last executing test programs: 2.067143494s ago: executing program 1 (id=5461): r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000280)={0x3}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x207, 0x7, 0xfe, 0x0, 0x0, @multicast}, 0x10) poll(&(0x7f0000000080)=[{r1, 0x4000}], 0x1, 0xff) 1.921261006s ago: executing program 2 (id=5462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00v'], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800, 0xa) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x1a0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast2, @remote, [0xffffffff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'bridge_slave_1\x00', '\x00', {0xff}, {}, 0x2b, 0x93, 0x6, 0x6f}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2, [0x0, 0xffffffff, 0xff000000, 0x1feffff00], [0x0, 0x0, 0x0, 0xffffff00], 'netdevsim0\x00', 'pim6reg0\x00', {}, {}, 0x5e, 0x5, 0x1, 0x4be1cf1b716d4bcc}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0xe, 0x4, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00', {0xfff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x3013}, {r2, 0x4}, {r1, 0x23b2}, {r1, 0x4000}, {r1, 0x356}, {r3, 0xa2d8}], 0x6, &(0x7f0000000200)={r5, r6+60000000}, &(0x7f0000000240)={[0x200]}, 0x8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14a800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.921027242s ago: executing program 4 (id=5463): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$kcm(0x2, 0x7, 0x73) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) close(r1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x2, 0x5, 0x1, 0x100, 0x3, [0x8, 0x7349dc3c, 0x7, 0x6]}) 1.918344614s ago: executing program 1 (id=5466): syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000440)) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}, 0x0) (async) socket$kcm(0x23, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000440)) (async) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) (async) 1.833382159s ago: executing program 1 (id=5467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @none={0x0, 0x3}}, 0x14) 1.60761044s ago: executing program 1 (id=5470): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x5, 0x7, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x3ef, 0x10000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r10, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)={0x14, r11, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004) socket(0x10, 0x3, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000600000000000019078ac120001ac1414aa03049078030200004100000000000000002f0000ac14140a0000000044246af3e000000100000001ac1e010100007fffac1e000100000002ac14141800000006440c0f51e000000100000001"], 0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 1.602308107s ago: executing program 2 (id=5471): r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000000, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@deltaction={0x60, 0x31, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x60}}, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r7, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x80010, r2, 0x9c5e2000) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000000)={0x6, 'netdevsim0\x00', {}, 0xd}) 1.361270978s ago: executing program 4 (id=5472): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/time_for_children\x00') ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "a040d3c98e963702b52747fd3328bf06"}) ioctl$NS_GET_OWNER_UID(r0, 0x8008b70d, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 1.211311096s ago: executing program 4 (id=5476): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfb, 0x7ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000008f00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r2}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pS \x00'}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000040000ab0155f5555dfa4c3fba000000000000000000b7080000000000007b8af8ff00000000b7080000000001007bbfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x0, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x4000}, {}, {}, {0x0, 0x0, 0x6cc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r8, 0xc040ff0b, 0x2000000000) syz_emit_ethernet(0x79, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c20000000180c200000008004503006b00000000002f907800000000e000000124806558000000000000fffd100008000003000086dd57a197f243aa2abb5f831e11b1080088be000000001000a000010000000000000008000000000000000800655800000000"], 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) r11 = socket(0x15, 0x5, 0x0) poll(&(0x7f0000019080)=[{r10, 0x18}, {r11, 0x134}], 0x2, 0x401) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x0, 0x440, 0xffffffff, 0x0, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010101, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x29}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.071674365s ago: executing program 3 (id=5477): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1410, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x41804) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040005}, 0x4040) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000200)='\x00', 0x2, &(0x7f0000000240)={@_ha_fsid={[0x0, 0x5]}, {0x5, 0x7f, 0x0, 0xf}}, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4dbd, 0x7}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x1406, 0x800, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20}, 0x810) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f00000006c0)="3d67cb1a11f61cc2b17d527a348886a775195e20c3b5a9d4379d5791c8d71960c6ae3274bfcba7e550ddebec2c3d9aa99954857877fddbe428c6b1f462f086a415f2e4da3f6a69980caf1f89ca78aaf6dd439baee2c00cafd0825e73a906d87ddaa413707d79c6127c9024fa27ffac4b54df3ae98b74b438497b9e1b5ed8d1b318d0b574b835fa67fd1256348b22db0f2191", 0x92, 0x40, &(0x7f0000000780)={0xa, 0x4e22, 0x1, @mcast2}, 0x1c) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x54, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "3de8386c8650cbfcbee5329d8c7d8e3bcf2a1e404cb0bd7b55662f53e16f29039ea4860bc773646dabef3572bc201c8708f0319d7d5a460a304b315ecdb2890793a842db5dd678ca"}]}]}, 0x68}}, 0x44005) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000940)={0x2, 0x2, 0x402, 0xc, 0xa, 0x8}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x14, 0x8, 0x70bd2a, 0x25dfdbff, {0x1f, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x12, 0x1, "3b0f8b419507a2165b5c3e27d62f"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000a80)={0x0, 0x0, 0x30}, &(0x7f0000000ac0)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000b00)=@assoc_value={r6, 0xfffffffa}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfe42, 0x50}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r8, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000e00)={0x1, [0x0]}, &(0x7f0000000e40)=0x8) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r1) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000f40)={0x9fbd, 0x800}) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x7c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000010c0)={'NETMAP\x00'}, &(0x7f0000001100)=0x1e) r9 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000000) 1.07125803s ago: executing program 2 (id=5478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="df4800000000000000000c0000000c000380040005000400038018000180140002007369743000"/50], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000041fa1ec7864fd5a1391f924ee3a8d2fd69d9efdb617caf8cb736bd1482b57400"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.070598531s ago: executing program 4 (id=5479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd000000100001000c0808004149224e06040800", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) recvfrom$inet6(r0, &(0x7f0000000180)=""/126, 0x7e, 0x100, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r0, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd000000100001000c0808004149224e06040800", 0x58}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) recvfrom$inet6(r0, &(0x7f0000000180)=""/126, 0x7e, 0x100, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async) 1.068806659s ago: executing program 0 (id=5480): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0) 873.081062ms ago: executing program 4 (id=5481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x1b, {0x4e22, 0x4e23}}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x100, 0xfffffffe, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x7e}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r0}}}]}, 0x34}}, 0x20000400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept(r2, 0x0, 0x0) (async) r3 = accept(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000003c0)=""/245, 0xf5}], 0x2}, 0x7}], 0x1, 0x100, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003140)={0x108, 0x23, 0x200, 0x70bd29, 0x25dfdbfe, {0xd}, [@nested={0xf1, 0x2d, 0x0, 0x1, [@typed={0x4, 0xfb}, @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@local}, @generic="2b4e0199ebf375efe2218d47d5d101e978dfedbb72789a6cb3d99d88f208cc9f98cdbf87f5c1", @typed={0x8, 0x18, 0x0, 0x0, @pid}, @generic="8e812eb888a03abd46e2936b83e852b51252346d232561ce54800a97f64decdba5094ba193f2f6f35266240e5e8b9026cdcf0b873354a50e74e37dbe23f2139730989bc5f799e6784906f64dfe7ea59c1d6937aebe96f3e82af2dbd7ff4521108b895da11110cee3c01e58dbd4b87c3977e80c7c5439ea2f06fe351b14de927ca8e3c7d2f5231584342978cdae95b3f3b980a226f89812cdb7152ce1ad81e0d3443aaca0ae127b"]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40800}, 0x40086) socket$tipc(0x1e, 0x5, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4) (async) sendmsg$tipc(r5, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x7fd1087893081166}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0x22, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7c}, {}, {}, [@call={0x85, 0x0, 0x0, 0x23}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0xb, 0x9, 0x30, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) accept4(r4, 0x0, 0x0, 0x400000000000000) sendmsg$alg(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000640)="5ec0c53c1b73486944da2f41dad1422c3420ad60dc6359b0271d2c77970ea12ccf8d1b519f6ed522c321b081850fe526781525b9f9c8f8c6058c96b98e705251a9f78aa925fd7917817e26c934f17b38af0ede50f0c752d5c980f659cefffb343a", 0x61}, {&(0x7f0000000980)="10377bd7c65508f3d69cea327743784ec6f5a579bfe5d27dab5552a755182bc84e2e3ba3bc09dd0798b50016cc976dd5db01a5673d547ae751451f05895d40306275343142fc59b9802e6269744899a5fb88c3475c7449524f3064305100594e2e0edad2177dd80039c3372b4e3f8628900d5bd9089bbaff61ecd26b57a56fd7dd3bb362483e67c4d2a5615d528f9e12cffd1f814d269f6148520594651faa8510217de015147e729597a1e866ebfe5d991e823420c2b69d1f5f1ffe56d45e76cfebbbc3402051937f4e397e3185b6097652bd2e31a7f8ae3375c18a4410741c7d28ca02df1f3d", 0xe7}], 0x2, &(0x7f0000000ac0), 0x0, 0x80}, 0x4) (async) sendmsg$alg(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000640)="5ec0c53c1b73486944da2f41dad1422c3420ad60dc6359b0271d2c77970ea12ccf8d1b519f6ed522c321b081850fe526781525b9f9c8f8c6058c96b98e705251a9f78aa925fd7917817e26c934f17b38af0ede50f0c752d5c980f659cefffb343a", 0x61}, {&(0x7f0000000980)="10377bd7c65508f3d69cea327743784ec6f5a579bfe5d27dab5552a755182bc84e2e3ba3bc09dd0798b50016cc976dd5db01a5673d547ae751451f05895d40306275343142fc59b9802e6269744899a5fb88c3475c7449524f3064305100594e2e0edad2177dd80039c3372b4e3f8628900d5bd9089bbaff61ecd26b57a56fd7dd3bb362483e67c4d2a5615d528f9e12cffd1f814d269f6148520594651faa8510217de015147e729597a1e866ebfe5d991e823420c2b69d1f5f1ffe56d45e76cfebbbc3402051937f4e397e3185b6097652bd2e31a7f8ae3375c18a4410741c7d28ca02df1f3d", 0xe7}], 0x2, &(0x7f0000000ac0), 0x0, 0x80}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x6f, 0xa2, &(0x7f0000000040)="5d5e49779dded3a6c22d5fd7bab08f727f7ad7d65245603a52f116f5c4374512c728d056c24b3e0269a4b086b7141c763229ceb8578b7094081ada75872daac0caf872c6636063c8c955500f42de2894c5db8e36c11f5ed60dba8cf3521b9982f3d23ffcfb3dc55ed032ef8335ebce", &(0x7f0000000140)=""/162, 0x10, 0x0, 0x4a, 0xd5, &(0x7f0000000200)="48eaa6a2670dc5fe7c4a04c68268f1b3c050b03a5ea979e96a2966a6a24d04a87f3e4e2af61777d334af7bfb9adc22ff4c21d42749d7df04c22aa5d602dffb9fbedd44934a58878f21e9", &(0x7f0000000280)="43704b43dbb9c1150f46eadd97755ebc71ee6e6b08064a74d76d5b359bef2d9e45d99db36be127953c11094aaa639459d35e91c42a9ea56cb779cc7003d5b9dda4d96ca959b5f83db00473a230d6f9e9c5b468e3233eb65ef49337e5f1e9ce263c87f9fd1ae9e2cb4109e5c80648df5917829e9fc86530075576c707cccc91fc9d11432b8ed73f15238f080008e9915d94a1f1cb89dc659b092d6865386df8929645a38d44c55abab5d1307825eef1c44766e2d1a8cbc3e4047d804ad12360894a41c099c879e530efa5e73f819fef7263944226b0", 0x3, 0x0, 0xbc4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x6f, 0xa2, &(0x7f0000000040)="5d5e49779dded3a6c22d5fd7bab08f727f7ad7d65245603a52f116f5c4374512c728d056c24b3e0269a4b086b7141c763229ceb8578b7094081ada75872daac0caf872c6636063c8c955500f42de2894c5db8e36c11f5ed60dba8cf3521b9982f3d23ffcfb3dc55ed032ef8335ebce", &(0x7f0000000140)=""/162, 0x10, 0x0, 0x4a, 0xd5, &(0x7f0000000200)="48eaa6a2670dc5fe7c4a04c68268f1b3c050b03a5ea979e96a2966a6a24d04a87f3e4e2af61777d334af7bfb9adc22ff4c21d42749d7df04c22aa5d602dffb9fbedd44934a58878f21e9", &(0x7f0000000280)="43704b43dbb9c1150f46eadd97755ebc71ee6e6b08064a74d76d5b359bef2d9e45d99db36be127953c11094aaa639459d35e91c42a9ea56cb779cc7003d5b9dda4d96ca959b5f83db00473a230d6f9e9c5b468e3233eb65ef49337e5f1e9ce263c87f9fd1ae9e2cb4109e5c80648df5917829e9fc86530075576c707cccc91fc9d11432b8ed73f15238f080008e9915d94a1f1cb89dc659b092d6865386df8929645a38d44c55abab5d1307825eef1c44766e2d1a8cbc3e4047d804ad12360894a41c099c879e530efa5e73f819fef7263944226b0", 0x3, 0x0, 0xbc4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0xfffffffe}, 0x8}, 0x94) 872.489669ms ago: executing program 3 (id=5482): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001804000000000000180000001800000002000000000000000000000a000000400000000000000001000000000000"], &(0x7f00000006c0)=""/184, 0x32, 0xb8, 0x1}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 872.200539ms ago: executing program 2 (id=5483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x1407, 0x4, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}}, 0x0) (async) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) 864.980064ms ago: executing program 0 (id=5484): r0 = socket(0x10, 0x80003, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r2], 0x50) (async) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESDEC=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 764.52681ms ago: executing program 3 (id=5485): r0 = socket$inet(0x2, 0x3, 0x81) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x4, [0xfff, 0x9, 0xa, 0x9]}, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r3, &(0x7f0000001f40)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000180)=""/201, 0xc9}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/236, 0xec}], 0x6, &(0x7f0000000640)=""/20, 0x14}, 0x2}, {{&(0x7f0000000680)=@phonet, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/9, 0x9}, 0x3}, {{&(0x7f0000000780)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/82, 0x52}, {&(0x7f0000000880)=""/92, 0x5c}, {&(0x7f0000000900)=""/191, 0xbf}, {&(0x7f00000009c0)=""/66, 0x42}], 0x4}, 0x6}, {{&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/50, 0x32}, {&(0x7f0000000b40)=""/192, 0xc0}], 0x2, &(0x7f0000000c40)=""/192, 0xc0}}, {{&(0x7f0000000d00)=@caif, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000d80)=""/193, 0xc1}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x2, &(0x7f0000001ec0)=""/65, 0x41}, 0x1}], 0x5, 0x12063, &(0x7f0000002080)={0x77359400}) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0xe0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x53, 0xc, "5454f7c60adff8ad14667753c4f08028d520e587bf950472bf65e3722d964777e5d157e8127401d59bcb3bcd0c00901b8224c618a73bd98d933d53f91b471f63cddc280bdc344f3899ba10c9f25ea2"}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4ea80e5c}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x154}, 0x1, 0x0, 0x0, 0x40901}, 0x2004c854) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 689.770947ms ago: executing program 1 (id=5486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) close(0x3) (async) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000040)="95", &(0x7f0000000080)=@tcp6, 0x2}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket(0x28, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x2}]}]}}, 0x0, 0x3a}, 0x20) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) accept4$unix(r5, 0x0, 0x0, 0x0) (async) accept4$unix(r5, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x508, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc9a37bbfe57280d3) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x508, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc9a37bbfe57280d3) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 689.126562ms ago: executing program 2 (id=5487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x8a4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r3, 0x1, {0x2}, 0xff}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x24004043) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rdma_dest={0x18, 0x114, 0xc}], 0x18}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r11, &(0x7f0000007600)={0x0, 0x0, &(0x7f00000075c0)={&(0x7f0000003f40)={0x1c, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), &(0x7f0000000140)='%pS \x00'}, 0x20) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0xff00) sendmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="000000000000000000ea", 0xa}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xa, 0xffff}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 685.248166ms ago: executing program 0 (id=5488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="711093000000000095"], &(0x7f00000000c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff07}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0xfdff, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 673.318477ms ago: executing program 4 (id=5489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc) r3 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xff05, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000090}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x18) r7 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) r9 = epoll_create(0x11ffffe) socket(0x1, 0x1, 0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x40000001}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000080)={0x2000a212}) shutdown(r7, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$OCFS2_IOC_UNRESVSP64(r10, 0x4030582b, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffffb, 0x2, 0x0, 0x80000000}) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=r2, @ANYBLOB="000000e7ff05000014003500626f6e643000000000000000000004000a0001"], 0x40}}, 0x0) 529.132135ms ago: executing program 3 (id=5490): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000), 0x4) 438.076047ms ago: executing program 1 (id=5491): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000f320c9f97000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="81b8000000000000140012800b000100697036677265000004"], 0x34}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0xf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000380)=r5) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000003c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001580)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001640)={'ip6tnl0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x8, 0x4, 0x46, @remote, @private2, 0x97, 0x8, 0x0, 0x4}}) sendmsg$inet(r6, &(0x7f0000001880)={&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000540)="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", 0x1000}], 0x1, &(0x7f0000001680)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x89, [@broadcast, @empty]}, @cipso={0x86, 