22345] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 701.115866][T22355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4037'. [ 701.375616][T22345] bond7 (unregistering): Released all slaves [ 701.761855][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4038'. [ 701.771871][T22361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4039'. [ 702.000548][T22361] netlink: 'syz.3.4039': attribute type 1 has an invalid length. [ 702.176563][T22390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4043'. [ 702.331283][ T6629] IPVS: starting estimator thread 0... [ 702.418551][T22394] IPVS: using max 24 ests per chain, 57600 per kthread [ 703.641703][T22412] sctp: [Deprecated]: syz.5.4048 (pid 22412) Use of int in maxseg socket option. [ 703.641703][T22412] Use struct sctp_assoc_value instead [ 704.848164][T22390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4043'. [ 704.848196][T22390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4043'. [ 704.897824][T22392] syzkaller0: entered promiscuous mode [ 704.897852][T22392] syzkaller0: entered allmulticast mode [ 705.324565][T22426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4053'. [ 705.370041][T22427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4053'. [ 706.075847][T22447] __nla_validate_parse: 1 callbacks suppressed [ 706.075870][T22447] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4058'. [ 706.246371][T22446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4057'. [ 706.643218][T22446] bond7: entered promiscuous mode [ 706.643293][T22446] bond7: entered allmulticast mode [ 706.643736][T22446] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.385825][T22490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.419468][T22490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4064'. [ 707.793686][T22504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4066'. [ 707.832905][T22503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.033525][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4066'. [ 708.273808][T22513] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 708.715939][T22532] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 708.716192][T22532] mac80211_hwsim hwsim36 wlan0: left allmulticast mode [ 709.304211][T22553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4080'. [ 709.304244][T22553] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4080'. [ 709.505529][T22562] ipvlan2: entered allmulticast mode [ 709.505556][T22562] virt_wifi0: entered allmulticast mode [ 709.590073][T22564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.684286][T22566] netlink: 'syz.5.4086': attribute type 1 has an invalid length. [ 709.751896][T22566] bond8: entered promiscuous mode [ 709.755932][T22566] 8021q: adding VLAN 0 to HW filter on device bond8 [ 709.844256][T22566] bond8: (slave bridge5): making interface the new active one [ 709.844283][T22566] bridge5: entered promiscuous mode [ 709.865951][T22566] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 710.123747][T22583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 710.141744][T22584] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 710.220812][T22586] tipc: Started in network mode [ 710.220849][T22586] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 710.221046][T22586] tipc: Enabled bearer , priority 10 [ 710.294012][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4091'. [ 710.294037][T22589] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4091'. [ 711.172200][T22622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4103'. [ 711.173757][T22622] netlink: 'syz.0.4103': attribute type 27 has an invalid length. [ 711.189554][T22623] netlink: 'syz.0.4103': attribute type 27 has an invalid length. [ 711.340036][T17860] tipc: Node number set to 10136234 [ 712.532736][T22663] veth0_to_bond: entered allmulticast mode [ 712.617634][T22667] xt_hashlimit: invalid interval [ 712.896357][T22679] netlink: 75 bytes leftover after parsing attributes in process `syz.0.4118'. [ 713.426055][T22693] netlink: 'syz.4.4125': attribute type 9 has an invalid length. [ 713.426081][T22693] netlink: 'syz.4.4125': attribute type 4 has an invalid length. [ 713.801434][T22711] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4131'. [ 713.829871][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4130'. [ 