last executing test programs: 5.790266585s ago: executing program 3 (id=18890): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a801800"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.788349019s ago: executing program 2 (id=18900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004004}, 0x20040044) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) listen(0xffffffffffffffff, 0x400004) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x12) pread64(r11, &(0x7f0000002840)=""/4096, 0x1000, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/74, 0x328000, 0x1000}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 5.254267184s ago: executing program 2 (id=18896): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote, r3}, 0x14) unshare(0x40000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) 4.03042055s ago: executing program 2 (id=18898): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x3ff, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) read$nci(r1, 0x0, 0x0) write$nci(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="61050dfa02058002090604060106d5c03dbbb933e5ba963f1ed9eaa5c51a17489a54ed3ff1ef06b8208f15e4e6bcab33ae941c57dea77229d9d810e2bb"], 0xe4) r5 = socket(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) recvmmsg$unix(r5, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/189, 0xbd}, {&(0x7f0000001680)=""/155, 0x9b}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x2, 0x1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x14, 0x0, 0xfe, 0x3, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write(r5, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r7, @ANYBLOB="020423bd424b9f1e80c92557044d0fa3117000ffdbdf251d97508f08000300", @ANYRES32=r10, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x2004808c}, 0x6004) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) 4.010283052s ago: executing program 1 (id=18899): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000f9", @ANYRES32=0x0, @ANYBLOB="fcffffff00"/20, @ANYRES32, @ANYRESHEX=0x0], 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xffdd, @remote}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', 0x0}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0x9, 0xb, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, 0xffff, 0xd4bf, 0x3, 0x4, 0x101, 0x7, 'nr0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@multicast, @local, @empty, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @remote, 0x2}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xe, 0x3, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x7, 0x5, 0x2, 0x0, 0xff, 0x7, 'wg0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x0, 0x14}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@remote, @multicast2, @multicast2, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) 3.939082231s ago: executing program 1 (id=18901): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000700)="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", 0x684}], 0x1) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000280)=""/72, 0x320000, 0x1000, 0xc, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r2}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 3.491830341s ago: executing program 0 (id=18902): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r5 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000480)="3e314cfc204b39401b3c77c0b48c", 0x0, 0xae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.491621069s ago: executing program 3 (id=18903): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x0, r2}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, r5, 0x0, 0x3, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3d}, 0x60) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x1000007c, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x1f, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(r1) 3.491370037s ago: executing program 4 (id=18904): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) socket(0x1, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) recvmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8}, 0xfffffffd}], 0x1, 0x2000, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3.158872713s ago: executing program 1 (id=18905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) 2.991643734s ago: executing program 1 (id=18906): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)='`', 0x1}], 0x1}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000801000000000000000000000902"], 0x0, 0x44}, 0x28) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r3) sendmsg$nl_xfrm(r3, 0x0, 0x4) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r4}, 0x38) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x7f}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000380)={r5, 0x9}, 0x8) r6 = socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000ac0)={@random="e7c86361b5c8", @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "bf", "fe976c", 0x1}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.94672553s ago: executing program 3 (id=18907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/110, 0x6e}, {0x0}], 0x2, 0xa, 0x6c8) pipe(&(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0xfffffff7, 0x7, 0x0, r3, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xffffffffffffffb8, 0x1, 0x0, 0x0, @ipv6=@remote}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r9, &(0x7f0000000100)=""/12, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c001180090001"], 0xb0}, 0x1, 0x0, 0x0, 0x40014}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r5) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYBLOB="e76a8f2c9c6893a8e621a65464a12c55d66a3cbc6b26c8d0e5c5"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendto$inet(r0, &(0x7f0000000080)="81efcdc3412b", 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000200)={'xfrm0\x00', @ifru_settings={0x3, 0x100, @fr_pvc_info=&(0x7f00000001c0)={0xf, 'pimreg\x00'}}}) 2.862780173s ago: executing program 2 (id=18908): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, 0x0, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=@deltclass={0x5c, 