0xb, 0x2, [{0x7, 0x5, "8d8941"}]}, @noop, @lsrr={0x83, 0xf, 0x21, [@dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}]}, @generic={0x88, 0x12, "1c87172723f19f894cbfc55972620121"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010102, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xf0, [@private=0xa010101, @multicast1, @private=0xa010102, @multicast1, @rand_addr=0x64010102, @private=0xa010100, @broadcast]}, @end, @timestamp={0x44, 0x8, 0xfe, 0x0, 0x7, [0xd]}, @timestamp_prespec={0x44, 0x14, 0xa7, 0x3, 0x7, [{@rand_addr=0x64010102, 0x3b0fb7eb}, {@remote, 0x1}]}, @rr={0x7, 0x2b, 0x43, [@multicast2, @private=0xa010102, @private=0xa010101, @empty, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x11}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x47, 0x2, [{0x7, 0xe, "04dbcfb0b8deb0db2c1627c6"}, {0x2, 0x3, "e2"}, {0x1, 0x5, "d370fc"}, {0x2, 0x2}, {0x7, 0x9, "b6b0a73b5f8025"}, {0x0, 0xf, "a5871c654dcf7ddcb77c4ab605"}, {0x6, 0x11, "d35b82a841c65e3a214dd2fc6d79e0"}]}, @timestamp_addr={0x44, 0xc, 0xd2, 0x1, 0x3, [{@multicast1, 0x1}]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xb3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @empty]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x1e0}, 0x8) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r6], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 435.246795ms ago: executing program 0 (id=5492): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x7, [0x9, 0x0, 0x9, 0x3, 0x7, 0x800, 0x93]}, &(0x7f00000001c0)=0x12) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x90) 262.363196ms ago: executing program 3 (id=5493): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) 180.439323ms ago: executing program 0 (id=5494): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @empty}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x4}}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='macvlan0\x00', 0x10, 0x5, 0x2}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x5, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @multicast, @local, @broadcast, @mcast2}}}}, &(0x7f0000000140)={0x1, 0x4, [0x47b, 0x750, 0x5d0, 0xea4]}) (async) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000180)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"d92e301d0c03356592051b48784740d3", r1, r2, {0x539, 0x7}, {0xfdc, 0x1}, 0xfffffffffffeffff, [0x9, 0x4, 0xa6, 0x80, 0x1, 0x9, 0x800, 0x5, 0x81, 0xfffffffffffffff8, 0x1, 0x7, 0x7, 0x5, 0x8, 0x6]}) (async, rerun: 32) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) (rerun: 32) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000000500)={0xfe, 0x1, 0xa9b, 0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000540)=0x102181177dff15f0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24004041) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14) (async) r8 = socket(0x2, 0x800, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000780)={r8, 0x3, 0xfffffffffffff000}) (async) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@getneightbl={0x14, 0x42, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x11) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@getchain={0x3c, 0x66, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xd}, {0xfff3, 0x9}, {0x16, 0x7}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffff3f5}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r9, 0x8008f511, &(0x7f00000009c0)) (async) ioctl$int_out(r6, 0x5460, &(0x7f0000000a00)) getsockopt$inet_mreqn(r8, 0x0, 0xa8b7c0496719b07, &(0x7f0000000a80)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000001840)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001800)={&(0x7f0000000b00)=@newtfilter={0xce8, 0x2c, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5, 0x6}, {0x9, 0x4}, {0x1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xc80, 0x2, [@TCA_CGROUP_POLICE={0xc70, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x12}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x3, 0x5, 0x40, 0x3, 0xffffffff, 0x36e8, 0xb9f, 0x2a, 0x3, 0x7, 0x1, 0x5, 0x1, 0x6, 0x1, 0x5, 0xe, 0xe86b, 0x545ff006, 0x10, 0x1000, 0x0, 0x2, 0x5, 0x1, 0x7, 0xfffffffd, 0x800, 0x6, 0x643, 0x7, 0x6f9, 0x8001, 0x9, 0xa8, 0x8, 0xffffff00, 0x2, 0x3, 0x5, 0xb02, 0x1, 0x8, 0x20, 0x3, 0x0, 0xe, 0x1, 0x3, 0x1, 0x8f6, 0x55, 0x48, 0x200, 0xe104, 0xa70f, 0x7, 0x1000, 0x5, 0x7, 0xb, 0x80000000, 0x8, 0x5, 0x6, 0x8, 0x8, 0x48a, 0x4, 0xffffffff, 0x1, 0x0, 0xdde, 0x3d0b9698, 0x6, 0x7fffffff, 0x2b, 0x4, 0x0, 0x4, 0x0, 0x62e0, 0xc, 0x2, 0x8, 0x1, 0x3, 0x40, 0x9, 0x11, 0x7, 0x2, 0x1, 0x8ed, 0x1, 0x3ff, 0x3874, 0x729, 0x200, 0x77, 0xff, 0x9, 0x4bd, 0x2, 0x9c3, 0x4, 0x9, 0x3ff, 0x2d34, 0x99, 0x0, 0x7, 0x7, 0x6, 0x5, 0x1, 0x33, 0x3, 0x2449, 0x10000, 0x8, 0x2ebf, 0x5, 0x2, 0x25, 0x5, 0x3, 0x7, 0x4, 0x1, 0x7, 0x81, 0x400, 0x155, 0x400, 0x6, 0x1, 0xffffffff, 0x5, 0xfff, 0x1, 0x7ff, 0x7, 0x8, 0x81, 0x4, 0x4, 0x9, 0x0, 0xdd, 0x4, 0x8, 0x81, 0x8, 0x7, 0x2, 0x8, 0x0, 0x7, 0x8, 0x5, 0x6, 0x0, 0x4, 0x0, 0x9, 0x400, 0x7, 0x7, 0x3, 0x2, 0xe, 0x5c15, 0x5, 0x2, 0x3, 0x1, 0xfff, 0x8, 0x5, 0x7, 0x9, 0x2, 0x1, 0x6, 0x4, 0x8001, 0x5, 0xfffffff0, 0x8, 0x1, 0x1, 0x6, 0xb7d, 0x728e, 0x7, 0x3, 0x5, 0xf09b, 0x6, 0x0, 0xc, 0xffffff7b, 0x7, 0x523, 0x7fffffff, 0xc, 0x2, 0x5, 0x5, 0x4, 0x2, 0x5, 0x80, 0x6, 0x9, 0x0, 0x80, 0x200, 0x0, 0x100, 0x9, 0x8, 0x2, 0x9, 0xee8, 0x8, 0x7, 0x0, 0xe, 0xa6a6, 0xe05, 0x7, 0x6, 0x4, 0x8, 0x9, 0x1, 0x7, 0x22a, 0x7f, 0x8, 0x51b, 0x7ff, 0x48d3018c, 0x5, 0x501, 0x7, 0x7, 0x7, 0x0, 0xfffff000, 0x4, 0x40]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xb, 0x8001, 0xfffffeff, 0x2, 0x2, 0x6, 0x4, 0xc8, 0x100, 0x26, 0x1, 0x8, 0xeb0, 0x6, 0x1, 0x2, 0x3, 0x5, 0x713b18de, 0x1, 0x401, 0x8, 0xa2ab, 0xc, 0xfebb, 0x1, 0x6, 0xffffffff, 0x7, 0x6ab, 0x86d5, 0x31, 0x5, 0xf0000000, 0x0, 0x6, 0x3, 0x8, 0x1, 0x1, 0x4, 0x1cd47051, 0x5, 0xd, 0xfffffff8, 0x2, 0x0, 0x3f, 0x3, 0xa23, 0x6, 0x9, 0x0, 0x8, 0x840, 0x400, 0x1ff, 0x8, 0x6, 0x6, 0x8, 0x70cb, 0x1, 0x10, 0x7, 0x5, 0xfffffe01, 0x1, 0x6, 0x0, 0x10001, 0x7, 0x0, 0x8, 0x71, 0xfffffff6, 0x1000, 0x101, 0x8000, 0x76, 0x7, 0x2, 0x3, 0x8000, 0x1, 0x2, 0x1, 0x4, 0xbf8, 0x5, 0x7b4c, 0x3, 0xc, 0xff, 0x8, 0x5, 0x0, 0x8, 0x5, 0x9, 0x6, 0x1, 0x514, 0x7f, 0x9, 0x4, 0x10, 0x8, 0xc, 0x1, 0x1, 0xe3, 0x8, 0xffff0001, 0x8, 0x42, 0x200, 0xe7b, 0x5, 0x0, 0xdbbe, 0x7fffffff, 0x6, 0x8d, 0x8, 0x7256, 0x3, 0x5, 0x1, 0x3, 0x80, 0x6, 0x3, 0x2, 0xffffffff, 0x1, 0xfffffff8, 0x3, 0xaf, 0x5, 0x401, 0xf, 0x8, 0x1, 0x40, 0x8, 0x0, 0x43d, 0x2, 0x7, 0xd0, 0x6, 0x8, 0x0, 0x8, 0xffff, 0x200, 0x8, 0x9, 0xc, 0x76e, 0x5, 0x28a, 0x9, 0x200, 0x2, 0xb39a, 0x1000, 0x5, 0x3, 0x40, 0x0, 0x5, 0x8, 0x9, 0x3, 0x9f19, 0x9, 0x5, 0x9, 0x5, 0x8, 0x8, 0x1, 0xfe, 0x36370c8f, 0xe, 0x4, 0xeae5, 0x468, 0x8001, 0x1, 0x200, 0x8, 0x80000001, 0x4, 0x6, 0x3d7, 0xa13, 0x8578, 0x3, 0x2aa, 0xf3, 0x0, 0x9, 0x7, 0x7, 0x9, 0x1, 0x7, 0xb9e4, 0x9, 0x7fff, 0x7, 0x4, 0x0, 0x6, 0x6, 0x2, 0x1, 0x5, 0x8000, 0x8, 0x339e, 0x1, 0xd3e, 0x2ff7, 0x3, 0x6, 0x9, 0x0, 0xacb000, 0x7, 0x0, 0x9d, 0x4, 0x40, 0x6, 0x5, 0xffffffff, 0x0, 0x8, 0x2, 0x2, 0x0, 0x5, 0xd, 0x6, 0x9, 0x80, 0xfffffff8, 0x4, 0x3, 0x1, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x38, 0x5, 0xfffffff8, 0xc00000, 0x2, 0xf3d, 0x7, 0x6, 0x100, 0x5, 0x3ff, 0x4, 0x7f, 0x5, 0x3, 0x2, 0x6, 0x9, 0x7, 0xc0000000, 0xfc, 0x5, 0x7fffffff, 0x3ff, 0x7ff, 0x7, 0xd762, 0x3, 0x2, 0x0, 0x5, 0x6, 0x8, 0x8, 0xa8, 0x2, 0xda, 0x4, 0x1800, 0x8, 0x9, 0x80000000, 0x2, 0x0, 0x7fff, 0x0, 0x9, 0x8f, 0x0, 0x2, 0x9, 0x100, 0x3, 0x2, 0x8, 0xc, 0x9, 0xfff, 0x845, 0xfff, 0x47, 0x31b, 0xffff26fd, 0x4, 0x1, 0x7, 0x8, 0xfffffc2e, 0xb, 0x2, 0x10000, 0xac, 0x8001, 0x95, 0x9, 0x1020, 0x7, 0x1, 0x40, 0xd, 0x80000000, 0x426c, 0x5, 0x752, 0x3, 0xfff, 0xffff7bcd, 0x80000001, 0x4, 0x80000000, 0x1, 0x6, 0x4, 0x8, 0x5, 0x4, 0xfffffffa, 0x3, 0x3, 0x1, 0x52d0, 0x7, 0x0, 0x9, 0x793, 0x1, 0x5, 0x200, 0x948, 0x7, 0xc21, 0x9, 0xbd, 0x3, 0x80000001, 0x1000, 0xfffffff2, 0xfffeffff, 0xdbb, 0xffffff80, 0x4, 0xff, 0x2, 0x4, 0x9, 0x6, 0x5, 0x1, 0x0, 0x102a, 0x5, 0xee, 0x2, 0x1, 0x5, 0x4, 0x2, 0xfffffff7, 0xd, 0x9, 0x8, 0x3, 0x6, 0x59f778b6, 0x7f, 0x1, 0x6, 0x0, 0x2a6, 0x81, 0x1, 0x3, 0xba, 0x1, 0x0, 0x3, 0xef26, 0x0, 0x80000001, 0x0, 0x13e, 0x56, 0x3, 0x2, 0x9, 0x0, 0x4, 0x984, 0x10, 0xffffffe8, 0x40, 0x401, 0x1, 0x3, 0xfffffffa, 0x7, 0xe2cc, 0x0, 0x3, 0x10, 0x2, 0x6, 0x1, 0x3, 0x3, 0x3, 0x2, 0x9, 0x3ff, 0x5, 0x2, 0x66ee, 0x2, 0x2, 0x7, 0x1, 0x8, 0x3ff, 0xc, 0x8, 0xd, 0xfff, 0x5, 0x6, 0xffffffff, 0x6, 0x3ff, 0x5, 0x5, 0x2, 0x3, 0x4, 0x3, 0x4, 0xae, 0x7, 0x6, 0x5195, 0x5, 0x8, 0x3, 0xe522, 0x8, 0xf, 0x2896, 0x0, 0x5297, 0x7, 0x4, 0x1, 0x7, 0x81, 0x9, 0x6, 0x3, 0x3ff, 0x1, 0x800b, 0x101, 0xffff7da2, 0x7, 0x3, 0xffffc46b, 0x4, 0xe, 0x0, 0x6, 0xfffffff9, 0x0, 0x9, 0x6, 0x3, 0x9, 0x8000, 0x1, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x1000, 0x101, 0x3b, {0x5f, 0x0, 0x22, 0xffff, 0x4, 0x1}, {0x2, 0x1, 0x2, 0xe, 0x7, 0x8}, 0x8001, 0x73e95deb, 0x6}}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x1, 0x81}}, @TCA_RATE={0x6, 0x5, {0x92, 0x4}}]}, 0xce8}, 0x1, 0x0, 0x0, 0x4000005}, 0xc091) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000002000)={{r6, &(0x7f0000001880)='\x00', 0x4200, &(0x7f00000018c0)={@_ha_fsid={[0x0, 0xb2540000]}, {0x220e, 0x2fea, 0x3, 0x3aace8c3}}, 0x8, &(0x7f0000001900)={@_ha_fsid}, &(0x7f0000001940)=0x9}, 0x8, &(0x7f0000001f00)=[{0x2, 0x5, &(0x7f0000001980)='cgroup\x00', &(0x7f00000019c0)="3af5", 0x2, 0x5a}, {0x2, 0x4, &(0x7f0000001a00)='n\xaa\'\\}\x00', &(0x7f0000001a40)="4b3f86b4564cc634f68fb04961b8d74270db6d3de823bcf44b3363bc645190e35db7ce613f", 0x25, 0x2}, {0x1, 0x1ff, &(0x7f0000001a80)='macvlan0\x00', &(0x7f0000001ac0)="f484b563f62d077c6c2cab0396eec2409426c9199a951feec60f127a454ac2377bde93f67b803317b7abaf973e59a5", 0x2f, 0x10}, {0x1, 0x9, &(0x7f0000001b00)='\\\x00', &(0x7f0000001b40)="f58d84f50db56f1645b08c627f0a2234566c949bd1873e688aaff7791ba35ac8b33f88f6e46ec8e793f92466b27643aad8726a5e5cbd7335e1329c39ed5db4152a590f1db50c005d3a0a58d4562f3d86c790e710859710bcbc77d8e114dfb30fd7a27c60c8245126a2ac140f3a1c0e9947a51f645dfcec10e829b4d43a88287fc69644d56b198e85d7337a558faec5864eca19d6de2c113d9cd42f84ec197cfe970ef1b58481343c0a70c794e582d9990f1761fc5b6a638db02efe390546125912e0", 0xc2, 0x12}, {0x2, 0xd, &(0x7f0000001c40)='.\xf1&\'+.++]\x00', &(0x7f0000001c80)="e08b898eed6d1b6814fa4fa0a01af217568ce3db0bb69454e8dbf0ef592aee173f3720d2ddc8c06a4b395af57eed4e", 0x2f, 0x40}, {0x2, 0xffffff16, &(0x7f0000001cc0)='/proc/sys/net/ipv4/tcp_congestion_control\x00', &(0x7f0000001d00)="765bc07faf39a9b4dfb0039500649472e0a00a2e8ca0c9f84bfa038ed8d73a90bd29f22f9fab7154e5bdf97a473838bd89f5526032ee2efc9a4cd142c9e5f481737ab82b643428d4b54ca01a635c7d4c89916d2ce308cb2d8b182ddeef589c2bec33abd19ff373b2a8bee8a71b60961dc7", 0x71, 0x8}, {0x2, 0x1, &(0x7f0000001d80)='cgroup\x00', &(0x7f0000001dc0)="fec17aa0c84413c0432fc3005beed0b14788c86426f6", 0x16}, {0x3, 0x1, &(0x7f0000001e00)='R,\'%\x00', &(0x7f0000001e40)="aa09e7cfa63b2ad8544c45782f159436b1ca457890cf3b9c28a56e68ed4c6ac613cf8f6bf84b15e36c5c85d6f1ae2dfa61660391da05e15948bb8e00c95550feab6fe3ebc1fb0d3583d1a6ce9eb884859aedbb14b8d6ab351cad59ee947b5406b98f963a8acd241925be06006a1ad489649c10c74b27860b3f0c256dfc6104f630b2d92c501b13727725e10814b9d5c3095a34e9bd6304d79f873072c0d6fc96f8b639e64683573d17e8e398198a18f9b170811b70319830db843740cfa56492", 0xc0, 0x20}]}) sendmsg$nl_route(r11, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x7, 0x3, 0x0, 0x0, 0xc, 0x2}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000021c0)={'vxcan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002200)={'syzkaller1\x00', 0x0}) (async) getsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000002240)={@loopback, 0x0}, &(0x7f0000002280)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000002440)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002400)={&(0x7f00000022c0)={0x114, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20040000}, 0x90) 153.131702ms ago: executing program 2 (id=5495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000800000000000000005000141c0322f0c6d2a022a2d1400070000000900020073797a300000000005000500020000001400078005001500020000000800124000000000050004000000000012000300686173683a"], 0x60}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000200)="78215e35850a", &(0x7f0000000300)=""/88}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="75c0f50437a10ad91661571f0ed5b0b9b5d1074cdabfa595925a82ecb413995e6e4bfdb19d936cf4cc0db938d085f4c35b5f064acad850ac86e943499f042cb216e4e398ca43b007a480ae", &(0x7f0000000140)=""/23}, 0x20) 137.393274ms ago: executing program 3 (id=5496): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) listen(r5, 0x200) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000a538ae463208004500001c0000000000029078ac1e0001e000000122009078e0000001546c186b88ce988ae5ce083f0ab34efc18bdf7605c393456c13df4985aab1f72b0e1bf22db4b8aaa0585364b893655ff72e9e69a4b9c2261fd6fa076a5acb2f04ed7ca88c13847f8a2951f61cc8e421ceb139b6a65d59754c7bc8ede84d754c38e6579494c8eee7f54d5d9eabdd395349c6a2d9973c2aeccaad73099d44ec8d432675c7c"], 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = accept4(r5, 0x0, 0x0, 0x0) sendto(r9, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}, 0x4}], 0x1, 0x0, 0x0) recvfrom(r7, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000012e2d88fd4151aa76c43140100000000000000000008004b0cbd1dbc"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="2f66e785d6edc7a02ce74d9106718e84f1ab19afd4c52684b2b0c4bde2a1529c7cbeb432de7f02e876ccb43ff4db86888d7edfe07d490e0c60d743c4f64f3d306b1188e60bbb66cfbb83eac59cbc3f43359741f70fd92e837bf5604dc680e8d44e773e"], 0x4c}}, 0x884) 0s ago: executing program 0 (id=5497): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c00000083946691020000000000000000000006040000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x90) kernel console output (not intermixed with test programs): coupled_control to off (0) [ 439.519933][T18082] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3421'. [ 440.738062][T18088] Unknown options in mask b7f2 [ 442.485295][T18102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3425'. [ 442.649927][T18088] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 442.673667][T18088] syzkaller0: entered promiscuous mode [ 442.679202][T18088] syzkaller0: entered allmulticast mode [ 442.728055][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3425'. [ 442.753416][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 442.882499][T18126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3432'. [ 442.906731][T18123] syzkaller0: entered promiscuous mode [ 442.936199][T18123] syzkaller0: entered allmulticast mode [ 442.965637][T18123] netlink: 'syz.0.3430': attribute type 4 has an invalid length. [ 442.995467][T18123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3430'. [ 443.018781][T18123] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3430'. [ 443.514913][T18176] __nla_validate_parse: 2 callbacks suppressed [ 443.514932][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3443'. [ 443.533771][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3443'. [ 443.543230][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'. [ 443.553439][T18176] netlink: 'syz.4.3443': attribute type 15 has an invalid length. [ 443.573281][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3443'. [ 443.615497][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'. [ 443.647097][T18176] netlink: 'syz.4.3443': attribute type 15 has an invalid length. [ 443.776383][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'. [ 443.932635][T18192] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.945106][T18194] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3448'. [ 443.969973][ T5358] IPVS: starting estimator thread 0... [ 444.071737][T18199] IPVS: using max 36 ests per chain, 86400 per kthread [ 444.133993][T18204] gretap2: entered promiscuous mode [ 444.143295][T18204] batman_adv: batadv0: Adding interface: gretap2 [ 444.151430][T18204] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 444.183743][T18204] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 444.645572][T18240] veth1_macvtap: left promiscuous mode [ 445.473466][T18291] syzkaller0: entered promiscuous mode [ 445.475931][T18296] netlink: 'syz.3.3469': attribute type 58 has an invalid length. [ 445.498011][T18296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3469'. [ 445.499493][T18291] syzkaller0: entered allmulticast mode [ 445.622547][T18304] gretap0: entered promiscuous mode [ 445.631784][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3472'. [ 445.922174][T18330] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3479'. [ 446.362769][T18364] x_tables: duplicate underflow at hook 4 [ 446.436554][ T30] audit: type=1800 audit(1783407613.758:10): pid=18359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3486" name="memory.events" dev="tmpfs" ino=159 res=0 errno=0 [ 446.696547][T18388] netlink: 'syz.4.3492': attribute type 2 has an invalid length. [ 447.033142][T18413] syzkaller0: entered promiscuous mode [ 447.051784][T18413] syzkaller0: entered allmulticast mode [ 447.066441][T18413] TC_ACT_REPEAT abuse ? [ 447.316783][T18418] netlink: 'syz.2.3503': attribute type 12 has an invalid length. [ 447.391598][T18418] netlink: 'syz.2.3503': attribute type 12 has an invalid length. [ 447.415535][T18418] netlink: 'syz.2.3503': attribute type 29 has an invalid length. [ 447.448338][T18418] netlink: 'syz.2.3503': attribute type 1 has an invalid length. [ 447.473496][T18418] netlink: 'syz.2.3503': attribute type 2 has an invalid length. [ 447.957029][T18463] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 448.617558][T18494] netlink: 'syz.0.3527': attribute type 1 has an invalid length. [ 448.641454][T18494] netlink: 'syz.0.3527': attribute type 4 has an invalid length. [ 448.673148][T18494] __nla_validate_parse: 20 callbacks suppressed [ 448.673168][T18494] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.3527'. [ 448.759487][T18503] veth0: entered promiscuous mode [ 448.779380][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3530'. [ 448.791783][T18503] veth0: left promiscuous mode [ 448.839433][T18509] netlink: 'syz.4.3532': attribute type 1 has an invalid length. [ 448.859643][T18509] netlink: 'syz.4.3532': attribute type 4 has an invalid length. [ 448.872927][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3530'. [ 448.878853][T18509] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.3532'. [ 449.028419][ T5722] IPVS: starting estimator thread 0... [ 449.123570][T18518] IPVS: using max 36 ests per chain, 86400 per kthread [ 449.140951][T18524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3536'. [ 449.430309][T18535] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 449.557979][T18521] syzkaller0: entered promiscuous mode [ 449.568335][T18521] syzkaller0: entered allmulticast mode [ 449.622249][T18535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.665816][T18537] bond1: (slave geneve2): making interface the new active one [ 449.705827][T18537] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 450.251955][T18549] syzkaller0: entered promiscuous mode [ 450.263458][T18549] syzkaller0: entered allmulticast mode [ 450.422893][T18553] x_tables: duplicate underflow at hook 2 [ 450.458079][T15576] batadv1: left allmulticast mode [ 450.478484][T15576] batadv1: left promiscuous mode [ 450.496278][T15576] bridge0: port 1(batadv1) entered disabled state [ 450.542353][T15576] pimreg: left allmulticast mode [ 450.932848][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3550'. [ 450.942165][T18572] netlink: 'syz.2.3550': attribute type 10 has an invalid length. [ 450.950085][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3550'. [ 450.960760][T18573] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3549'. [ 450.987736][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3549'. [ 