713.835409][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4130'. [ 714.373801][T22725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.420807][T22725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.510532][T22728] netlink: 'syz.0.4135': attribute type 1 has an invalid length. [ 714.510556][T22728] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4135'. [ 714.557655][T22736] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4136'. [ 714.562317][T22737] netlink: 'syz.0.4135': attribute type 1 has an invalid length. [ 714.562336][T22737] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4135'. [ 715.081373][T22754] netlink: 'syz.0.4143': attribute type 1 has an invalid length. [ 715.114306][T18131] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 715.114414][T18131] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 715.114708][T18131] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 715.115076][T18131] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 715.115286][T18131] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 715.186715][T22766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4145'. [ 715.228054][T22754] bond6: entered promiscuous mode [ 715.228665][T22754] 8021q: adding VLAN 0 to HW filter on device bond6 [ 715.310823][T22756] bond6: (slave bridge1): making interface the new active one [ 715.310855][T22756] bridge1: entered promiscuous mode [ 715.313738][T22756] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 715.407770][T22766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.723851][T22773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4146'. [ 716.071181][T22791] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 716.312439][T22801] netlink: zone id is out of range [ 716.312461][T22801] netlink: del zone limit has 4 unknown bytes [ 716.351265][T22801] nbd4: detected capacity change from 0 to 274877906944 [ 716.358351][T18131] block nbd4: Receive control failed (result -32) [ 716.378484][ T1694] block nbd4: Dead connection, failed to find a fallback [ 716.378510][ T1694] block nbd4: shutting down sockets [ 716.378606][ T1694] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.378718][ T1694] Buffer I/O error on dev nbd4, logical block 0, async page read [ 716.392117][ T1694] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.392199][ T1694] Buffer I/O error on dev nbd4, logical block 0, async page read [ 716.394506][ T1694] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.394585][ T1694] Buffer I/O error on dev nbd4, logical block 0, async page read [ 716.397067][ T1694] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.397097][ T1694] Buffer I/O error on dev nbd4, logical block 0, async page read [ 716.397229][ T1694] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.397518][ T1694] Buffer I/O error on dev nbd4, logical block 0, async page read [ 716.398000][ T1694] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.398040][ T1694] Buffer I/O error on dev nbd4, logical block 0, async page read [ 716.402095][ T1694] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.402169][ T1694] Buffer I/O error on dev nbd4, logical block 0, async page read [ 716.403110][ T1694] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.403180][ T1694] Buffer I/O error on dev nbd4, logical block 0, async page read [ 716.403592][T22726] ldm_validate_partition_table(): Disk read failed. [ 716.403852][ T1694] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.403923][ T1694] Buffer I/O error on dev nbd4, logical block 0, async page read [ 716.412073][ T1694] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 716.412170][ T1694] Buffer I/O error on dev nbd4, logical block 0, async page read [ 716.414420][T22726] Dev nbd4: unable to read RDB block 0 [ 716.420737][T22726] nbd4: unable to read partition table [ 716.680389][T22726] ldm_validate_partition_table(): Disk read failed. [ 716.680821][T22726] Dev nbd4: unable to read RDB block 0 [ 716.681335][T22726] nbd4: unable to read partition table [ 716.770498][T22806] netlink: 'syz.5.4157': attribute type 21 has an invalid length. [ 717.143285][T22806] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 717.165471][T22806] bond9 (unregistering): Released all slaves [ 717.310260][T22820] pim6reg: entered allmulticast mode [ 