0x29, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x10, 0xd}, {0xfff9, 0x18}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_ingress={0xc}]}, 0x5c}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRES32=r7, @ANYRESHEX=r3], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x61f0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) close(r2) 2.521013923s ago: executing program 4 (id=18909): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x90) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x2000}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e, 0x2e, 0x61, 0x5f, 0x61]}}, &(0x7f0000000000)=""/28, 0x56, 0x1c, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180)={r4}, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000000d0a010900000db9000000000a0000010900020073797a31000000000900010073797a31000000001c000380180000800c000180060001001e1c000008000a8004000100a608ac652134dd4a9791e6ecce23fef0ede947d621826669f1570b3fcc9eb8bf44bfb5c34f981ae52325cd0f6ab0d67dc652b9446ce835"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x200000000000000}}}, 0xb8}}, 0x2c000030) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x4, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x300, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x200, 0x8, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="100000001000010000000000000000000000000a5c000000060a010400000000000000000200000028000480240001800b0001007470726f7879000014000280080001400000000008000240000000240900010073797a30000000000900020073797a320000000005000740cc000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)={0x5f, r10, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) 2.207628148s ago: executing program 0 (id=18910): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x2404c800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x601, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44090) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$unix(0x1, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0x1}, 0x28) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffe0, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8082) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1e, 0x5, 0x0) connect$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r12, 0x1}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x0, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x6, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 2.149555949s ago: executing program 4 (id=18911): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000f9", @ANYRES32=0x0, @ANYBLOB="fcffffff00"/20, @ANYRES32, @ANYRESHEX=0x0], 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xffdd, @remote}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', 0x0}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0x9, 0xb, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, 0xffff, 0xd4bf, 0x3, 0x4, 0x101, 0x7, 'nr0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@multicast, @local, @empty, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @remote, 0x2}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xe, 0x3, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x7, 0x5, 0x2, 0x0, 0xff, 0x7, 'wg0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x0, 0x14}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@remote, @multicast2, @multicast2, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) 2.078478671s ago: executing program 4 (id=18912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xa, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e1f, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd340}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)={r4, 0xe23a, 0x20, 0x10001}, &(0x7f0000000840)=0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x4040040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.032037241s ago: executing program 3 (id=18913): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) socket(0x1, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) recvmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8}, 0xfffffffd}], 0x1, 0x2000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.994031054s ago: executing program 1 (id=18914): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x62}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x123) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@mcast2, 0x4e20, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x4000000000}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x49, &(0x7f0000000600), 0x2a) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.828790007s ago: executing program 4 (id=18915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x80003, 0xc, 0x1, 0x4}}]}}]}, 0x44}}, 0x24040004) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @local, 0x9}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) splice(r7, 0x0, r8, 0x0, 0x15944, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', r6, 0x0, 0x10, 0x238, 0x2, {{0x22, 0x4, 0x0, 0x2, 0x88, 0x66, 0x0, 0x18, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@generic={0x83, 0x7, "250feee880"}, @rr={0x7, 0x13, 0x80, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @cipso={0x86, 0x2d, 0x0, [{0x0, 0x9, "2f42429005e74f"}, {0x6, 0x4, "ac29"}, {0x5, 0xb, "4d40242c4aeec75970"}, {0x6, 0xf, "bf3b77ae50778d09513d3088a9"}]}, @lsrr={0x83, 0x7, 0x40, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @rr={0x7, 0x1b, 0xd4, [@multicast2, @multicast2, @private=0xa010100, @rand_addr=0x64010101, @remote, @local]}, @noop, @rr={0x7, 0x7, 0xdf, [@dev={0xac, 0x14, 0x14, 0x1d}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0xcc004}, 0x94) 1.738844372s ago: executing program 0 (id=18916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) 1.660805969s ago: executing program 2 (id=18917): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r1) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'rose0\x00', &(0x7f0000000040)=@ethtool_cmd={0x18, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x87, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000043, [0x2, 