450.998808][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3549'. [ 451.217393][T18575] openvswitch: netlink: Message has 4 unknown bytes. [ 451.252318][T18575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.524714][T15576] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 451.661918][T15576] bond8 (unregistering): (slave gretap2): Releasing active interface [ 451.754879][T15576] bond9 (unregistering): (slave geneve3): Releasing active interface [ 451.775568][T15576] bond2 (unregistering): (slave geneve2): Releasing active interface [ 451.977520][T15576] bond1 (unregistering): Released all slaves [ 452.066206][T15576] bond2 (unregistering): Released all slaves [ 452.125439][T15576] bond3 (unregistering): Released all slaves [ 452.175312][T15576] bond4 (unregistering): Released all slaves [ 452.224243][T15576] bond5 (unregistering): Released all slaves [ 452.277400][T15576] bond6 (unregistering): Released all slaves [ 452.333547][T15576] bond7 (unregistering): Released all slaves [ 452.383213][T15576] bond8 (unregistering): Released all slaves [ 452.436552][T15576] bond9 (unregistering): Released all slaves [ 452.984024][T15576] : left promiscuous mode [ 453.074148][T18596] x_tables: duplicate underflow at hook 2 [ 453.342854][T18622] netlink: 'syz.1.3564': attribute type 1 has an invalid length. [ 453.454074][T18602] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.745095][T18637] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 453.745452][T15576] tipc: Left network mode [ 453.760024][T18641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.239992][T18666] __nla_validate_parse: 3 callbacks suppressed [ 454.240011][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3576'. [ 454.260793][T18668] IPv6: sit1: Disabled Multicast RS [ 454.276821][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3577'. [ 454.375203][T18673] set match dimension is over the limit! [ 454.402094][T18674] set match dimension is over the limit! [ 454.530556][ T30] audit: type=1107 audit(1783407621.848:11): pid=18677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 454.558890][T18681] Dead loop on virtual device ip6_vti0 (net 212), fix it urgently! [ 454.606453][T18678] syzkaller0: entered promiscuous mode [ 454.620729][T18678] syzkaller0: entered allmulticast mode [ 454.924905][T18690] batadv0: entered promiscuous mode [ 454.934828][T18690] macsec2: entered promiscuous mode [ 454.944218][T18692] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3586'. [ 454.956691][T18690] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 454.966126][T18690] batadv0: left promiscuous mode [ 455.163286][T18701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3587'. [ 455.389635][T18707] netlink: 'syz.0.3590': attribute type 1 has an invalid length. [ 455.489843][T18707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.594836][T18708] bond2: (slave geneve3): making interface the new active one [ 455.638571][T18722] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3593'. [ 455.663870][T18708] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 456.425880][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3601'. [ 456.631187][T15576] hsr_slave_0: left promiscuous mode [ 456.640018][T15576] hsr_slave_1: left promiscuous mode [ 456.690349][T15576] veth0_vlan: left promiscuous mode [ 456.934478][T18769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3605'. [ 456.967082][T18769] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 457.127345][T18774] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3606'. [ 457.708059][T18753] team0: Device ipvlan2 failed to register rx_handler [ 457.951843][T18813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3613'. [ 458.019103][T18815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3613'. [ 458.025435][T18819] netlink: 'syz.2.3614': attribute type 4 has an invalid length. [ 458.326786][ T8418] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.384532][ T8418] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.425199][ T8418] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.479822][ T8418] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.555354][T15576] IPVS: stop unused estimator thread 0... [ 458.791194][T18841] IPVS: Scheduler module ip_vs_sip not found [ 459.127640][T18873] netlink: 'syz.1.3627': attribute type 4 has an invalid length. [ 459.260071][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3630'. [ 459.369309][T18895] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3633'. [ 459.403527][T18895] netlink: 'syz.1.3633': attribute type 1 has an invalid length. [ 459.461981][T18895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.632612][T18907] bond2: (slave geneve2): making interface the new active one [ 459.653508][T18907] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 459.857809][T18926] netlink: 'syz.3.3640': attribute type 11 has an invalid length. [ 459.891432][T18926] netlink: 4312 bytes leftover after parsing attributes in process `syz.3.3640'. [ 459.926632][T18933] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.935426][T18933] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.940785][T18928] SET target dimension over the limit! [ 460.039092][T18937] netlink: 'syz.1.3643': attribute type 4 has an invalid length. [ 460.180749][T18942] netlink: 'syz.3.3644': attribute type 4 has an invalid length. [ 460.301980][T18944] syzkaller1: entered promiscuous mode [ 460.333450][T18944] syzkaller1: entered allmulticast mode [ 460.384406][T18956] --map-set only usable from mangle table [ 460.449174][T18944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3645'. [ 460.613095][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3653'. [ 460.649085][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 460.793712][T18983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3655'. [ 460.936305][T18991] netlink: 'syz.1.3659': attribute type 4 has an invalid length. [ 461.126201][T18998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3661'. [ 461.449180][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3666'. [ 461.602214][T19019] hsr_slave_1 (unregistering): left promiscuous mode [ 461.785954][T19034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3669'. [ 461.897537][T19044] netlink: 'syz.3.3672': attribute type 4 has an invalid length. [ 462.085978][T19056] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 462.226125][T19066] batadv_slave_1: entered promiscuous mode [ 462.250255][T19064] batadv_slave_1: left promiscuous mode [ 462.553553][T19088] netlink: 'syz.1.3687': attribute type 4 has an invalid length. [ 462.569184][T19093] netlink: 'syz.3.3688': attribute type 12 has an invalid length. [ 462.590568][T19093] netlink: 'syz.3.3688': attribute type 29 has an invalid length. [ 462.604632][T19093] netlink: 'syz.3.3688': attribute type 1 has an invalid length. [ 462.680110][T19095] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 462.873154][T19108] bridge0: port 4(ipvlan3) entered blocking state [ 462.882762][T19108] bridge0: port 4(ipvlan3) entered disabled state [ 462.902606][T19108] ipvlan3: entered allmulticast mode [ 462.919729][T19108] bridge0: entered allmulticast mode [ 462.946320][T19108] ipvlan3: left allmulticast mode [ 462.958006][T19108] bridge0: left allmulticast mode [ 463.147174][T19120] netlink: 'syz.1.3698': attribute type 13 has an invalid length. [ 463.367283][T19125] netlink: 'syz.3.3699': attribute type 4 has an invalid length. [ 464.133992][T19161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.168200][T19161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.197137][T19161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.225912][T19161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.391535][T19178] __nla_validate_parse: 10 callbacks suppressed [ 464.391554][T19178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3712'. [ 464.620797][T19178] macsec0: entered promiscuous mode [ 464.690688][T19178] bridge0: entered promiscuous mode [ 464.739713][T19178] macsec0: entered allmulticast mode [ 464.812088][T19178] bridge0: entered allmulticast mode [ 464.876374][T19178] bridge0: port 2(macsec0) entered blocking state [ 464.931442][T19178] bridge0: port 2(macsec0) entered disabled state [ 464.991904][T19178] bridge0: left allmulticast mode [ 465.075483][ T810] bridge0: left promiscuous mode [ 465.338680][T19218] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 465.387026][T19218] bond3 (unregistering): Released all slaves [ 465.630191][T19237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3722'. [ 465.651121][T19237] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 465.804508][T19241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.818881][T19244] veth0_vlan: entered allmulticast mode [ 466.033380][T19253] sock: sock_set_timeout: `syz.4.3727' (pid 19253) tries to set negative timeout [ 466.280194][T19269] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3731'. [ 466.289702][T19269] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3731'. [ 466.309897][T19271] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3732'. [ 466.712319][T19280] syzkaller0: entered promiscuous mode [ 466.726401][T19280] syzkaller0: entered allmulticast mode [ 467.036266][T19315] netlink: 'syz.1.3741': attribute type 1 has an invalid length. [ 467.074438][T19315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.102069][T19315] bond3: (slave gretap1): making interface the new active one [ 467.117086][T19315] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 469.290540][T19271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.321849][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3740'. [ 469.789945][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'. [ 469.843095][T19357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3752'. [ 469.893768][T19357] x_tables: duplicate underflow at hook 3 [ 469.976759][T19368] netlink: 'syz.1.3756': attribute type 21 has an invalid length. [ 470.208735][T19368] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3756'. [ 470.253616][T19377] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 470.357606][T19382] netlink: 'syz.4.3762': attribute type 2 has an invalid length. [ 470.366209][T19382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3762'. [ 470.482256][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3764'. [ 470.522613][T19388] netlink: 'syz.3.3764': attribute type 1 has an invalid length. [ 470.548980][T19388] netlink: 'syz.3.3764': attribute type 2 has an invalid length. [ 470.865555][T19416] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 470.865555][T19416] Please contact the netfilter-devel mailing list or update your nftables rules. [ 470.928563][T19416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3772'. [ 471.053295][T19427] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3774'. [ 471.178456][T19420] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.195134][T19420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.237062][T19443] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3777'. [ 471.272521][T19420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.325256][T19420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.382841][T19420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.418697][T19420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.435371][T19420] veth1_vlan: left promiscuous mode [ 471.443457][T19420] veth0_vlan: left promiscuous mode [ 471.449676][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'. [ 471.464645][T19420] veth0_vlan: entered promiscuous mode [ 471.474446][T19420] veth1_vlan: entered promiscuous mode [ 471.490133][T19420] veth0_macvtap: left promiscuous mode [ 471.497156][T19420] veth0_macvtap: entered promiscuous mode [ 471.505761][T19420] veth1_macvtap: entered promiscuous mode [ 471.514049][T19459] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 471.544682][T19420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.552875][T19420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.561987][T19420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.570118][T19420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.607062][T19420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.642508][T19420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.652564][T19420] bond3: left promiscuous mode [ 471.661612][T19420] 8021q: adding VLAN 0 to HW filter on device bond4 [ 471.669318][T19420] gretap2: left promiscuous mode [ 471.676010][T19420] batman_adv: batadv0: Interface activated: gretap2 [ 471.684837][T19420] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 471.738566][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.745849][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.758506][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.765785][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.947061][T15576] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.956364][T15576] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.982496][T15576] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.055044][T19467] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3780'. [ 472.067535][T15576] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.085757][T19467] openvswitch: netlink: IP tunnel dst address not specified [ 472.123913][T19467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.869606][T19461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.045537][T19489] xt_NFQUEUE: number of total queues is 0 [ 475.086833][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3790'. [ 475.096926][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3790'. [ 475.116813][T19498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3787'. [ 475.144206][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3790'. [ 475.159902][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3790'. [ 475.207323][T19494] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3788'. [ 475.228220][T19504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3791'. [ 475.278028][T19494] bond0: (slave ): Releasing backup interface [ 475.307242][T19508] netlink: 'syz.4.3792': attribute type 58 has an invalid length. [ 475.339601][T19508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3792'. [ 475.694014][ T5722] IPVS: starting estimator thread 0... [ 475.759288][T19543] netlink: 'syz.0.3802': attribute type 21 has an invalid length. [ 475.776212][T19543] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.785229][T19543] netlink: 'syz.0.3802': attribute type 1 has an invalid length. [ 475.793858][T19537] IPVS: using max 35 ests per chain, 84000 per kthread [ 475.838826][T19552] netlink: 'syz.3.3805': attribute type 1 has an invalid length. [ 475.858126][T19552] wg0: entered promiscuous mode [ 476.088376][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3809'. [ 476.109220][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3809'. [ 476.674347][T19599] netlink: 'syz.1.3815': attribute type 8 has an invalid length. [ 476.683856][T19600] netlink: 'syz.1.3815': attribute type 8 has an invalid length. [ 477.535485][T19603] netlink: 'syz.1.3816': attribute type 18 has an invalid length. [ 477.550029][ T8417] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.550211][T19603] netlink: 'syz.1.3816': attribute type 18 has an invalid length. [ 477.561934][ T8417] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.579362][ T8417] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.589347][ T8417] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.639242][T19605] veth5: entered allmulticast mode [ 477.704029][T19606] netlink: 'syz.1.3817': attribute type 21 has an invalid length. [ 477.712361][T19606] netlink: 'syz.1.3817': attribute type 1 has an invalid length. [ 478.899570][T19559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.163107][T19618] tap0: tun_chr_ioctl cmd 1074025676 [ 479.178065][T19618] tap0: owner set to 0 [ 479.227204][T19618] pim6reg: entered allmulticast mode [ 479.284899][ T762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.293166][ T762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.398437][T19637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.634821][T19649] syzkaller0: entered promiscuous mode [ 479.643609][T19649] syzkaller0: entered allmulticast mode [ 479.875634][T19662] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 479.891155][T19662] bond3 (unregistering): Released all slaves [ 479.922843][T19664] veth1_macvtap: left promiscuous mode [ 479.928573][T19664] macsec0: entered promiscuous mode [ 480.149599][T19666] __nla_validate_parse: 7 callbacks suppressed [ 480.149618][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3837'. [ 480.200044][T19674] ip6t_srh: unknown srh invflags 4000 [ 480.358278][T19679] gretap1: entered promiscuous mode [ 480.358599][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'. [ 480.401487][T19679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3841'. [ 480.446664][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3844'. [ 480.776829][T19716] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 480.965822][T19729] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3853'. [ 480.977379][T19729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3853'. [ 481.000138][T19729] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3853'. [ 481.015154][T19729] validate_nla: 2 callbacks suppressed [ 481.015180][T19729] netlink: 'syz.1.3853': attribute type 3 has an invalid length. [ 481.034241][T19729] netlink: 'syz.1.3853': attribute type 2 has an invalid length. [ 481.051854][T19729] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3853'. [ 481.172254][T19740] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 481.215185][T19740] batman_adv: batadv0: Adding interface: netdevsim0 [ 481.242774][T19740] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.290024][T19740] batman_adv: batadv0: Interface activated: netdevsim0 [ 481.356036][T19743] gretap2: entered promiscuous mode [ 481.564194][T19755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3860'. [ 481.790016][T19765] vlan3: entered allmulticast mode [ 481.812806][T19765] bond0: entered allmulticast mode [ 481.825530][T19765] bond_slave_0: entered allmulticast mode [ 481.837899][ T5641] Bluetooth: hci4: link tx timeout [ 481.841080][T19765] bond_slave_1: entered allmulticast mode [ 481.849569][ T5641] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 481.864669][T19765] bond1: entered allmulticast mode [ 481.865258][ T5641] Bluetooth: hci4: link tx timeout [ 481.875912][ T5641] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 481.887752][ T5641] Bluetooth: hci4: link tx timeout [ 481.893160][ T5641] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 481.901613][ T5641] Bluetooth: hci4: link tx timeout [ 481.908342][ T5641] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 481.916287][ T5641] Bluetooth: hci4: link tx timeout [ 481.921786][ T5641] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 481.929482][ T5641] Bluetooth: hci4: link tx timeout [ 481.935278][ T5641] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 481.965007][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3867'. [ 482.072774][T19782] netlink: 'syz.2.3869': attribute type 1 has an invalid length. [ 482.089027][T19782] netlink: 'syz.2.3869': attribute type 1 has an invalid length. [ 482.188543][T19794] netlink: 'syz.3.3872': attribute type 10 has an invalid length. [ 482.226680][T19787] IPVS: length: 218 != 232968 [ 482.243565][T19794] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 482.534943][ T8410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.543918][ T8410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.573090][T19817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.764590][T19830] lo: Caught tx_queue_len zero misconfig [ 482.798945][T19826] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 482.810306][T19828] netlink: 'syz.2.3884': attribute type 27 has an invalid length. [ 482.820303][T19828] netlink: 'syz.2.3884': attribute type 4 has an invalid length. [ 482.964651][T19839] syzkaller1: entered promiscuous mode [ 482.977719][T19846] netlink: 'syz.2.3889': attribute type 1 has an invalid length. [ 482.985978][T19839] syzkaller1: entered allmulticast mode [ 483.044731][T19846] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 483.124407][T19851] netlink: 'syz.0.3890': attribute type 83 has an invalid length. [ 483.383908][T19864] netlink: 'syz.3.3896': attribute type 5 has an invalid length. [ 483.556430][T19875] sctp: [Deprecated]: syz.4.3899 (pid 19875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.556430][T19875] Use struct sctp_sack_info instead [ 483.655709][T19882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.707683][T19885] syzkaller1: entered promiscuous mode [ 483.735284][T19885] syzkaller1: entered allmulticast mode [ 483.839485][ T5641] Bluetooth: hci4: link tx timeout [ 483.845386][ T5641] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 483.853341][ T5641] Bluetooth: hci4: link tx timeout [ 483.858510][ T5641] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.867018][ T5641] Bluetooth: hci4: link tx timeout [ 483.872486][ T5641] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 483.880170][ T5641] Bluetooth: hci4: link tx timeout [ 483.885731][ T5641] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.894222][ T5641] Bluetooth: hci4: link tx timeout [ 484.051641][ T5641] Bluetooth: hci4: command 0x0406 tx timeout [ 484.232113][T19912] rdma_op ffff8880458391f0 conn xmit_rdma 0000000000000000 [ 486.121218][ T5641] Bluetooth: hci4: command 0x0406 tx timeout [ 487.695037][T19909] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 487.736294][T19919] dummy0: entered promiscuous mode [ 487.758283][T19936] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 487.867067][T19937] veth3: entered allmulticast mode [ 488.136300][T19956] __nla_validate_parse: 8 callbacks suppressed [ 488.136326][T19956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3922'. [ 488.263773][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3923'. [ 488.278001][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3923'. [ 488.278254][T19960] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 488.287367][T19961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3923'. [ 488.310200][T19959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3923'. [ 488.668202][T19981] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3930'. [ 488.989825][T19994] validate_nla: 4 callbacks suppressed [ 488.989843][T19994] netlink: 'syz.3.3934': attribute type 2 has an invalid length. [ 488.990245][T19992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3932'. [ 489.335874][T20007] erspan0: entered promiscuous mode [ 489.348139][T20007] erspan0: entered allmulticast mode [ 489.377036][T20013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3938'. [ 489.436407][T20013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3938'. [ 489.504545][T20019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3941'. [ 489.628283][T20022] vlan2: entered promiscuous mode [ 489.645254][T20022] bridge0: entered promiscuous mode [ 490.052926][T20047] sctp: [Deprecated]: syz.1.3951 (pid 20047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.052926][T20047] Use struct sctp_sack_info instead [ 490.446972][T20061] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 490.517045][T20066] bridge0: port 3(batadv1) entered blocking state [ 490.537345][T20066] bridge0: port 3(batadv1) entered disabled state [ 490.552850][T20066] batadv1: entered allmulticast mode [ 490.560981][T20066] batadv1: entered promiscuous mode [ 490.742723][T20081] netlink: 'syz.3.3961': attribute type 1 has an invalid length. [ 490.776909][T20074] syzkaller0: entered promiscuous mode [ 490.818022][T20074] syzkaller0: entered allmulticast mode [ 490.864090][T20081] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 490.868306][T20088] netlink: 'syz.1.3963': attribute type 1 has an invalid length. [ 491.012121][ T762] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 491.021705][ T762] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 491.054140][T20103] netlink: 'syz.1.3966': attribute type 4 has an invalid length. [ 491.208323][T20117] bond3 (unregistering): Released all slaves [ 491.454797][T20130] syzkaller0: entered promiscuous mode [ 491.460320][T20130] syzkaller0: entered allmulticast mode [ 493.885491][T20095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.643966][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 519.002522][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 519.018122][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 527.162829][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.241579][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 542.525546][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 566.345071][T20180] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 566.360949][T20180] syzkaller1: linktype set to 823 [ 566.425574][T20176] bond1: left allmulticast mode [ 566.444597][T20176] bond3: left allmulticast mode [ 566.632231][T20201] __nla_validate_parse: 4 callbacks suppressed [ 566.632244][T20201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3989'. [ 566.656122][T20201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3989'. [ 566.744821][T20204] netlink: 'syz.3.3990': attribute type 11 has an invalid length. [ 566.768536][T20204] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3990'. [ 566.801123][T20209] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 566.943558][T20220] xt_l2tp: invalid flags combination: 8 [ 566.984501][T20218] bridge1: entered promiscuous mode [ 566.994668][T20218] bridge1: entered allmulticast mode [ 567.198920][T20236] nbd: nbd1 already in use [ 567.267365][T20243] xt_TCPMSS: Only works on TCP SYN packets [ 567.593531][T20261] netlink: 'syz.0.4011': attribute type 6 has an invalid length. [ 567.728772][T20273] syzkaller0: entered promiscuous mode [ 567.758069][T20273] syzkaller0: entered allmulticast mode [ 567.986854][T20287] syzkaller0: entered promiscuous mode [ 567.996897][T20287] syzkaller0: entered allmulticast mode [ 568.029985][T20289] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4021'. [ 568.064394][T20289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4021'. [ 568.078113][T20289] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 568.206010][ T8410] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 568.276799][T20312] netlink: 'syz.4.4023': attribute type 2 has an invalid length. [ 568.352428][T20296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.565571][T20321] syzkaller0: entered promiscuous mode [ 568.580037][T20321] syzkaller0: entered allmulticast mode [ 568.711177][T20333] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4032'. [ 568.754005][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4029'. [ 568.810268][T20336] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 568.861333][T20338] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4033'. [ 568.896150][T20342] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4033'. [ 568.971752][T20345] xt_hashlimit: invalid rate [ 568.977683][T20343] netlink: 'syz.2.4034': attribute type 39 has an invalid length. [ 569.002973][T20342] syzkaller0: entered promiscuous mode [ 569.020630][T20342] syzkaller0: entered allmulticast mode [ 569.083022][T20338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4033'. [ 569.103609][T20351] netlink: 'syz.3.4038': attribute type 2 has an invalid length. [ 569.305223][T20353] syzkaller0: entered promiscuous mode [ 569.328893][T20353] syzkaller0: entered allmulticast mode [ 569.443529][T20372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.931529][T20412] netlink: 'syz.0.4057': attribute type 1 has an invalid length. [ 569.992929][T20412] bond3: entered promiscuous mode [ 569.999735][T20412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 570.052596][T20412] ipvlan3: entered allmulticast mode [ 570.058017][T20412] bond3: entered allmulticast mode [ 570.081921][T20412] bond3: (slave bridge2): making interface the new active one [ 570.089669][T20412] bridge2: entered promiscuous mode [ 570.095813][T20412] bridge2: entered allmulticast mode [ 570.104542][T20412] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 572.981468][T20416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.146669][T20478] netlink: 'syz.1.4077': attribute type 1 has an invalid length. [ 573.215692][T20478] bond4: (slave geneve3): making interface the new active one [ 573.225557][T20478] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 573.230003][T20488] netlink: 'syz.0.4080': attribute type 1 has an invalid length. [ 573.272848][T20494] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 573.318204][ T8412] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.432305][T20501] __nla_validate_parse: 3 callbacks suppressed [ 573.432324][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4083'. [ 573.452375][T20488] 8021q: adding VLAN 0 to HW filter on device bond4 [ 573.460117][ T8412] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.486417][T20498] vlan2: entered allmulticast mode [ 573.492253][T20498] bond4: entered allmulticast mode [ 573.498647][ T8412] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.512981][ T8410] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 573.681985][T20518] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 573.723057][T20519] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4089'. [ 573.744561][T20526] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4089'. [ 573.853787][T20524] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4088'. [ 573.937260][T20524] syzkaller0: entered promiscuous mode [ 573.962429][T20524] syzkaller0: entered allmulticast mode [ 574.005575][T20544] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 574.464311][T20571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 574.801323][T20594] netlink: 'syz.4.4101': attribute type 58 has an invalid length. [ 574.859186][T20594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4101'. [ 574.878139][T20599] netlink: 'syz.4.4101': attribute type 15 has an invalid length. [ 574.909952][T20599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4101'. [ 574.929964][T20588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4101'. [ 574.955510][T15576] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 574.966661][T15576] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 574.980806][T15576] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 574.990081][T15576] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 575.049883][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4107'. [ 575.235065][T20615] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 575.253737][T20621] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 575.264473][T20615] bond6 (unregistering): Released all slaves [ 575.410449][ T30] audit: type=1107 audit(1783407742.728:12): pid=20626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=')æ¸èÿ“Tqxp«, $?iVF&$'óø€ß8È\ô37¡¼m¨oË1' [ 575.592624][T20635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4113'. [ 575.803105][T20646] IPv4: Oversized IP packet from 127.202.26.0 [ 576.043952][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4126'. [ 576.109874][T20670] netlink: 'syz.2.4126': attribute type 3 has an invalid length. [ 576.170318][T20677] netlink: 'syz.3.4128': attribute type 1 has an invalid length. [ 576.225147][T20677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.254043][T20677] veth0_virt_wifi: entered promiscuous mode [ 576.359911][T20677] bond2: (slave veth0_virt_wifi): making interface the new active one [ 576.394584][T20677] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 576.447997][T20684] team0: Device ipvlan2 is already an upper device of the team interface [ 576.497531][T20685] team0: Device ipvlan2 is already an upper device of the team interface [ 646.878290][T20719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.280322][T20736] __nla_validate_parse: 4 callbacks suppressed [ 647.280339][T20736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4146'. [ 647.374544][T20750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4149'. [ 651.616835][T20796] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 651.912924][T20821] bond5: entered promiscuous mode [ 651.918147][T20821] bond5: entered allmulticast mode [ 651.926815][T20821] 8021q: adding VLAN 0 to HW filter on device bond5 [ 652.096376][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4169'. [ 652.106452][T20834] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4169'. [ 652.116159][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4169'. [ 652.167918][T20836] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4170'. [ 652.273081][T20838] bond5: entered promiscuous mode [ 652.286308][T20838] bond5: entered allmulticast mode [ 652.302753][T20838] 8021q: adding VLAN 0 to HW filter on device bond5 [ 652.502027][T20852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4176'. [ 652.510068][T20851] netlink: 'syz.0.4175': attribute type 16 has an invalid length. [ 652.519156][T20851] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4175'. [ 652.706971][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'. [ 652.909872][T20879] netlink: 'syz.2.4186': attribute type 3 has an invalid length. [ 652.936911][T20880] netlink: 'syz.1.4185': attribute type 1 has an invalid length. [ 653.036674][T20892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4188'. [ 653.100059][T20885] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 653.187568][T20885] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.202301][T20885] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 653.227898][T20880] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 653.258274][ T8410] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 653.287838][ T8410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 653.332999][T20903] netlink: 'syz.2.4190': attribute type 2 has an invalid length. [ 653.408577][T20907] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4192'. [ 653.725406][T20931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4197'. [ 653.789588][T20935] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 653.985906][T20940] netlink: 'syz.3.4199': attribute type 1 has an invalid length. [ 654.038098][T20955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4199'. [ 654.062524][T20940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 654.094724][T20949] syzkaller0: entered promiscuous mode [ 654.114405][T20949] syzkaller0: entered allmulticast mode [ 654.257141][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4206'. [ 654.263081][T20966] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4208'. [ 654.383979][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'. [ 654.414915][T20971] lo: entered promiscuous mode [ 654.434205][T20971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.599424][T20984] netlink: 'syz.1.4215': attribute type 3 has an invalid length. [ 654.712605][T20989] sctp: [Deprecated]: syz.1.4218 (pid 20989) Use of int in maxseg socket option. [ 654.712605][T20989] Use struct sctp_assoc_value instead [ 654.776079][T20993] tipc: New replicast peer: 255.255.255.255 [ 654.783642][T20993] tipc: Enabled bearer , priority 10 [ 655.074814][T21008] syzkaller0: entered promiscuous mode [ 655.093331][T21008] syzkaller0: entered allmulticast mode [ 655.124675][T21008] sit0: Master is either lo or non-ether device [ 655.257092][T21021] netlink: 'syz.2.4229': attribute type 1 has an invalid length. [ 655.277007][T21024] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 655.453487][T21028] batadv0: entered promiscuous mode [ 655.463126][T21028] macsec1: entered promiscuous mode [ 655.470118][T21028] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 655.479530][T21028] batadv0: left promiscuous mode [ 655.509679][T21031] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 655.912895][T21063] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 655.939108][T21064] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 656.003450][T21068] bond6: entered promiscuous mode [ 656.008703][T21068] bond6: entered allmulticast mode [ 656.018286][T21068] 8021q: adding VLAN 0 to HW filter on device bond6 [ 656.112739][T21078] netlink: 'syz.3.4248': attribute type 1 has an invalid length. [ 656.661160][T21115] bond7: entered allmulticast mode [ 656.672008][T21115] 8021q: adding VLAN 0 to HW filter on device bond7 [ 656.914018][T21135] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 656.922452][T21135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.000905][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.187465][T21152] vlan0: entered promiscuous mode [ 657.281940][T21160] openvswitch: netlink: Duplicate key (type 6). [ 657.289499][T21160] netlink: 'syz.2.4274': attribute type 1 has an invalid length. [ 657.319597][T21160] bond6: entered promiscuous mode [ 657.327469][T21160] 8021q: adding VLAN 0 to HW filter on device bond6 [ 657.363986][T21160] bond6: (slave bridge1): making interface the new active one [ 657.371795][T21160] bridge1: entered promiscuous mode [ 657.379850][T21160] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 657.401072][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 657.528535][T21172] __nla_validate_parse: 61 callbacks suppressed [ 657.528554][T21172] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4277'. [ 657.751109][T21197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4281'. [ 657.809988][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4283'. [ 657.838559][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4283'. [ 658.155354][T21217] tipc: Enabled bearer , priority 0 [ 658.172768][T21217] syzkaller0: MTU too low for tipc bearer [ 658.184899][T21217] tipc: Disabling bearer [ 658.399374][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4295'. [ 658.411273][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4295'. [ 658.448824][T21231] 8021q: VLANs not supported on ip6gre0 [ 658.993604][T21261] netlink: 'syz.2.4304': attribute type 58 has an invalid length. [ 659.012233][T21261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4304'. [ 659.761264][T21292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4313'. [ 659.776131][T21292] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 660.250100][T21306] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4318'. [ 660.498418][T21292] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.747653][T21292] wg0: left promiscuous mode [ 660.916619][T21292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.958514][T21292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.036509][T21292] veth0_virt_wifi: left promiscuous mode [ 661.220587][T21292] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 661.241613][T21292] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 661.331030][T21292] bond1: left promiscuous mode [ 661.341521][T21292] bridge1: left promiscuous mode [ 661.365209][T21292] sit1: left allmulticast mode [ 661.477244][T21292] vlan2: left promiscuous mode [ 661.489216][T21292] bridge0: left promiscuous mode [ 661.599576][ T5749] vxcan1 speed is unknown, defaulting to 1000 [ 661.606403][ T8412] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.623954][ T5749] syz2: Port: 1 Link DOWN [ 661.632237][ T8412] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.655125][ T8412] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.699202][ T8412] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.750298][ T5749] vxcan1 speed is unknown, defaulting to 1000 [ 661.756563][T21338] netlink: 'syz.1.4327': attribute type 12 has an invalid length. [ 661.756585][T21338] netlink: 'syz.1.4327': attribute type 29 has an invalid length. [ 661.756598][T21338] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4327'. [ 661.756615][T21338] netlink: 'syz.1.4327': attribute type 1 has an invalid length. [ 661.756628][T21338] netlink: 'syz.1.4327': attribute type 2 has an invalid length. [ 661.826051][ T8412] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.839268][ T8412] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.868368][ T8412] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.882110][T21344] IPv6: addrconf: prefix option has invalid lifetime [ 661.906422][ T8412] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.943088][T21349] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 661.946313][T21342] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.967187][T21348] netlink: 'syz.3.4332': attribute type 1 has an invalid length. [ 661.983313][T21344] team_slave_1: mtu less than device minimum [ 662.062513][T21348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 662.105582][ T144] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 662.150920][T21357] bond5: (slave veth3): Enslaving as an active interface with a down link [ 662.394491][T21376] IPv6: Can't replace route, no match found [ 662.506716][T21383] xt_socket: unknown flags 0x8 [ 664.760848][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.962580][T21351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.178739][T21414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.245171][T21418] __nla_validate_parse: 4 callbacks suppressed [ 665.245188][T21418] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4351'. [ 665.455460][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4356'. [ 665.607313][T21447] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4360'. [ 665.631781][T21450] netlink: 'syz.3.4361': attribute type 3 has an invalid length. [ 665.666649][T21450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4361'. [ 665.816850][T21454] bond6: entered allmulticast mode [ 666.041064][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 666.576816][T21487] bond7 (unregistering): Released all slaves [ 666.604574][T21497] x_tables: duplicate entry at hook 3 [ 666.726915][T21501] tipc: New replicast peer: 255.255.255.255 [ 666.748721][T21501] tipc: Enabled bearer , priority 10 [ 666.773798][T21501] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 666.799438][T21504] sctp: [Deprecated]: syz.0.4380 (pid 21504) Use of int in maxseg socket option. [ 666.799438][T21504] Use struct sctp_assoc_value instead [ 666.816344][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4379'. [ 667.468517][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4393'. [ 667.478673][T21542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.502256][T21542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.581325][T21547] syz.3.4395: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 667.601958][T21547] CPU: 0 UID: 0 PID: 21547 Comm: syz.3.4395 Not tainted syzkaller #0 PREEMPT(full) [ 667.601985][T21547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 667.601997][T21547] Call Trace: [ 667.602005][T21547] [ 667.602013][T21547] dump_stack_lvl+0xe8/0x150 [ 667.602048][T21547] warn_alloc+0x24c/0x270 [ 667.602075][T21547] ? stack_depot_save_flags+0x33/0x800 [ 667.602100][T21547] ? __pfx_warn_alloc+0x10/0x10 [ 667.602124][T21547] ? kasan_save_track+0x3e/0x80 [ 667.602146][T21547] ? __kasan_kmalloc+0x93/0xb0 [ 667.602174][T21547] ? xsk_setsockopt+0x52a/0x960 [ 667.602194][T21547] ? do_sock_setsockopt+0x17c/0x1b0 [ 667.602220][T21547] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 667.602244][T21547] ? do_syscall_64+0x174/0x580 [ 667.602268][T21547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.602296][T21547] __vmalloc_node_range_noprof+0x12c/0x1730 [ 667.602348][T21547] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 667.602375][T21547] ? __kasan_kmalloc+0x93/0xb0 [ 667.602401][T21547] ? __kmalloc_cache_noprof+0x32d/0x660 [ 667.602425][T21547] ? __kmalloc_cache_noprof+0x150/0x660 [ 667.602450][T21547] vmalloc_user_noprof+0xad/0xe0 [ 667.602473][T21547] ? xskq_create+0xbf/0x170 [ 667.602497][T21547] xskq_create+0xbf/0x170 [ 667.602522][T21547] xsk_init_queue+0x8a/0xe0 [ 667.602547][T21547] xsk_setsockopt+0x52a/0x960 [ 667.602566][T21547] ? __fget_files+0x2a/0x420 [ 667.602592][T21547] ? __pfx_xsk_setsockopt+0x10/0x10 [ 667.602615][T21547] ? __pfx_aa_sk_perm+0x10/0x10 [ 667.602647][T21547] ? aa_sock_opt_perm+0xff/0x1a0 [ 667.602669][T21547] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 667.602687][T21547] ? __pfx_xsk_setsockopt+0x10/0x10 [ 667.602710][T21547] do_sock_setsockopt+0x17c/0x1b0 [ 667.602739][T21547] __x64_sys_setsockopt+0x13d/0x1b0 [ 667.602765][T21547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.602793][T21547] do_syscall_64+0x174/0x580 [ 667.602816][T21547] ? trace_irq_disable+0x3b/0x140 [ 667.602839][T21547] ? clear_bhb_loop+0x40/0x90 [ 667.602861][T21547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.602878][T21547] RIP: 0033:0x7f932599de59 [ 667.602895][T21547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.602910][T21547] RSP: 002b:00007f9326814028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 667.602929][T21547] RAX: ffffffffffffffda RBX: 00007f9325c25fa0 RCX: 00007f932599de59 [ 667.602942][T21547] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 667.602954][T21547] RBP: 00007f9325a33e6f R08: 0000000000000004 R09: 0000000000000000 [ 667.602966][T21547] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.602978][T21547] R13: 00007f9325c26038 R14: 00007f9325c25fa0 R15: 00007fffdd3c4668 [ 667.603008][T21547] [ 667.603028][T21547] Mem-Info: [ 667.647247][T21549] tipc: Started in network mode [ 667.658259][T21547] active_anon:5783 inactive_anon:0 isolated_anon:0 [ 667.658259][T21547] active_file:275 inactive_file:43175 isolated_file:0 [ 667.658259][T21547] unevictable:768 dirty:144 writeback:0 [ 667.658259][T21547] slab_reclaimable:12890 slab_unreclaimable:131766 [ 667.658259][T21547] mapped:29388 shmem:1302 pagetables:3399 [ 667.658259][T21547] sec_pagetables:0 bounce:0 [ 667.658259][T21547] kernel_misc_reclaimable:0 [ 667.658259][T21547] free:1281206 free_pcp:14362 free_cma:0 [ 667.677677][T21549] tipc: Node identity 6221a6e75beb, cluster identity 4711 [ 667.801704][T21547] Node 0 active_anon:23132kB inactive_anon:0kB active_file:1100kB inactive_file:172504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121552kB dirty:576kB writeback:0kB shmem:3672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15960kB pagetables:13444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 667.801781][T21547] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 667.801862][T21547] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 667.801933][T21547] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 667.801979][T21547] Node 0 DMA32 free:1173084kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23132kB inactive_anon:0kB active_file:1100kB inactive_file:172504kB unevictable:1536kB writepending:576kB zspages:0kB present:3129332kB managed:2548792kB mlocked:0kB bounce:0kB free_pcp:57200kB local_pcp:25276kB free_cma:0kB [ 667.802040][T21547] lowmem_reserve[]: 0 0 0 0 0 [ 667.802080][T21547] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 667.802131][T21547] lowmem_reserve[]: 0 0 0 0 0 [ 667.802170][T21547] Node 1 Normal free:3936380kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 667.802228][T21547] lowmem_reserve[]: 0 0 0 0 0 [ 667.802267][T21547] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 667.802397][T21547] Node 0 DMA32: 455*4kB (UME) 868*8kB (UME) 106*16kB (UM) 776*32kB (UME) 148*64kB (UM) 95*128kB (UME) 410*256kB (UME) 187*512kB (UM) 126*1024kB (UM) 8*2048kB (UM) 188*4096kB (UM) = 1173084kB [ 667.802582][T21547] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 667.802696][T21547] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 9*16kB (UM) 6*32kB (UM) 12*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936380kB [ 667.802891][T21547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.802909][T21547] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 667.802927][T21547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.802945][T21547] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 667.802962][T21547] 44748 total pagecache pages [ 667.802977][T21547] 0 pages in swap cache [ 667.802985][T21547] Free swap = 124996kB [ 667.802995][T21547] Total swap = 124996kB [ 667.803004][T21547] 2097051 pages RAM [ 667.803013][T21547] 0 pages HighMem/MovableOnly [ 667.803021][T21547] 428172 pages reserved [ 667.803030][T21547] 0 pages cma reserved [ 668.135519][ T5641] Bluetooth: hci4: command 0x0406 tx timeout [ 668.331001][T21549] tipc: Enabled bearer , priority 0 [ 668.442941][T21554] syzkaller0: entered promiscuous mode [ 668.448656][T21554] syzkaller0: entered allmulticast mode [ 668.463581][T21554] tipc: Resetting bearer [ 668.516476][ T77] tipc: Resetting bearer [ 668.597699][T21548] tipc: Resetting bearer [ 668.700219][T21579] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4403'. [ 669.506036][T21594] netlink: 'syz.1.4406': attribute type 1 has an invalid length. [ 672.297045][T21548] tipc: Disabling bearer [ 672.308897][ T5810] tipc: Node number set to 969582311 [ 672.321379][T21594] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 672.532224][T21599] bond7: entered promiscuous mode [ 672.562469][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4410'. [ 672.583249][T21620] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 672.647155][T21614] syzkaller0: entered promiscuous mode [ 672.663235][T21614] syzkaller0: entered allmulticast mode [ 672.933299][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4417'. [ 672.960980][T21639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4419'. [ 672.971854][T21640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4418'. [ 672.986088][T21642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4417'. [ 672.998933][T21636] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 673.014632][T21641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4418'. [ 673.036266][T21636] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 673.044704][T21636] gretap2: entered promiscuous mode [ 673.051210][T21636] gretap2: entered allmulticast mode [ 673.197639][T21656] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 673.265563][T21663] ip6tnl0: Caught tx_queue_len zero misconfig [ 673.463870][T21673] netlink: 'syz.4.4427': attribute type 178 has an invalid length. [ 673.486028][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4428'. [ 673.636613][T21686] vlan4: entered promiscuous mode [ 673.653060][T21686] geneve1: entered promiscuous mode [ 673.664381][T21686] vlan4: entered allmulticast mode [ 673.673522][T21686] geneve1: entered allmulticast mode [ 674.075032][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4439'. [ 674.096623][T21719] netlink: 'syz.2.4439': attribute type 1 has an invalid length. [ 674.118733][T21719] netlink: 'syz.2.4439': attribute type 2 has an invalid length. [ 674.583321][T21725] netlink: 'syz.2.4441': attribute type 29 has an invalid length. [ 674.619621][T21725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 674.710056][T21735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4443'. [ 674.889615][T21738] 8021q: adding VLAN 0 to HW filter on device bond8 [ 674.918749][T21751] netlink: 'syz.3.4445': attribute type 4 has an invalid length. [ 674.941049][T21738] bond8 (unregistering): Released all slaves [ 674.998052][T21754] gtp1: entered promiscuous mode [ 675.032606][T21754] gtp1: entered allmulticast mode [ 675.264289][T21775] ipt_rpfilter: unknown options [ 675.770015][T21808] netlink: 'syz.3.4466': attribute type 1 has an invalid length. [ 675.827425][T21810] nbd: must specify a size in bytes for the device [ 675.858838][T21810] xt_TCPMSS: Only works on TCP SYN packets [ 675.873879][T21808] 8021q: adding VLAN 0 to HW filter on device bond6 [ 675.885637][T21816] netlink: 'syz.1.4468': attribute type 6 has an invalid length. [ 675.915602][T21814] vlan3: entered allmulticast mode [ 675.920900][T21814] bond6: entered allmulticast mode [ 676.023570][T21822] netlink: 'syz.4.4471': attribute type 3 has an invalid length. [ 676.037227][T21822] netlink: 'syz.4.4471': attribute type 1 has an invalid length. [ 676.315299][T21840] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 676.958932][T21881] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 676.996245][T21881] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 677.063036][T21885] syzkaller0: entered promiscuous mode [ 677.080133][T21885] syzkaller0: entered allmulticast mode [ 677.142285][T21888] bond7: option lp_interval: invalid value (0) [ 677.159361][T21888] bond7: option lp_interval: allowed values 1 - 2147483647 [ 677.172410][T21888] bond7 (unregistering): Released all slaves [ 677.208651][T21892] bond8: (slave gre0): Device is not bonding slave [ 677.215803][T21892] bond8: option active_slave: invalid value (gre0) [ 677.244959][T21892] bond8 (unregistering): Released all slaves [ 677.506489][T21911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.520013][T21911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.620132][T21919] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 677.642699][T21920] ªªªªªª: renamed from bond_slave_0 (while UP) [ 677.856376][T21940] bond3: entered allmulticast mode [ 677.866396][T21940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 680.120843][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.305894][T21902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.315991][T21908] netlink: 'syz.3.4494': attribute type 11 has an invalid length. [ 680.330594][T21908] __nla_validate_parse: 6 callbacks suppressed [ 680.330613][T21908] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4494'. [ 680.499839][T21954] netlink: 'syz.3.4509': attribute type 7 has an invalid length. [ 680.526060][T21954] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4509'. [ 680.547490][T21954] netlink: 'syz.3.4509': attribute type 49 has an invalid length. [ 680.579153][T21962] netlink: 'syz.4.4510': attribute type 29 has an invalid length. [ 680.588606][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4510'. [ 680.758942][T21970] netlink: 'syz.2.4514': attribute type 1 has an invalid length. [ 680.795701][T21970] netlink: 'syz.2.4514': attribute type 4 has an invalid length. [ 680.812965][T21970] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.4514'. [ 680.946692][T21982] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 680.965424][T21985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4520'. [ 680.979085][T21985] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4520'. [ 680.990232][T21985] netlink: 'syz.3.4520': attribute type 5 has an invalid length. [ 680.999207][T21985] netlink: 'syz.3.4520': attribute type 6 has an invalid length. [ 681.021332][T21985] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4520'. [ 681.031622][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4520'. [ 681.041412][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4521'. [ 681.041965][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4520'. [ 681.082414][T21991] macsec2: entered promiscuous mode [ 681.087920][T21991] bridge0: entered promiscuous mode [ 681.094781][T21991] macsec2: entered allmulticast mode [ 681.101217][T21991] bridge0: entered allmulticast mode [ 681.108327][T21991] bridge0: port 4(macsec2) entered blocking state [ 681.116729][T21991] bridge0: port 4(macsec2) entered disabled state [ 681.128797][T21991] bridge0: left allmulticast mode [ 681.166590][T17381] bridge0: left promiscuous mode [ 681.432287][T22007] sock: sock_set_timeout: `syz.1.4526' (pid 22007) tries to set negative timeout [ 681.743158][T22031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.370079][T22069] SET target dimension over the limit! [ 682.531900][T22077] netlink: 'syz.0.4544': attribute type 15 has an invalid length. [ 682.997830][T22094] SET target dimension over the limit! [ 683.079445][T22103] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 683.308582][T22113] netlink: 'syz.1.4551': attribute type 1 has an invalid length. [ 683.384935][T22115] bridge0: port 1(syz_tun) entered disabled state [ 683.467898][T22119] ÿÿÿÿÿÿ: renamed from bond_slave_0 (while UP) [ 683.868598][T22143] openvswitch: netlink: Flow key attr not present in new flow. [ 683.961278][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 684.589821][T22180] veth1_vlan (unregistering): left allmulticast mode [ 684.611327][T22180] bridge0: port 3(macvlan0) entered disabled state [ 684.665773][T22180] macvlan0 (unregistering): left allmulticast mode [ 684.692722][T22180] bridge0: port 3(macvlan0) entered disabled state [ 684.832972][T22185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.863545][T22197] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 684.874500][T22197] syzkaller1: Linktype set failed because interface is up [ 684.891530][T17381] syzkaller1: tun_net_xmit 90 [ 687.410803][T22170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.651547][T22213] __nla_validate_parse: 21 callbacks suppressed [ 687.651565][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4578'. [ 687.666920][T22215] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4582'. [ 687.666947][T22215] openvswitch: netlink: Message has 512 unknown bytes. [ 687.689094][T22212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4580'. [ 687.800664][T22221] xt_hashlimit: size too large, truncated to 1048576 [ 687.855543][T22224] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.4584'. [ 688.007455][T22224] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 688.067205][T22224] 0ªX¹¦Dö»: entered allmulticast mode [ 688.296181][T22243] netlink: 'syz.1.4591': attribute type 83 has an invalid length. [ 688.431269][T22245] netlink: 'syz.2.4592': attribute type 4 has an invalid length. [ 688.504855][T22255] netlink: 30 bytes leftover after parsing attributes in process `syz.0.4596'. [ 688.535428][T22255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.628613][T22258] bond9: option lp_interval: invalid value (0) [ 688.647160][T22258] bond9: option lp_interval: allowed values 1 - 2147483647 [ 688.667599][T22258] bond9 (unregistering): Released all slaves [ 688.969621][T22280] xt_CT: No such helper "snmp" [ 689.474277][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4615'. [ 689.486635][T22308] syzkaller0: entered promiscuous mode [ 689.495409][T22308] syzkaller0: entered allmulticast mode [ 689.615739][T22320] syzkaller0: entered promiscuous mode [ 689.621835][T22320] syzkaller0: entered allmulticast mode [ 689.654073][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4618'. [ 689.707207][T22325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4619'. [ 689.723612][T22325] openvswitch: netlink: EtherType 0 is less than min 600 [ 689.751876][T22325] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4619'. [ 692.269298][T22319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4618'. [ 692.279932][T22323] tipc: Enabling of bearer rejected, already enabled [ 692.289639][T22322] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 692.602811][T22352] netlink: 'syz.3.4626': attribute type 1 has an invalid length. [ 692.686971][T22352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 692.712380][T22352] bond0: (slave veth0_to_bond): Releasing backup