717.455244][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4161'. [ 717.643695][T22835] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4162'. [ 718.006523][T22840] [ 718.008909][T22840] ====================================================== [ 718.015941][T22840] WARNING: possible circular locking dependency detected [ 718.024468][T22840] syzkaller #0 Not tainted [ 718.029086][T22840] ------------------------------------------------------ [ 718.036984][T22840] syz.3.4165/22840 is trying to acquire lock: [ 718.044111][T22840] ffff88802d209e18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 718.053032][T22840] [ 718.053032][T22840] but task is already holding lock: [ 718.060584][T22840] ffff8880233862a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 718.070187][T22840] [ 718.070187][T22840] which lock already depends on the new lock. [ 718.070187][T22840] [ 718.081844][T22840] [ 718.081844][T22840] the existing dependency chain (in reverse order) is: [ 718.090971][T22840] [ 718.090971][T22840] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 718.098830][T22840] __mutex_lock+0x19d/0x1550 [ 718.103982][T22840] elevator_change+0x1af/0x480 [ 718.109564][T22840] elevator_set_none+0xb5/0x140 [ 718.114968][T22840] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 718.121404][T22840] nbd_start_device+0x189/0xb30 [ 718.127932][T22840] nbd_genl_connect+0x167d/0x1cd0 [ 718.133952][T22840] genl_family_rcv_msg_doit+0x233/0x340 [ 718.139856][T22845] bond2: entered promiscuous mode [ 718.140017][T22845] bond2: entered allmulticast mode [ 718.144966][T22845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 718.157830][T22840] genl_rcv_msg+0x614/0x7a0 [ 718.163077][T22840] netlink_rcv_skb+0x226/0x4a0 [ 718.168415][T22840] genl_rcv+0x28/0x40 [ 718.172979][T22840] netlink_unicast+0x7bd/0x940 [ 718.178306][T22840] netlink_sendmsg+0x813/0xb40 [ 718.184101][T22840] sock_sendmsg_nosec+0x13a/0x180 [ 718.189966][T22840] ____sys_sendmsg+0x54e/0x850 [ 718.195368][T22840] ___sys_sendmsg+0x2a5/0x360 [ 718.200685][T22840] __x64_sys_sendmsg+0x1b1/0x290 [ 718.206272][T22840] do_syscall_64+0x166/0x520 [ 718.211432][T22840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.217877][T22840] [ 718.217877][T22840] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 718.226527][T22840] blk_alloc_queue+0x544/0x690 [ 718.232231][T22840] __blk_mq_alloc_disk+0x194/0x390 [ 718.237902][T22840] nbd_dev_add+0x494/0xb60 [ 718.242867][T22840] nbd_init+0x168/0x1f0 [ 718.247701][T22840] do_one_initcall+0x250/0x870 [ 718.253116][T22840] do_initcall_level+0x10a/0x1a0 [ 718.258615][T22840] do_initcalls+0x59/0xa0 [ 718.263512][T22840] kernel_init_freeable+0x29d/0x3e0 [ 718.269307][T22840] kernel_init+0x22/0x1d0 [ 718.274200][T22840] ret_from_fork+0x514/0xb70 [ 718.279355][T22840] ret_from_fork_asm+0x1a/0x30 [ 718.284674][T22840] [ 718.284674][T22840] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 718.292441][T22840] fs_reclaim_acquire+0x71/0x100 [ 718.297930][T22840] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 718.304300][T22840] __alloc_skb+0x1db/0x7a0 [ 718.309534][T22840] tcp_stream_alloc_skb+0x3f/0x580 [ 718.315275][T22840] tcp_sendmsg_locked+0x138c/0x5400 [ 718.321062][T22840] tcp_sendmsg+0x2f/0x50 [ 718.325857][T22840] sock_sendmsg_nosec+0x10e/0x180 [ 718.331446][T22840] sock_write_iter+0x2de/0x3e0 [ 718.338100][T22840] vfs_write+0x612/0xba0 [ 718.343081][T22840] ksys_write+0x150/0x270 [ 718.347973][T22840] do_syscall_64+0x166/0x520 [ 718.353127][T22840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.359586][T22840] [ 718.359586][T22840] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}: [ 718.367968][T22840] lock_sock_nested+0x41/0x100 [ 718.373286][T22840] inet_shutdown+0x6a/0x390 [ 718.378409][T22840] nbd_mark_nsock_dead+0x2cb/0x550 [ 718.384153][T22840] recv_work+0x1cee/0x1e10 [ 718.389952][T22840] process_scheduled_works+0xc3d/0x1630 [ 718.396220][T22840] worker_thread+0xa47/0xfb0 [ 718.401456][T22840] kthread+0x38b/0x480 [ 718.406067][T22840] ret_from_fork+0x514/0xb70 [ 718.411188][T22840] ret_from_fork_asm+0x1a/0x30 [ 718.417094][T22840] [ 718.417094][T22840] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 718.425102][T22840] __mutex_lock+0x19d/0x1550 [ 718.430236][T22840] nbd_queue_rq+0x373/0xff0 [ 718.435307][T22840] blk_mq_dispatch_rq_list+0x499/0x1990 [ 718.441667][T22840] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 718.448715][T22840] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 718.455265][T22840] blk_mq_run_work_fn+0x16c/0x300 [ 718.460863][T22840] process_scheduled_works+0xc3d/0x1630 [ 718.467608][T22840] worker_thread+0xa47/0xfb0 [ 718.472756][T22840] kthread+0x38b/0x480 [ 718.477374][T22840] ret_from_fork+0x514/0xb70 [ 718.482524][T22840] ret_from_fork_asm+0x1a/0x30 [ 718.488106][T22840] [ 718.488106][T22840] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 718.495360][T22840] __mutex_lock+0x19d/0x1550 [ 718.500499][T22840] nbd_queue_rq+0xc1/0xff0 [ 718.505641][T22840] blk_mq_dispatch_rq_list+0x499/0x1990 [ 718.511756][T22840] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 718.518869][T22840] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 718.525410][T22840] blk_mq_run_work_fn+0x16c/0x300 [ 718.530996][T22840] process_scheduled_works+0xc3d/0x1630 [ 718.537544][T22840] worker_thread+0xa47/0xfb0 [ 718.542697][T22840] kthread+0x38b/0x480 [ 718.547367][T22840] ret_from_fork+0x514/0xb70 [ 718.552512][T22840] ret_from_fork_asm+0x1a/0x30 [ 718.557828][T22840] [ 718.557828][T22840] -> #0 (set->srcu){.+.+}-{0:0}: [ 718.565076][T22840] __lock_acquire+0x164c/0x2de0 [ 718.570473][T22840] lock_sync+0xb3/0x130 [ 718.575630][T22840] __synchronize_srcu+0xc9/0x2f0 [ 718.581736][T22840] elevator_switch+0x1e8/0x7b0 [ 718.587409][T22840] elevator_change+0x2fa/0x480 [ 718.592733][T22840] elevator_set_default+0x375/0x440 [ 718.598681][T22840] blk_register_queue+0x3f3/0x4e0 [ 718.604277][T22840] __add_disk+0x6b8/0xdb0 [ 718.609333][T22840] add_disk_fwnode+0x100/0x3a0 [ 718.614908][T22840] nbd_dev_add+0x733/0xb60 [ 718.619880][T22840] nbd_genl_connect+0x96c/0x1cd0 [ 718.625547][T22840] genl_family_rcv_msg_doit+0x233/0x340 [ 718.631642][T22840] genl_rcv_msg+0x614/0x7a0 [ 718.636735][T22840] netlink_rcv_skb+0x226/0x4a0 [ 718.642218][T22840] genl_rcv+0x28/0x40 [ 718.646751][T22840] netlink_unicast+0x7bd/0x940 [ 718.652056][T22840] netlink_sendmsg+0x813/0xb40 [ 718.657395][T22840] sock_sendmsg_nosec+0x13a/0x180 [ 718.663002][T22840] ____sys_sendmsg+0x54e/0x850 [ 718.668338][T22840] ___sys_sendmsg+0x2a5/0x360 [ 718.673573][T22840] __x64_sys_sendmsg+0x1b1/0x290 [ 718.679741][T22840] do_syscall_64+0x166/0x520 [ 718.684980][T22840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.691436][T22840] [ 718.691436][T22840] other info that might help us debug this: [ 718.691436][T22840] [ 718.701685][T22840] Chain exists of: [ 718.701685][T22840] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 718.701685][T22840] [ 718.715383][T22840] Possible unsafe locking scenario: [ 718.715383][T22840] [ 718.722940][T22840] CPU0 CPU1 [ 718.728595][T22840] ---- ---- [ 718.734760][T22840] lock(&q->elevator_lock); [ 718.739376][T22840] lock(&q->q_usage_counter(io)#50); [ 718.747303][T22840] lock(&q->elevator_lock); [ 718.754429][T22840] sync(set->srcu); [ 718.758355][T22840] [ 718.758355][T22840] *** DEADLOCK *** [ 718.758355][T22840] [ 718.766773][T22840] locks held by syz.3.4165/22840: 6, last CPU#1: [ 718.773119][T22840] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 718.781793][T22840] #1: ffffffff912c6480 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 718.790989][T22840] #2: ffff88808b2cf9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 718.801390][T22840] #3: ffff888023386330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 718.811288][T22840] #4: ffff888023385db8 (&q->q_usage_counter(queue)#56){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 718.822321][T22840] #5: ffff8880233862a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 718.832208][T22840] [ 718.832208][T22840] stack backtrace: [ 718.838141][T22840] CPU: 1 UID: 0 PID: 22840 Comm: syz.3.4165 Not tainted syzkaller #0 PREEMPT(full) [ 718.847807][T22840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 718.858262][T22840] Call Trace: [ 718.862085][T22840] [ 718.865302][T22840] dump_stack_lvl+0xe8/0x150 [ 718.870649][T22840] print_circular_bug+0x2e2/0x300 [ 718.876107][T22840] check_noncircular+0x12f/0x150 [ 718.881162][T22840] __lock_acquire+0x164c/0x2de0 [ 718.886093][T22840] ? lockdep_unlock+0x5c/0xd0 [ 718.890794][T22840] ? __lock_acquire+0x1511/0x2de0 [ 718.896016][T22840] lock_sync+0xb3/0x130 [ 