0x89ff]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x0, 0x9, [0x7, 0x8, 0x1e, 0x1b, 0x6, 0x400, 0x6, 0x81, 0x1]}, &(0x7f0000000900)=0x1a) 1.572997951s ago: executing program 0 (id=18918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.371148967s ago: executing program 0 (id=18919): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891c, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x24, r3, 0x0, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x48001) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0xfffffff8, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe5102}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000001bc0)={0x1, 0x1, 0x1000, 0xffc, &(0x7f0000000b40)="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", 0x5e, 0x0, &(0x7f0000001b40)="ad4b884602878102a4d3899a4ed8f5d9706eddf9397adb09644b25cdbcc3e386aebf1c789b8fcd2bb92e2c5f87bcaea657a8f76750c9322c39f1ed237015a0b0e553ecf144dfef69cd7e2b9af8af3db53857ea24606d85ca961c90a7b70d"}) r6 = accept4(r5, 0x0, &(0x7f00000002c0), 0x80800) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x200000c0) 1.058221899s ago: executing program 3 (id=18920): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891c, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) close(r0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x24, r3, 0x0, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x48001) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0xfffffff8, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe5102}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000001bc0)={0x1, 0x1, 0x1000, 0xffc, &(0x7f0000000b40)="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", 0x5e, 0x0, &(0x7f0000001b40)="ad4b884602878102a4d3899a4ed8f5d9706eddf9397adb09644b25cdbcc3e386aebf1c789b8fcd2bb92e2c5f87bcaea657a8f76750c9322c39f1ed237015a0b0e553ecf144dfef69cd7e2b9af8af3db53857ea24606d85ca961c90a7b70d"}) r6 = accept4(r5, 0x0, &(0x7f00000002c0), 0x80800) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x200000c0) 650.660302ms ago: executing program 1 (id=18921): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r5 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000480)="3e314cfc204b39401b3c77c0b48c", 0x0, 0xae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 650.198102ms ago: executing program 2 (id=18922): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, 0x0, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=@deltclass={0x5c, 0x29, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x10, 0xd}, {0xfff9, 0x18}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_ingress={0xc}]}, 0x5c}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r5, @ANYRES32=r7, @ANYRESHEX=r3], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x61f0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) close(r2) 647.580672ms ago: executing program 0 (id=18931): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x290) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r7, &(0x7f0000000280)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 363.743948ms ago: executing program 4 (id=18923): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x88c0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000004700000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', r3, 0x20, 0x20, 0x0, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)="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", 0x3f4}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361", 0x35}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r5, 0x0, 0x0, 0x20000000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x5ee, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0x4, 0x6}, 0x10) 0s ago: executing program 3 (id=18924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xa, 0x5}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r7], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wg1\x00'}) accept4$unix(r8, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0xc1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8000000003c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) kernel console output (not intermixed with test programs): instead [ 1203.358286][T15448] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 1203.366222][T15448] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 1203.677516][T15499] syzkaller0: entered promiscuous mode [ 1203.683570][T15499] syzkaller0: entered allmulticast mode [ 1203.743802][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18048'. [ 1204.163020][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18050'. [ 1204.238658][T15516] aD speed is unknown, defaulting to 1000 [ 1204.451985][T15524] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18055'. [ 1204.754892][T15529] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 1204.771557][T15529] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 1204.881019][T15532] aD speed is unknown, defaulting to 1000 [ 1205.061855][T15542] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 1205.084206][T15542] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 1205.629917][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18062'. [ 1205.698151][T15560] bridge21: port 1(gretap2) entered blocking state [ 1205.728921][T15560] bridge21: port 1(gretap2) entered disabled state [ 1205.747063][T15560] gretap2: entered allmulticast mode [ 1205.762153][T15560] gretap2: entered promiscuous mode [ 1205.905311][T15564] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18064'. [ 1206.145772][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18067'. [ 1206.271856][T15532] lo speed is unknown, defaulting to 1000 [ 1206.336604][T15581] netlink: 'syz.0.18068': attribute type 2 has an invalid length. [ 1206.360922][T15581] netlink: 'syz.0.18068': attribute type 2 has an invalid length. [ 1206.480818][T15577] macsec1: entered promiscuous mode [ 1207.200709][T15594] : entered promiscuous mode [ 1207.556209][T15604] netlink: 'syz.0.18076': attribute type 1 has an invalid length. [ 