interface [ 692.730260][T22352] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 692.804631][T22352] __nla_validate_parse: 1 callbacks suppressed [ 692.804651][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4626'. [ 692.890903][T22362] 8021q: adding VLAN 0 to HW filter on device bond8 [ 692.900799][T22362] bond7: (slave bond8): Enslaving as an active interface with a down link [ 692.992778][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4635'. [ 693.007129][T22381] tunl0: Caught tx_queue_len zero misconfig [ 693.069145][T22387] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.4637'. [ 693.097626][T22392] netlink: 'syz.0.4638': attribute type 1 has an invalid length. [ 693.153861][T22392] 8021q: adding VLAN 0 to HW filter on device bond8 [ 693.277074][T22403] netlink: 'syz.2.4644': attribute type 10 has an invalid length. [ 693.319716][T22403] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 693.413426][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4646'. [ 693.550207][T22427] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4649'. [ 693.704084][T22434] xt_hashlimit: size too large, truncated to 1048576 [ 693.709793][T22427] 8021q: adding VLAN 0 to HW filter on device bond9 [ 693.712463][T22438] sctp: [Deprecated]: syz.0.4652 (pid 22438) Use of int in max_burst socket option. [ 693.712463][T22438] Use struct sctp_assoc_value instead [ 693.721614][T22427] bond0: (slave bond9): Enslaving as an active interface with an up link [ 694.025615][T22454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4657'. [ 694.215025][T22460] syzkaller0: entered allmulticast mode [ 694.302254][T22468] bridge1: entered promiscuous mode [ 694.312951][T22468] bridge1: entered allmulticast mode [ 694.330827][T22468] team0: Port device bridge1 added [ 694.336347][T22469] bridge0: port 3(team0) entered blocking state [ 694.343527][T22469] bridge0: port 3(team0) entered disabled state [ 694.350171][T22469] team0: entered allmulticast mode [ 694.355937][T22469] team_slave_0: entered allmulticast mode [ 694.372422][T22469] team_slave_1: entered allmulticast mode [ 694.388908][T22469] team0: entered promiscuous mode [ 694.394255][T22469] team_slave_0: entered promiscuous mode [ 694.401297][T22469] team_slave_1: entered promiscuous mode [ 694.412637][T22469] bridge0: port 3(team0) entered blocking state [ 694.419047][T22469] bridge0: port 3(team0) entered forwarding state [ 694.552647][T22486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4667'. [ 694.554306][T22487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4667'. [ 694.853648][ T30] audit: type=1804 audit(1783407862.168:13): pid=22498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4671" name="/newroot/291/cgroup.controllers" dev="tmpfs" ino=1500 res=1 errno=0 [ 694.859195][T22498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4671'. [ 694.913784][ T30] audit: type=1800 audit(1783407862.178:14): pid=22498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4671" name="cgroup.controllers" dev="tmpfs" ino=1500 res=0 errno=0 [ 694.941405][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4673'. [ 698.142210][T22513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.179553][T22534] __nla_validate_parse: 2 callbacks suppressed [ 698.179573][T22534] netlink: 516 bytes leftover after parsing attributes in process `syz.4.4681'. [ 698.388742][T22539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4682'. [ 698.433830][T22539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4682'. [ 698.456332][T22543] pim6reg: entered allmulticast mode [ 698.481540][T22545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4685'. [ 698.501487][T22543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4683'. [ 698.523018][T22545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4685'. [ 698.670757][T22558] pim6reg: left allmulticast mode [ 699.075471][T22579] sctp: [Deprecated]: syz.0.4695 (pid 22579) Use of int in max_burst socket option deprecated. [ 699.075471][T22579] Use struct sctp_assoc_value instead [ 699.147517][T22583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4696'. [ 699.222905][T22586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4697'. [ 699.245183][T22587] syzkaller0: entered promiscuous mode [ 699.251774][T22587] syzkaller0: entered allmulticast mode [ 699.727191][T22600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4703'. [ 699.736428][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4703'. [ 699.754585][T22600] macvlan0: entered promiscuous mode [ 699.774670][T22600] netlink: 'syz.0.4703': attribute type 2 has an invalid length. [ 700.028000][T22615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.308453][T22639] syzkaller0: entered promiscuous mode [ 700.316575][T22639] syzkaller0: entered allmulticast mode [ 701.006212][T22682] netlink: 'syz.1.4731': attribute type 5 has an invalid length. [ 701.039161][T22682] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 701.039442][T22682] bond0: Caught tx_queue_len zero misconfig [ 701.257061][T22694] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 702.188539][T22719] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 702.213076][T22724] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 702.512051][T22738] netlink: 'syz.2.4751': attribute type 1 has an invalid length. [ 702.525140][T22738] netlink: 'syz.2.4751': attribute type 1 has an invalid length. [ 702.637834][T22746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.645172][T22746] IPv6: NLM_F_CREATE should be set when creating new route [ 702.900783][T22771] netlink: 'syz.4.4758': attribute type 83 has an invalid length. [ 703.156266][T22787] netlink: 'syz.4.4766': attribute type 1 has an invalid length. [ 703.165631][T22787] netlink: 'syz.4.4766': attribute type 1 has an invalid length. [ 703.268211][T22791] __nla_validate_parse: 16 callbacks suppressed [ 703.268231][T22791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4769'. [ 703.482019][T22804] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4773'. [ 703.519310][T22808] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4775'. [ 703.549093][T22808] syzkaller1: entered promiscuous mode [ 703.556696][T22808] syzkaller1: entered allmulticast mode [ 703.635806][T22810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4776'. [ 703.663419][T22810] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4776'. [ 704.043158][T22836] IPVS: set_ctl: invalid protocol: 22 10.1.1.0:20001 [ 704.211991][T22839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4787'. [ 704.905506][T22884] bridge0: port 1(syz_tun) entered blocking state [ 704.912378][T22884] bridge0: port 1(syz_tun) entered listening state [ 705.049401][T22884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 705.134419][T22884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 705.189629][T22884] erspan0: entered promiscuous mode [ 705.209109][T22884] 8021q: adding VLAN 0 to HW filter on device bond4 [ 705.325251][T22895] xfrm0: entered promiscuous mode [ 705.347838][T22895] xfrm0: entered allmulticast mode [ 705.359681][T22895] team0: Device xfrm0 is of different type [ 705.364087][T22898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4799'. [ 705.448597][T22901] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 705.469669][T22898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4799'. [ 705.482397][T22898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4799'. [ 705.512138][T22898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4799'. [ 705.537432][T22904] syzkaller0: entered promiscuous mode [ 705.545027][T22904] syzkaller0: entered allmulticast mode [ 705.557599][T22904] veth0: entered promiscuous mode [ 705.835161][T22917] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 705.860249][T22917] bond9 (unregistering): Released all slaves [ 706.177857][T22935] netlink: 'syz.0.4811': attribute type 15 has an invalid length. [ 706.386623][ T30] audit: type=1804 audit(1783407873.708:15): pid=22955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4814" name="/newroot/351/cgroup.controllers" dev="tmpfs" ino=1804 res=1 errno=0 [ 706.390581][T22951] tc_dump_action: action bad kind [ 706.436437][ T30] audit: type=1800 audit(1783407873.738:16): pid=22955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4814" name="cgroup.controllers" dev="tmpfs" ino=1804 res=0 errno=0 [ 706.451369][T22941] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 706.467858][T22900] veth0: left promiscuous mode [ 706.479362][T22956] tc_dump_action: action bad kind [ 707.106450][T22941] vxcan1 speed is unknown, defaulting to 1000 [ 707.276491][T22999] netlink: 'syz.0.4822': attribute type 21 has an invalid length. [ 707.811356][T23007] IPVS: set_ctl: invalid protocol: 29346 5.56.96.158:60415 [ 708.019581][T23020] netlink: 'syz.1.4830': attribute type 1 has an invalid length. [ 708.119700][T23016] netlink: 'syz.0.4828': attribute type 32 has an invalid length. [ 708.619680][ T30] audit: type=1804 audit(1783407875.938:17): pid=23053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4838" name="/newroot/357/cgroup.controllers" dev="tmpfs" ino=1838 res=1 errno=0 [ 708.673441][ T30] audit: type=1800 audit(1783407875.938:18): pid=23053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4838" name="cgroup.controllers" dev="tmpfs" ino=1838 res=0 errno=0 [ 708.802362][T23057] __nla_validate_parse: 66 callbacks suppressed [ 708.802379][T23057] netlink: 748 bytes leftover after parsing attributes in process `syz.1.4839'. [ 708.867468][T23060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4840'. [ 708.900022][T23060] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4840'. [ 708.920736][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 709.127219][T23072] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4844'. [ 709.174340][T23072] bridge0: port 1(syz_tun) entered disabled state [ 709.201876][T23073] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4844'. [ 709.277669][T23079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4847'. [ 709.293886][T23079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4847'. [ 709.345393][T23084] lo: left promiscuous mode [ 709.417230][T23084] gretap0: left promiscuous mode [ 709.517283][T23089] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4852'. [ 709.518837][T23090] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4851'. [ 709.564552][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4851'. [ 709.820099][T23084] bridge0: port 3(team0) entered disabled state [ 709.826549][T23084] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.834193][T23084] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.474630][T23084] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 710.689552][T23084] veth5: left allmulticast mode [ 710.708626][T23084] gretap2: left promiscuous mode [ 710.722625][T23084] vlan3: left allmulticast mode [ 710.729283][T23084] bond0: left allmulticast mode [ 710.735242][T23084] bond_slave_0: left allmulticast mode [ 710.741000][T23084] bond_slave_1: left allmulticast mode [ 710.751868][T23084] bond1: left allmulticast mode [ 710.797941][T23084] bond5: left promiscuous mode [ 710.803494][T23084] bond5: left allmulticast mode [ 710.813038][T23084] bond6: left promiscuous mode [ 710.817868][T23084] bond6: left allmulticast mode [ 710.826185][T23084] bond7: left allmulticast mode [ 710.836158][T23084] vlan4: left promiscuous mode [ 710.841699][T23084] geneve1: left promiscuous mode [ 710.846876][T23084] vlan4: left allmulticast mode [ 710.852735][T23084] geneve1: left allmulticast mode [ 710.858198][T23084] gtp1: left promiscuous mode [ 710.863521][T23084] gtp1: left allmulticast mode [ 710.959931][ T8405] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.988487][ T8405] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.000198][ T8405] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 711.026418][ T8405] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.050099][ T8405] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.071384][ T8405] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 711.084499][ T8405] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.095122][ T8405] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.108844][ T8405] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 711.118766][ T8405] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.130291][ T8405] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.141749][ T8405] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 711.249120][T23123] syzkaller0: entered promiscuous mode [ 711.255243][T23123] syzkaller0: entered allmulticast mode [ 711.264299][T23125] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 711.416829][T23139] hsr_slave_1 (unregistering): left promiscuous mode [ 711.584032][T23154] IPv6: NLM_F_CREATE should be specified when creating new route [ 711.954882][T23182] netlink: 'syz.0.4880': attribute type 1 has an invalid length. [ 711.971257][T23182] netlink: 'syz.0.4880': attribute type 2 has an invalid length. [ 712.456661][T23204] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 715.808090][T23183] __nla_validate_parse: 4 callbacks suppressed [ 715.808113][T23183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4879'. [ 716.145783][T23232] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4890'. [ 716.375702][T23246] netlink: 'syz.3.4893': attribute type 2 has an invalid length. [ 716.783981][T23284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4901'. [ 717.225593][T23310] netlink: 'syz.3.4908': attribute type 2 has an invalid length. [ 717.265849][T23310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4908'. [ 717.279675][T23312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.301912][T23316] openvswitch: netlink: Duplicate key (type 6). [ 717.396713][T23320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.497099][T23326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4912'. [ 717.521069][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4912'. [ 717.572301][T23326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4912'. [ 717.572320][ T144] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.582178][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4912'. [ 717.607946][ T144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.618632][ T144] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.627555][ T144] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.696454][T23344] openvswitch: netlink: Flow actions attr not present in new flow. [ 717.721617][ T762] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 718.156492][T23357] bond8: entered allmulticast mode [ 718.265712][T23373] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.274759][T23373] team0: Cannot enslave team device to itself [ 718.377691][T23386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.109691][T23363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.678310][ T50] block nbd2: Receive control failed (result -107) [ 721.715797][T23404] nbd2: detected capacity change from 0 to 63 [ 721.735949][ T5641] block nbd2: Receive control failed (result -104) [ 721.831005][T23431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4935'. [ 721.840281][T23431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4935'. [ 722.333734][T23476] veth0_to_hsr: mtu less than device minimum [ 722.523723][T23489] netlink: 'syz.0.4952': attribute type 2 has an invalid length. [ 722.527260][T23491] netlink: 'syz.3.4953': attribute type 21 has an invalid length. [ 722.555039][T23491] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4953'. [ 722.739187][T23504] syz_tun: entered allmulticast mode [ 722.763535][T23504] syz_tun: left allmulticast mode [ 722.995102][T23510] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4957'. [ 723.052190][T23510] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4957'. [ 723.065021][T23507] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.086724][T23507] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.255866][T23507] syzkaller0: entered promiscuous mode [ 723.277171][T23507] syzkaller0: entered allmulticast mode [ 723.704984][ T30] audit: type=1804 audit(1783407891.028:19): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4964" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1678 res=1 errno=0 [ 723.785816][ T30] audit: type=1800 audit(1783407891.028:20): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4964" name="cgroup.controllers" dev="tmpfs" ino=1678 res=0 errno=0 [ 723.867732][ T30] audit: type=1804 audit(1783407891.028:21): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4964" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1678 res=1 errno=0 [ 724.064570][T23560] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4970'. [ 724.335588][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.026300][T23559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.039527][T23579] netlink: 'syz.2.4973': attribute type 11 has an invalid length. [ 727.372465][T23609] netlink: 'syz.1.4979': attribute type 3 has an invalid length. [ 727.382745][T23607] netlink: 'syz.3.4980': attribute type 11 has an invalid length. [ 727.413540][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4980'. [ 727.458028][T23607] team0: entered promiscuous mode [ 727.482203][T23607] team_slave_0: entered promiscuous mode [ 727.493131][T23607] team_slave_1: entered promiscuous mode [ 727.521620][T23607] team0: left promiscuous mode [ 727.526604][T23607] team_slave_0: left promiscuous mode [ 727.533143][T23607] team_slave_1: left promiscuous mode [ 727.626459][T23621] gtp0: entered promiscuous mode [ 727.652875][T23621] gtp0: entered allmulticast mode [ 727.715201][T23626] bond9: entered promiscuous mode [ 727.720749][T23626] bond9: entered allmulticast mode [ 727.726513][T23626] 8021q: adding VLAN 0 to HW filter on device bond9 [ 727.795126][T23639] netlink: 'syz.1.4991': attribute type 21 has an invalid length. [ 727.824581][T23639] netlink: 'syz.1.4991': attribute type 1 has an invalid length. [ 727.834963][T23644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4988'. [ 727.972852][T23652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4995'. [ 728.017471][T23652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4995'. [ 728.200166][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4997'. [ 728.246620][T23659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4997'. [ 728.510151][T23675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5001'. [ 728.747512][T23686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5007'. [ 728.754350][T23690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5009'. [ 728.774636][T23690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5009'. [ 728.826914][T23692] netlink: 'syz.0.5010': attribute type 11 has an invalid length. [ 728.917891][T23701] netlink: zone id is out of range [ 728.946753][T23704] netlink: 'syz.2.5012': attribute type 10 has an invalid length. [ 729.034809][T23704] team0: Port device geneve1 added [ 729.214639][T23711] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 729.243619][T23711] bond10 (unregistering): Released all slaves [ 729.276013][T23719] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 729.366762][T23721] netlink: 'syz.2.5019': attribute type 10 has an invalid length. [ 729.481611][T23721] dummy0: left promiscuous mode [ 729.517058][T23729] netlink: 'syz.0.5021': attribute type 4 has an invalid length. [ 729.549841][T23721] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 730.173489][T23777] netlink: 'syz.1.5032': attribute type 11 has an invalid length. [ 730.225923][T23777] netlink: 'syz.1.5032': attribute type 4 has an invalid length. [ 730.570998][T23800] sctp: [Deprecated]: syz.2.5044 (pid 23800) Use of int in max_burst socket