718.900197][T22840] ? __synchronize_srcu+0xb5/0x2f0 [ 718.905352][T22840] ? __synchronize_srcu+0xb5/0x2f0 [ 718.910496][T22840] __synchronize_srcu+0xc9/0x2f0 [ 718.915467][T22840] ? __pfx___synchronize_srcu+0x10/0x10 [ 718.921215][T22840] ? do_raw_spin_lock+0x12b/0x2f0 [ 718.926393][T22840] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 718.932495][T22840] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 718.938101][T22840] ? synchronize_srcu+0x20a/0x260 [ 718.943766][T22840] elevator_switch+0x1e8/0x7b0 [ 718.948741][T22840] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 718.954858][T22840] elevator_change+0x2fa/0x480 [ 718.960264][T22840] ? do_raw_spin_unlock+0xf5/0x200 [ 718.965504][T22840] elevator_set_default+0x375/0x440 [ 718.970765][T22840] ? __pfx_elevator_set_default+0x10/0x10 [ 718.976566][T22840] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 718.983619][T22840] ? blk_crypto_sysfs_register+0x11c/0x170 [ 718.989692][T22840] blk_register_queue+0x3f3/0x4e0 [ 718.994836][T22840] __add_disk+0x6b8/0xdb0 [ 718.999227][T22840] add_disk_fwnode+0x100/0x3a0 [ 719.004021][T22840] nbd_dev_add+0x733/0xb60 [ 719.008480][T22840] ? __pfx_nbd_dev_add+0x10/0x10 [ 719.013464][T22840] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 719.019298][T22840] ? bpf_lsm_capable+0x9/0x20 [ 719.024020][T22840] ? security_capable+0x7e/0x2c0 [ 719.029611][T22840] ? radix_tree_lookup+0x240/0x290 [ 719.035183][T22840] nbd_genl_connect+0x96c/0x1cd0 [ 719.040168][T22840] ? __pfx_nbd_genl_connect+0x10/0x10 [ 719.045568][T22840] ? rcu_is_watching+0x16/0xb0 [ 719.050391][T22840] ? trace_kmalloc+0x2a/0xf0 [ 719.055036][T22840] ? __kmalloc_noprof+0x38c/0x720 [ 719.060711][T22840] ? __nla_parse+0x40/0x60 [ 719.065169][T22840] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 719.071540][T22840] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 719.077916][T22840] genl_family_rcv_msg_doit+0x233/0x340 [ 719.083786][T22840] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 719.089890][T22840] genl_rcv_msg+0x614/0x7a0 [ 719.094460][T22840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 719.099528][T22840] ? __pfx_nbd_genl_connect+0x10/0x10 [ 719.105359][T22840] netlink_rcv_skb+0x226/0x4a0 [ 719.110236][T22840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 719.116070][T22840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 719.121389][T22840] ? down_read+0x2be/0x330 [ 719.126202][T22840] genl_rcv+0x28/0x40 [ 719.130238][T22840] netlink_unicast+0x7bd/0x940 [ 719.135126][T22840] netlink_sendmsg+0x813/0xb40 [ 719.140021][T22840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.145787][T22840] ? apparmor_socket_sendmsg+0x98/0x360 [ 719.151629][T22840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.157030][T22840] sock_sendmsg_nosec+0x13a/0x180 [ 719.162079][T22840] ____sys_sendmsg+0x54e/0x850 [ 719.166880][T22840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 719.172194][T22840] ? import_iovec+0x73/0xa0 [ 719.176723][T22840] ___sys_sendmsg+0x2a5/0x360 [ 719.181540][T22840] ? __lock_acquire+0x747/0x2de0 [ 719.187473][T22840] ? __pfx____sys_sendmsg+0x10/0x10 [ 719.192880][T22840] ? futex_wait+0x2a2/0x390 [ 719.197431][T22840] ? __fget_files+0x2a/0x420 [ 719.202053][T22840] ? __fget_files+0x3a2/0x420 [ 719.206747][T22840] __x64_sys_sendmsg+0x1b1/0x290 [ 719.211706][T22840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 719.217208][T22840] do_syscall_64+0x166/0x520 [ 719.221832][T22840] ? trace_irq_disable+0x3b/0x140 [ 719.226934][T22840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.233020][T22840] ? clear_bhb_loop+0x70/0xc0 [ 719.237720][T22840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.243647][T22840] RIP: 0033:0x7f2f38d9e2d9 [ 719.248093][T22840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.268767][T22840] RSP: 002b:00007f2f39d43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.277224][T22840] RAX: ffffffffffffffda RBX: 00007f2f39025fa0 RCX: 00007f2f38d9e2d9 [ 719.285232][T22840] RDX: 0000000000004040 RSI: 0000200000000700 RDI: 0000000000000007 [ 719.293231][T22840] RBP: 00007f2f38e35888 R08: 0000000000000000 R09: 0000000000000000 [ 719.301228][T22840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.312017][T22840] R13: 00007f2f39026038 R14: 00007f2f39025fa0 R15: 00007ffe97fc87a8 [ 719.320661][T22840]