option deprecated. [ 730.570998][T23800] Use struct sctp_assoc_value instead [ 730.613975][T23803] netlink: 'syz.4.5045': attribute type 1 has an invalid length. [ 730.897957][T23819] Cannot find set identified by id 65534 to match [ 730.934602][ T30] audit: type=1804 audit(1783407898.248:22): pid=23819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5050" name="/newroot/436/cgroup.controllers" dev="tmpfs" ino=2236 res=1 errno=0 [ 730.959234][T23821] netlink: 'syz.3.5051': attribute type 10 has an invalid length. [ 730.980498][ T30] audit: type=1800 audit(1783407898.248:23): pid=23819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5050" name="cgroup.controllers" dev="tmpfs" ino=2236 res=0 errno=0 [ 730.988502][T23821] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 731.117438][T23813] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 731.544848][T23846] syzkaller0: entered promiscuous mode [ 731.569050][T23846] syzkaller0: entered allmulticast mode [ 731.746435][T23870] netlink: 'syz.0.5066': attribute type 1 has an invalid length. [ 732.115184][T23878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.472118][T23888] __nla_validate_parse: 15 callbacks suppressed [ 735.472136][T23888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5070'. [ 735.482997][T23887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5070'. [ 735.545658][T23887] netlink: 'syz.0.5070': attribute type 7 has an invalid length. [ 735.553547][T23888] netlink: 'syz.0.5070': attribute type 7 has an invalid length. [ 735.553571][T23888] netlink: 'syz.0.5070': attribute type 8 has an invalid length. [ 735.553583][T23888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5070'. [ 735.594990][T23887] netlink: 'syz.0.5070': attribute type 8 has an invalid length. [ 735.620521][T23887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5070'. [ 735.701843][T23902] syzkaller0: entered promiscuous mode [ 735.718054][T23902] syzkaller0: entered allmulticast mode [ 735.752535][T23904] syzkaller0: entered promiscuous mode [ 735.767523][T23904] syzkaller0: entered allmulticast mode [ 735.788812][T23902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5076'. [ 736.287497][T23938] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 736.598421][T23961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5092'. [ 736.773409][T23968] netlink: 'syz.3.5096': attribute type 1 has an invalid length. [ 736.796845][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5095'. [ 736.815399][T23976] netlink: 'syz.0.5099': attribute type 1 has an invalid length. [ 736.866560][T23968] 8021q: adding VLAN 0 to HW filter on device bond10 [ 736.874294][T23971] veth1_to_bridge: entered allmulticast mode [ 736.887860][T23971] bridge0: port 2(veth1_to_bridge) entered blocking state [ 736.896166][T23971] bridge0: port 2(veth1_to_bridge) entered disabled state [ 736.906635][T23971] veth1_to_bridge: entered promiscuous mode [ 736.939642][T23978] 8021q: adding VLAN 0 to HW filter on device bond10 [ 736.949304][T23978] bond10: (slave gre2): The slave device specified does not support setting the MAC address [ 736.963706][T23978] bond10: (slave gre2): Error -95 calling set_mac_address [ 736.975772][T23989] xt_hashlimit: size too large, truncated to 1048576 [ 737.065876][T23982] bond9 (unregistering): Released all slaves [ 737.115239][T23968] gretap1: entered promiscuous mode [ 737.168546][T23968] bond10: (slave gretap1): making interface the new active one [ 737.184245][T23968] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 737.225357][T23986] macvlan2: entered promiscuous mode [ 737.234406][T23986] macvlan2: entered allmulticast mode [ 737.242189][T23986] bond10: entered promiscuous mode [ 737.250115][T23986] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 737.273262][T23986] bond10: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 737.291716][T23986] bond10: left promiscuous mode [ 737.300365][T24001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5103'. [ 737.343092][T24001] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5103'. [ 737.557066][T24011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5107'. [ 737.667102][T24022] netlink: 'syz.3.5107': attribute type 12 has an invalid length. [ 737.967344][T24044] netlink: 'syz.0.5115': attribute type 6 has an invalid length. [ 738.001354][T24045] netlink: 'syz.1.5118': attribute type 1 has an invalid length. [ 738.484360][T24084] team1: entered promiscuous mode [ 738.489581][T24084] team1: entered allmulticast mode [ 738.512949][T24084] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 738.554565][T24085] bond6: entered promiscuous mode [ 738.560368][T24085] bond6: entered allmulticast mode [ 738.567054][T24085] 8021q: adding VLAN 0 to HW filter on device bond6 [ 738.639232][T24089] syzkaller0: entered promiscuous mode [ 738.645376][T24089] syzkaller0: entered allmulticast mode [ 738.888318][T24109] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 738.897234][T24109] sock: sock_set_timeout: `syz.1.5138' (pid 24109) tries to set negative timeout [ 743.338807][T24129] __nla_validate_parse: 12 callbacks suppressed [ 743.338825][T24129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5144'. [ 743.397262][T24132] openvswitch: netlink: Message has 8 unknown bytes. [ 743.566224][T24140] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 743.673301][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5152'. [ 743.692645][T24148] xt_hashlimit: size too large, truncated to 1048576 [ 743.815949][T24161] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 744.380825][T24173] openvswitch: netlink: Missing key (keys=40, expected=100) [ 744.422729][T24173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.473697][T24140] vxcan1 speed is unknown, defaulting to 1000 [ 744.484721][T24173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 744.978003][T24185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5163'. [ 745.282922][T24191] lo: MTU too low for tipc bearer [ 745.294726][T24191] tipc: Enabling of bearer rejected, failed to enable media [ 746.044334][T24210] netlink: 'syz.3.5172': attribute type 83 has an invalid length. [ 746.053133][T24209] netlink: 'syz.3.5172': attribute type 83 has an invalid length. [ 746.109709][T24212] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5173'. [ 746.367906][T24216] tipc: Enabling of bearer rejected, already enabled [ 747.049001][T24233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5178'. [ 747.437936][T24244] netlink: 'syz.2.5180': attribute type 1 has an invalid length. [ 747.488757][T24240] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 747.665350][T24244] 8021q: adding VLAN 0 to HW filter on device bond9 [ 747.731707][T24245] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 747.768732][T24245] bond9: entered allmulticast mode [ 747.839561][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5181'. [ 747.889945][T24252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5181'. [ 748.060044][ T5749] IPVS: starting estimator thread 0... [ 748.202887][T24259] IPVS: using max 36 ests per chain, 86400 per kthread [ 748.806991][T24273] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5188'. [ 748.816915][T24273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5188'. [ 749.337477][T24297] syzkaller0: entered promiscuous mode [ 749.348900][T24297] syzkaller0: entered allmulticast mode [ 749.471913][T24305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5200'. [ 749.485516][T24303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5199'. [ 749.508532][T24305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5200'. [ 749.518797][T24303] nbd: must specify at least one socket [ 749.594841][T24145] Set syz1 is full, maxelem 65536 reached [ 749.647122][T24307] netlink: 'syz.0.5201': attribute type 1 has an invalid length. [ 749.673470][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5201'. [ 749.803988][T24316] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 749.813110][T24316] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 749.937241][T24326] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5205'. [ 749.985891][T24331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5208'. [ 750.170858][T24339] Unsupported ieee802154 address type: 0 [ 750.478872][T24352] netlink: 'syz.3.5213': attribute type 4 has an invalid length. [ 750.970320][T24372] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5219'. [ 751.195105][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5222'. [ 751.398815][T24402] gtp1: entered promiscuous mode [ 751.410763][T24402] gtp1: entered allmulticast mode [ 751.735526][T24418] syzkaller0: entered promiscuous mode [ 751.743169][T24418] syzkaller0: entered allmulticast mode [ 751.801056][ T1614] block nbd2: Connection timed out, retrying (0/2 alive) [ 751.808273][ T1614] block nbd2: Connection timed out, retrying (0/2 alive) [ 751.816655][ T1614] block nbd2: Connection timed out, retrying (0/2 alive) [ 751.823922][ T10] block nbd2: Dead connection, failed to find a fallback [ 751.834647][ T10] block nbd2: shutting down sockets [ 751.842928][ T10] blk_print_req_error: 269 callbacks suppressed [ 751.842946][ T10] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.862498][ T1614] block nbd2: Connection timed out, retrying (0/2 alive) [ 751.870208][ T10] buffer_io_error: 286 callbacks suppressed [ 751.870223][ T10] Buffer I/O error on dev nbd2, logical block 1, async page read [ 751.886315][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.895682][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 751.904461][ T10] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.913819][ T10] Buffer I/O error on dev nbd2, logical block 3, async page read [ 751.921889][ T10] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.931997][ T10] Buffer I/O error on dev nbd2, logical block 2, async page read [ 751.940128][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 751.951251][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 751.959116][ T10] Buffer I/O error on dev nbd2, logical block 1, async page read [ 751.970550][ T10] Buffer I/O error on dev nbd2, logical block 2, async page read [ 751.978882][ T10] Buffer I/O error on dev nbd2, logical block 3, async page read [ 752.005042][ T1677] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 752.019252][ T1677] Buffer I/O error on dev nbd2, logical block 0, async page read [ 752.027652][ T1677] Buffer I/O error on dev nbd2, logical block 1, async page read [ 752.038746][ T1677] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 752.053936][ T1677] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 752.066389][ T1677] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 752.076316][ T1677] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 752.087216][T23203] ldm_validate_partition_table(): Disk read failed. [ 752.104797][T23203] Dev nbd2: unable to read RDB block 0 [ 752.113494][T23203] nbd2: unable to read partition table [ 752.158059][T23203] ldm_validate_partition_table(): Disk read failed. [ 752.167910][T23203] Dev nbd2: unable to read RDB block 0 [ 752.176579][T23203] nbd2: unable to read partition table [ 752.339476][T24455] x_tables: duplicate underflow at hook 1 [ 752.866954][T24483] netlink: 'syz.2.5250': attribute type 13 has an invalid length. [ 752.917349][T24483] erspan0: refused to change device tx_queue_len [ 752.941583][T24483] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 752.956512][T24489] netlink: 'syz.3.5252': attribute type 10 has an invalid length. [ 753.036379][T24488] bond0: (slave dummy0): Releasing backup interface [ 753.058721][T24489] dummy0: entered promiscuous mode [ 753.349786][T24506] IPVS: persistence engine module ip_vs_pe_À not found [ 753.547781][T24522] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 753.596095][T24527] nbd: nbd2 already in use [ 753.689478][T24541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.850237][T24549] __nla_validate_parse: 5 callbacks suppressed [ 753.850254][T24549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5269'. [ 753.989695][T24522] vxcan1 speed is unknown, defaulting to 1000 [ 754.239997][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5274'. [ 754.263783][T24567] block nbd0: reconnected socket [ 754.271525][T24567] netlink: 'syz.1.5274': attribute type 1 has an invalid length. [ 754.295932][T24567] nbd: error processing sock list [ 754.316930][ T5641] block nbd0: Receive control failed (result -32) [ 754.515401][T24577] netlink: 'syz.2.5276': attribute type 28 has an invalid length. [ 754.549923][T24577] netlink: 'syz.2.5276': attribute type 3 has an invalid length. [ 754.561795][T24577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5276'. [ 754.906160][T24588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.950375][T24601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5280'. [ 754.992883][T24601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5280'. [ 755.118640][T24604] netlink: 'syz.3.5280': attribute type 83 has an invalid length. [ 755.175194][T24607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5283'. [ 755.661568][T24625] syzkaller0: entered promiscuous mode [ 755.681721][T24625] syzkaller0: entered allmulticast mode [ 755.979213][T24641] netlink: 'syz.4.5294': attribute type 21 has an invalid length. [ 755.991521][T24641] IPv6: NLM_F_CREATE should be specified when creating new route [ 756.052791][T24641] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.5294'. [ 756.162339][T24648] netlink: 'syz.2.5297': attribute type 1 has an invalid length. [ 756.178338][T24649] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5297'. [ 756.191025][T24649] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5297'. [ 756.365525][T24663] netlink: 'syz.0.5300': attribute type 2 has an invalid length. [ 756.481101][T24665] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5301'. [ 756.512080][T24668] openvswitch: netlink: Message has 1 unknown bytes. [ 756.693583][T24685] netlink: 'syz.3.5305': attribute type 1 has an invalid length. [ 757.980140][T24744] validate_nla: 34 callbacks suppressed [ 757.980163][T24744] netlink: 'syz.0.5320': attribute type 3 has an invalid length. [ 758.075824][T24750] xt_hashlimit: size too large, truncated to 1048576 [ 758.085232][T24752] netlink: 'syz.3.5323': attribute type 1 has an invalid length. [ 758.175798][T24752] 8021q: adding VLAN 0 to HW filter on device bond11 [ 758.329306][T24762] netlink: 'syz.2.5326': attribute type 16 has an invalid length. [ 758.689672][T24780] sctp: [Deprecated]: syz.2.5331 (pid 24780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 758.689672][T24780] Use struct sctp_sack_info instead [ 758.877210][T24790] __nla_validate_parse: 41 callbacks suppressed [ 758.877230][T24790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5335'. [ 759.099952][T24802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5338'. [ 759.110022][T24802] openvswitch: netlink: Flow key attr not present in new flow. [ 759.116754][T24796] bond10: option fail_over_mac: invalid value (16) [ 759.160101][T24796] bond10 (unregistering): Released all slaves [ 759.208235][T24806] nbd: nbd0 already in use [ 759.452307][T24818] netlink: 'syz.4.5342': attribute type 17 has an invalid length. [ 759.506555][T24818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5342'. [ 759.558971][T24823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5345'. [ 759.574789][T24818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5342'. [ 759.650219][T24818] 0ªX¹¦Dö»: entered promiscuous mode [ 759.689991][T24827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5347'. [ 759.706321][T24818] 0ªX¹¦Dö»: left promiscuous mode [ 759.911578][T24830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.940109][T24830] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.997164][T24840] netlink: 'syz.4.5351': attribute type 10 has an invalid length. [ 760.006396][T24840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5351'. [ 760.109244][T24830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 760.126553][T24830] veth1_macvtap: left promiscuous mode [ 760.134855][T24830] veth0_macvtap: left promiscuous mode [ 760.143420][T24830] veth0_macvtap: entered promiscuous mode [ 760.164124][T24830] veth1_macvtap: entered promiscuous mode [ 760.185417][T24830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 760.205087][T24830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 760.223391][T24830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 760.243696][T24830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 760.278982][T24830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 760.325932][T24830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 760.344982][T24830] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 760.366925][T24856] netlink: 'syz.2.5355': attribute type 62 has an invalid length. [ 760.373620][T24830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.387655][T24851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5355'. [ 760.398177][T24851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5355'. [ 760.407035][T24830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 760.426640][T24830] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 760.460030][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.467340][ T8408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.502358][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.509560][ T8408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.576303][ T8408] bridge0: port 3(team0) entered blocking state [ 760.582714][ T8408] bridge0: port 3(team0) entered forwarding state [ 760.591165][ T8410] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.611778][ T8410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.616923][T24865] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5357'. [ 760.629837][ T8410] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 760.630233][ T8410] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.630256][ T8410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.630273][ T8410] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 760.630301][ T8410] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.630318][ T8410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.630335][ T8410] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 760.630361][ T8410] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.630381][ T8410] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.630463][ T8410] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 760.896863][T24872] veth0_to_bond: entered allmulticast mode [ 760.901499][T24874] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 760.922567][ T57] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 760.931742][ T57] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 760.940862][T18352] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 760.982394][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 760.995529][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.011078][T18352] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.127708][T24882] netlink: 'syz.4.5364': attribute type 2 has an invalid length. [ 761.301394][T24887] netlink: 'syz.3.5366': attribute type 18 has an invalid length. [ 761.402132][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.440376][T24901] netlink: 'syz.2.5370': attribute type 1 has an invalid length. [ 761.602429][T24910] netlink: 'syz.0.5372': attribute type 10 has an invalid length. [ 761.613062][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.629294][T24901] bond10: entered promiscuous mode [ 761.635715][T24901] 8021q: adding VLAN 0 to HW filter on device bond10 [ 761.684377][T24906] 8021q: adding VLAN 0 to HW filter on device bond10 [ 761.697414][T24906] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 761.709207][T24906] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 761.725529][T24906] bond10: (slave ip6gre1): making interface the new active one [ 761.733291][T24906] ip6gre1: entered promiscuous mode [ 761.739858][T24906] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 761.792802][T24910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.811109][T24910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.818552][ T11] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 761.968109][ T11] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 762.307822][T24935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.381162][ T11] IPVS: starting estimator thread 0... [ 762.387654][T24935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.406097][T24951] IPv6: Can't replace route, no match found [ 762.472783][T24950] IPVS: using max 29 ests per chain, 69600 per kthread [ 762.690045][T24959] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 762.765717][ T30] audit: type=1804 audit(1783407930.088:24): pid=24968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5386" name="/newroot/401/cgroup.controllers" dev="tmpfs" ino=2082 res=1 errno=0 [ 762.767324][T24959] bond10 (unregistering): Released all slaves [ 762.790196][ T30] audit: type=1800 audit(1783407930.088:25): pid=24968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5386" name="cgroup.controllers" dev="tmpfs" ino=2082 res=0 errno=0 [ 763.004018][T24964] syzkaller1: entered promiscuous mode [ 763.032202][T24964] syzkaller1: entered allmulticast mode [ 763.397672][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.464786][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.527778][T24981] vlan4: entered promiscuous mode [ 763.558166][T24981] hsr0: entered promiscuous mode [ 763.569905][T24981] vlan4: entered allmulticast mode [ 763.583337][T24981] hsr0: entered allmulticast mode [ 763.608266][T24981] hsr_slave_0: entered allmulticast mode [ 763.617033][ T8417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.670349][ T8417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.844017][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.854756][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.862937][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.892203][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.948847][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.040782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.071309][T25002] syzkaller0: entered promiscuous mode [ 764.084367][T25002] syzkaller0: entered allmulticast mode [ 764.180131][T25013] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 764.416214][T25025] netlink: 'syz.3.5404': attribute type 1 has an invalid length. [ 764.468993][T25025] 8021q: adding VLAN 0 to HW filter on device bond13 [ 764.493615][T25025] syzkaller0: entered promiscuous mode [ 764.499401][T25025] syzkaller0: entered allmulticast mode [ 764.536242][T25025] bond13: (slave gretap2): Enslaving as a backup interface with an up link [ 764.865318][T25042] __nla_validate_parse: 12 callbacks suppressed [ 764.865339][T25042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5407'. [ 765.066689][T25047] xt_TPROXY: Can be used only with -p tcp or -p udp [ 765.100198][T25050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5411'. [ 765.832138][T25100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5423'. [ 766.012468][T25105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5425'. [ 766.021724][T25105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5425'. [ 766.036132][T25105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5425'. [ 766.099506][T25105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5425'. [ 766.138180][T25105] netlink: 'syz.0.5425': attribute type 10 has an invalid length. [ 766.157140][T25111] netlink: 83 bytes leftover after parsing attributes in process `syz.4.5427'. [ 766.157295][T25105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5425'. [ 766.478234][T25127] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5431'. [ 766.519956][T25131] TCP: TCP_TX_DELAY enabled [ 767.429818][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.459463][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.536269][T25194] 0·: renamed from hsr0 (while UP) [ 767.547035][T25194] 0·: entered allmulticast mode [ 767.586733][T25194] hsr_slave_0: entered allmulticast mode [ 767.821997][T25211] netlink: 'syz.1.5456': attribute type 29 has an invalid length. [ 767.974690][ T5641] block nbd0: Receive control failed (result -107) [ 767.986552][T25222] block nbd0: reconnected socket [ 768.307256][T25249] Unsupported ieee802154 address type: 0 [ 768.444421][ T30] audit: type=1107 audit(1783407935.758:26): pid=25253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 768.453452][ T30] audit: type=1107 audit(1783407935.778:27): pid=25253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 768.693703][T25267] syzkaller0: entered promiscuous mode [ 768.812455][T25267] syzkaller0: entered allmulticast mode [ 768.852139][T25275] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 768.878215][T25283] xt_nat: multiple ranges no longer supported [ 769.837743][T25343] net_ratelimit: 38 callbacks suppressed [ 769.837762][T25343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.933795][T25352] netlink: 'syz.3.5496': attribute type 1 has an invalid length. [ 770.006757][T25357] __nla_validate_parse: 17 callbacks suppressed [ 770.006774][T25357] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5495'. [ 770.058860][T25356] [ 770.061234][T25356] ====================================================== [ 770.068259][T25356] WARNING: possible circular locking dependency detected [ 770.075313][T25356] syzkaller #0 Not tainted [ 770.079734][T25356] ------------------------------------------------------ [ 770.086845][T25356] syz.3.5496/25356 is trying to acquire lock: [ 770.092929][T25356] ffffffff8ec847a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 770.102233][T25356] [ 770.102233][T25356] but task is already holding lock: [ 770.109614][T25356] ffff88801b05d038 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 770.119133][T25356] [ 770.119133][T25356] which lock already depends on the new lock. [ 770.119133][T25356] [ 770.129543][T25356] [ 770.129543][T25356] the existing dependency chain (in reverse order) is: [ 770.138561][T25356] [ 770.138561][T25356] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 770.146127][T25356] __might_fault+0xcb/0x130 [ 770.151162][T25356] _copy_from_user+0x28/0xb0 [ 770.156289][T25356] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 770.162886][T25356] ip_generic_getfrag+0x149/0x2d0 [ 770.168442][T25356] __ip6_append_data+0x3b26/0x40c0 [ 770.174080][T25356] ip6_append_data+0x108/0x270 [ 770.179458][T25356] rawv6_sendmsg+0x1298/0x18c0 [ 770.184752][T25356] sock_sendmsg_nosec+0x10e/0x180 [ 770.190302][T25356] ____sys_sendmsg+0x54e/0x850 [ 770.195602][T25356] ___sys_sendmsg+0x2a5/0x360 [ 770.200804][T25356] __x64_sys_sendmsg+0x1b1/0x290 [ 770.206279][T25356] do_syscall_64+0x174/0x580 [ 770.211396][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.217811][T25356] [ 770.217811][T25356] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 770.225548][T25356] lock_sock_nested+0x41/0x100 [ 770.230839][T25356] inet_shutdown+0x6a/0x390 [ 770.235868][T25356] nbd_mark_nsock_dead+0x2cb/0x550 [ 770.241773][T25356] recv_work+0x1cee/0x1e10 [ 770.246753][T25356] process_scheduled_works+0xa8e/0x14e0 [ 770.252822][T25356] worker_thread+0xa47/0xfb0 [ 770.257939][T25356] kthread+0x388/0x470 [ 770.262534][T25356] ret_from_fork+0x514/0xb70 [ 770.267695][T25356] ret_from_fork_asm+0x1a/0x30 [ 770.273000][T25356] [ 770.273000][T25356] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 770.280657][T25356] __mutex_lock+0x19d/0x1550 [ 770.285860][T25356] nbd_queue_rq+0x373/0x1150 [ 770.290974][T25356] blk_mq_dispatch_rq_list+0x499/0x1990 [ 770.297080][T25356] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 770.303937][T25356] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 770.310448][T25356] blk_mq_run_work_fn+0x16c/0x300 [ 770.316001][T25356] process_scheduled_works+0xa8e/0x14e0 [ 770.322777][T25356] worker_thread+0xa47/0xfb0 [ 770.327897][T25356] kthread+0x388/0x470 [ 770.332873][T25356] ret_from_fork+0x514/0xb70 [ 770.338084][T25356] ret_from_fork_asm+0x1a/0x30 [ 770.343368][T25356] [ 770.343368][T25356] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 770.350670][T25356] __mutex_lock+0x19d/0x1550 [ 770.355789][T25356] nbd_queue_rq+0xc1/0x1150 [ 770.360825][T25356] blk_mq_dispatch_rq_list+0x499/0x1990 [ 770.367001][T25356] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 770.373866][T25356] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 770.380370][T25356] blk_mq_run_work_fn+0x16c/0x300 [ 770.385918][T25356] process_scheduled_works+0xa8e/0x14e0 [ 770.391983][T25356] worker_thread+0xa47/0xfb0 [ 770.397090][T25356] kthread+0x388/0x470 [ 770.401681][T25356] ret_from_fork+0x514/0xb70 [ 770.407050][T25356] ret_from_fork_asm+0x1a/0x30 [ 770.412335][T25356] [ 770.412335][T25356] -> #3 (set->srcu){.+.+}-{0:0}: [ 770.419457][T25356] __synchronize_srcu+0xc9/0x2f0 [ 770.424923][T25356] elevator_switch+0x1e8/0x7b0 [ 770.430208][T25356] elevator_change+0x2fa/0x480 [ 770.435494][T25356] elevator_set_default+0x375/0x440 [ 770.441219][T25356] blk_register_queue+0x3f3/0x4e0 [ 770.446784][T25356] __add_disk+0x6cb/0xe30 [ 770.451637][T25356] add_disk_fwnode+0xfb/0x4b0 [ 770.456835][T25356] nbd_dev_add+0x733/0xb60 [ 770.461771][T25356] nbd_init+0x15f/0x1e0 [ 770.466452][T25356] do_one_initcall+0x250/0x870 [ 770.471738][T25356] do_initcall_level+0x10a/0x1a0 [ 770.477295][T25356] do_initcalls+0x59/0xa0 [ 770.482149][T25356] kernel_init_freeable+0x29d/0x3e0 [ 770.487867][T25356] kernel_init+0x1d/0x1d0 [ 770.492711][T25356] ret_from_fork+0x514/0xb70 [ 770.497822][T25356] ret_from_fork_asm+0x1a/0x30 [ 770.503106][T25356] [ 770.503106][T25356] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 770.511018][T25356] __mutex_lock+0x19d/0x1550 [ 770.516149][T25356] elevator_change+0x1af/0x480 [ 770.521435][T25356] elevator_set_none+0xb5/0x140 [ 770.526806][T25356] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 770.533138][T25356] nbd_start_device+0x189/0xb30 [ 770.538515][T25356] nbd_genl_connect+0x1597/0x1c10 [ 770.544067][T25356] genl_family_rcv_msg_doit+0x233/0x340 [ 770.550138][T25356] genl_rcv_msg+0x614/0x7a0 [ 770.555161][T25356] netlink_rcv_skb+0x226/0x4a0 [ 770.560460][T25356] genl_rcv+0x28/0x40 [ 770.564973][T25356] netlink_unicast+0x7bb/0x940 [ 770.570272][T25356] netlink_sendmsg+0x813/0xb40 [ 770.575571][T25356] sock_sendmsg_nosec+0x13a/0x180 [ 770.581126][T25356] ____sys_sendmsg+0x54e/0x850 [ 770.586498][T25356] ___sys_sendmsg+0x2a5/0x360 [ 770.591700][T25356] __x64_sys_sendmsg+0x1b1/0x290 [ 770.597159][T25356] do_syscall_64+0x174/0x580 [ 770.602368][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.608792][T25356] [ 770.608792][T25356] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 770.617409][T25356] blk_alloc_queue+0x544/0x690 [ 770.622703][T25356] __blk_mq_alloc_disk+0x194/0x390 [ 770.628379][T25356] nbd_dev_add+0x494/0xb60 [ 770.633330][T25356] nbd_init+0x15f/0x1e0 [ 770.638023][T25356] do_one_initcall+0x250/0x870 [ 770.643428][T25356] do_initcall_level+0x10a/0x1a0 [ 770.649149][T25356] do_initcalls+0x59/0xa0 [ 770.654000][T25356] kernel_init_freeable+0x29d/0x3e0 [ 770.659721][T25356] kernel_init+0x1d/0x1d0 [ 770.664573][T25356] ret_from_fork+0x514/0xb70 [ 770.669691][T25356] ret_from_fork_asm+0x1a/0x30 [ 770.674972][T25356] [ 770.674972][T25356] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 770.682183][T25356] __lock_acquire+0x1520/0x2cf0 [ 770.687577][T25356] lock_acquire+0x106/0x350 [ 770.692606][T25356] fs_reclaim_acquire+0x71/0x100 [ 770.698071][T25356] prepare_alloc_pages+0x15b/0x650 [ 770.703796][T25356] __alloc_frozen_pages_noprof+0x12f/0x380 [ 770.710139][T25356] alloc_pages_mpol+0x212/0x380 [ 770.715604][T25356] folio_alloc_mpol_noprof+0x39/0x160 [ 770.721597][T25356] vma_alloc_folio_noprof+0xe1/0x1e0 [ 770.727501][T25356] do_wp_page+0x1163/0x4c70 [ 770.732529][T25356] handle_mm_fault+0x1490/0x3080 [ 770.737988][T25356] do_user_addr_fault+0x744/0x1340 [ 770.743630][T25356] exc_page_fault+0x6a/0xc0 [ 770.748670][T25356] asm_exc_page_fault+0x26/0x30 [ 770.754038][T25356] rep_movs_alternative+0x4a/0xa0 [ 770.759588][T25356] _copy_to_iter+0x255/0x1810 [ 770.764791][T25356] __skb_datagram_iter+0x419/0x980 [ 770.770521][T25356] skb_copy_datagram_iter+0xb5/0x240 [ 770.776422][T25356] virtio_transport_stream_dequeue+0x1d9/0xb00 [ 770.783109][T25356] __vsock_connectible_recvmsg+0x844/0xc30 [ 770.789441][T25356] sock_recvmsg+0x196/0x1e0 [ 770.794467][T25356] __sys_recvfrom+0x231/0x3a0 [ 770.799669][T25356] __x64_sys_recvfrom+0xde/0x100 [ 770.805221][T25356] do_syscall_64+0x174/0x580 [ 770.810335][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.816753][T25356] [ 770.816753][T25356] other info that might help us debug this: [ 770.816753][T25356] [ 770.826978][T25356] Chain exists of: [ 770.826978][T25356] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 770.826978][T25356] [ 770.839759][T25356] Possible unsafe locking scenario: [ 770.839759][T25356] [ 770.847208][T25356] CPU0 CPU1 [ 770.852569][T25356] ---- ---- [ 770.858013][T25356] rlock(&mm->mmap_lock); [ 770.862514][T25356] lock(sk_lock-AF_INET6); [ 770.869535][T25356] lock(&mm->mmap_lock); [ 770.876384][T25356] lock(fs_reclaim); [ 770.880366][T25356] [ 770.880366][T25356] *** DEADLOCK *** [ 770.880366][T25356] [ 770.888500][T25356] 2 locks held by syz.3.5496/25356: [ 770.893686][T25356] #0: ffff888067a8f420 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: __vsock_connectible_recvmsg+0xf6/0xc30 [ 770.904389][T25356] #1: ffff88801b05d038 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 770.914316][T25356] [ 770.914316][T25356] stack backtrace: [ 770.920290][T25356] CPU: 1 UID: 0 PID: 25356 Comm: syz.3.5496 Not tainted syzkaller #0 PREEMPT(full) [ 770.920311][T25356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 770.920321][T25356] Call Trace: [ 770.920327][T25356] [ 770.920333][T25356] dump_stack_lvl+0xe8/0x150 [ 770.920359][T25356] print_circular_bug+0x2e1/0x300 [ 770.920376][T25356] check_noncircular+0x12e/0x150 [ 770.920402][T25356] __lock_acquire+0x1520/0x2cf0 [ 770.920426][T25356] ? finish_task_switch+0x412/0xc60 [ 770.920446][T25356] ? __lock_acquire+0x683/0x2cf0 [ 770.920470][T25356] ? prepare_alloc_pages+0x15b/0x650 [ 770.920492][T25356] lock_acquire+0x106/0x350 [ 770.920512][T25356] ? prepare_alloc_pages+0x15b/0x650 [ 770.920540][T25356] fs_reclaim_acquire+0x71/0x100 [ 770.920562][T25356] ? prepare_alloc_pages+0x15b/0x650 [ 770.920584][T25356] prepare_alloc_pages+0x15b/0x650 [ 770.920610][T25356] __alloc_frozen_pages_noprof+0x12f/0x380 [ 770.920634][T25356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 770.920669][T25356] ? __pfx_policy_nodemask+0x10/0x10 [ 770.920695][T25356] alloc_pages_mpol+0x212/0x380 [ 770.920720][T25356] folio_alloc_mpol_noprof+0x39/0x160 [ 770.920746][T25356] vma_alloc_folio_noprof+0xe1/0x1e0 [ 770.920769][T25356] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 770.920801][T25356] do_wp_page+0x1163/0x4c70 [ 770.920826][T25356] ? __pfx_do_wp_page+0x10/0x10 [ 770.920841][T25356] ? do_raw_spin_lock+0x12b/0x2f0 [ 770.920862][T25356] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 770.920883][T25356] handle_mm_fault+0x1490/0x3080 [ 770.920903][T25356] ? handle_mm_fault+0xec/0x3080 [ 770.920920][T25356] ? __pfx_handle_mm_fault+0x10/0x10 [ 770.920939][T25356] ? __lock_acquire+0x683/0x2cf0 [ 770.920959][T25356] ? lock_mm_and_find_vma+0xa7/0x340 [ 770.920978][T25356] do_user_addr_fault+0x744/0x1340 [ 770.921005][T25356] exc_page_fault+0x6a/0xc0 [ 770.921024][T25356] asm_exc_page_fault+0x26/0x30 [ 770.921039][T25356] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 770.921056][T25356] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 bf 61 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 770.921070][T25356] RSP: 0018:ffffc9000206f6d8 EFLAGS: 00050206 [ 770.921084][T25356] RAX: ffffffff84d01e01 RBX: ffff88807c9d805d RCX: 0000000000007323 [ 770.921096][T25356] RDX: 0000000000000000 RSI: ffff88807c9d8cdd RDI: 0000200000001000 [ 770.921106][T25356] RBP: ffffc9000206f850 R08: ffff88807c9dffff R09: 1ffff1100f93bfff [ 770.921117][T25356] R10: dffffc0000000000 R11: ffffed100f93c000 R12: 1ffff9200040dfbb [ 770.921128][T25356] R13: 0000200000000380 R14: ffffc9000206fde8 R15: 0000000000007fa3 [ 770.921142][T25356] ? _copy_to_iter+0x1e1/0x1810 [ 770.921165][T25356] _copy_to_iter+0x255/0x1810 [ 770.921184][T25356] ? __lock_acquire+0x683/0x2cf0 [ 770.921205][T25356] ? __pfx__copy_to_iter+0x10/0x10 [ 770.921222][T25356] ? __lock_acquire+0x683/0x2cf0 [ 770.921245][T25356] __skb_datagram_iter+0x419/0x980 [ 770.921269][T25356] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 770.921295][T25356] skb_copy_datagram_iter+0xb5/0x240 [ 770.921318][T25356] virtio_transport_stream_dequeue+0x1d9/0xb00 [ 770.921348][T25356] ? __pfx_virtio_transport_stream_dequeue+0x10/0x10 [ 770.921371][T25356] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 770.921389][T25356] ? vsock_connectible_wait_data+0x4d1/0x510 [ 770.921410][T25356] __vsock_connectible_recvmsg+0x844/0xc30 [ 770.921431][T25356] ? __pfx___vsock_connectible_recvmsg+0x10/0x10 [ 770.921447][T25356] ? aa_sk_perm+0x6d5/0x900 [ 770.921471][T25356] ? __pfx_aa_sk_perm+0x10/0x10 [ 770.921491][T25356] ? __pfx_autoremove_wake_function+0x10/0x10 [ 770.921508][T25356] ? aa_sock_msg_perm+0xf1/0x1b0 [ 770.921522][T25356] ? vsock_connectible_recvmsg+0xb7/0xe0 [ 770.921538][T25356] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 770.921555][T25356] sock_recvmsg+0x196/0x1e0 [ 770.921572][T25356] __sys_recvfrom+0x231/0x3a0 [ 770.921594][T25356] ? __pfx___sys_recvfrom+0x10/0x10 [ 770.921622][T25356] ? rcu_is_watching+0x15/0xb0 [ 770.921654][T25356] __x64_sys_recvfrom+0xde/0x100 [ 770.921673][T25356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.921689][T25356] do_syscall_64+0x174/0x580 [ 770.921707][T25356] ? trace_irq_disable+0x3b/0x140 [ 770.921725][T25356] ? clear_bhb_loop+0x40/0x90 [ 770.921742][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.921757][T25356] RIP: 0033:0x7f932599de59 [ 770.921771][T25356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.921783][T25356] RSP: 002b:00007f93267f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 770.921798][T25356] RAX: ffffffffffffffda RBX: 00007f9325c26090 RCX: 00007f932599de59 [ 770.921809][T25356] RDX: 000000000000fec6 RSI: 0000200000000380 RDI: 000000000000000a [ 770.921819][T25356] RBP: 00007f9325a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 770.921828][T25356] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000000 [ 770.921838][T25356] R13: 00007f9325c26128 R14: 00007f9325c26090 R15: 00007fffdd3c4668 [ 770.921854][T25356] [ 771.473587][ T1022] wlan1: Trigger new scan to find an IBSS to join [ 771.504718][T25352] macvlan2: entered promiscuous mode [ 771.510140][T25352] macvlan2: entered allmulticast mode [ 771.516886][T25352] bond14: entered promiscuous mode [ 771.522979][T25352] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 771.533464][T25352] bond14: left promiscuous mode [ 772.920650][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 772.920668][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 772.934573][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 774.200571][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 775.961209][ T8417] wlan1: Trigger new scan to find an IBSS to join [ 778.252071][ T77] wlan1: Creating new IBSS network, BSSID 7e:4b:ed:ef:b0:75