1207.706526][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18078'. [ 1207.755313][T15608] bond23: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1207.770305][T15608] bond23: (slave vxcan1): Error -95 calling set_mac_address [ 1207.804493][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18078'. [ 1207.908025][T15609] bond23: (slave gretap4): making interface the new active one [ 1207.933650][T15609] bond23: (slave gretap4): Enslaving as an active interface with an up link [ 1208.044698][T15611] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1208.065750][T15604] macvlan0: entered promiscuous mode [ 1208.072124][T15604] macvlan0: entered allmulticast mode [ 1208.079015][T15604] bond23: entered promiscuous mode [ 1208.089919][T15604] gretap4: entered promiscuous mode [ 1208.104073][T15604] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1208.127104][T15604] bond23: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap4 [ 1208.152610][T15604] bond23: left promiscuous mode [ 1208.157615][T15604] gretap4: left promiscuous mode [ 1208.184418][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18079'. [ 1208.513649][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18084'. [ 1208.585383][T15634] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 1208.761185][T15647] netlink: 'syz.2.18089': attribute type 1 has an invalid length. [ 1208.838754][T15637] syzkaller0: entered promiscuous mode [ 1208.850029][T15637] syzkaller0: entered allmulticast mode [ 1208.936499][T15647] __nla_validate_parse: 1 callbacks suppressed [ 1208.936519][T15647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18089'. [ 1208.959535][T15653] bond19: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 1209.059825][T15658] veth25: entered promiscuous mode [ 1209.069443][T15658] bond19: (slave veth25): Enslaving as a backup interface with a down link [ 1212.982633][T15647] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1212.983278][ T3353] net_ratelimit: 392 callbacks suppressed [ 1212.983321][ T3353] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1213.118792][T16960] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1213.211440][T15673] vlan4: left allmulticast mode [ 1213.234407][T15673] bond18: left allmulticast mode [ 1213.271366][T15673] bond19: left promiscuous mode [ 1213.290675][T15673] bond24: left promiscuous mode [ 1213.309909][T15673] bond24: left allmulticast mode [ 1213.326565][T15673] vlan5: left allmulticast mode [ 1213.343805][T15673] bond25: left allmulticast mode [ 1213.362384][T15673] geneve7: left allmulticast mode [ 1213.380129][T15673] veth19: left allmulticast mode [ 1213.396908][T15673] veth21: left allmulticast mode [ 1213.529686][T15684] tipc: Enabling of bearer rejected, already enabled [ 1213.661265][T15684] syzkaller0: mtu less than device minimum [ 1213.681361][T15687] syzkaller0: entered promiscuous mode [ 1213.688853][T15687] syzkaller0: entered allmulticast mode [ 1213.707312][T15689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18098'. [ 1213.743866][T15687] tc action pedit offset 4096 out of bounds [ 1213.752464][T15687] tc action pedit offset 4096 out of bounds [ 1213.758502][T15687] tc action pedit offset 4096 out of bounds [ 1213.764467][T15687] tc action pedit offset 4096 out of bounds [ 1213.770466][T15687] tc action pedit offset 4096 out of bounds [ 1213.776426][T15687] tc action pedit offset 4096 out of bounds [ 1213.782414][T15687] tc action pedit offset 4096 out of bounds [ 1213.788360][T15687] tc action pedit offset 4096 out of bounds [ 1213.794355][T15687] tc action pedit offset 4096 out of bounds [ 1213.800409][T15687] tc action pedit offset 4096 out of bounds [ 1213.806409][T15687] TC_ACT_REPEAT abuse ? [ 1214.406452][T15728] netlink: 'syz.4.18107': attribute type 8 has an invalid length. [ 1214.465016][T15729] bond20: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1214.485487][T15729] bond20 (unregistering): Released all slaves [ 1215.646324][T15782] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1215.661148][T15782] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1215.669505][T15782] tipc: Resetting bearer [ 1215.902324][T15795] netlink: 'syz.3.18119': attribute type 5 has an invalid length. [ 1216.111227][T15804] netlink: 'syz.4.18120': attribute type 1 has an invalid length. [ 1216.137463][T15802] netlink: 120 bytes leftover after parsing attributes in process `syz.3.18121'. [ 1216.200428][T15801] syzkaller0: entered promiscuous mode [ 1216.231648][T15801] syzkaller0: entered allmulticast mode [ 1216.302463][T15804] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1216.481762][T15808] bond19: (slave geneve5): making interface the new active one [ 1216.493656][T15808] bond19: (slave geneve5): Enslaving as an active interface with an up link [ 1216.578163][T15821] 0{X: left allmulticast mode [ 1216.677977][T15821] tipc: Resetting bearer [ 1216.708227][T15821] syz_tun: left promiscuous mode [ 1217.404622][T15821] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 1217.423644][T15821] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 1217.431440][T15821] ipip0: left promiscuous mode [ 1217.436450][T15821] vlan2: left allmulticast mode [ 1217.441616][T15821] bond0: left allmulticast mode [ 1217.446875][T15821] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1217.454159][T15821] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1217.461781][T15821] bond2: left promiscuous mode [ 1217.466621][T15821] bond3: left promiscuous mode [ 1217.471829][T15821] ip6gre2: left promiscuous mode [ 1217.476823][T15821] ip6gre2: left allmulticast mode [ 1217.482293][T15821] macsec3: left promiscuous mode [ 1217.487666][T15821] xfrm1: left promiscuous mode [ 1217.492769][T15821] xfrm1: left allmulticast mode [ 1217.498082][T15821] ip6erspan1: left allmulticast mode [ 1217.504164][T15821] geneve4: left promiscuous mode [ 1217.509281][T15821] geneve4: left allmulticast mode [ 1217.576687][T15821] bond6: left promiscuous mode [ 1217.588583][T15821] bond6: left allmulticast mode [ 1217.606090][T15821] gretap4: left promiscuous mode [ 1217.794754][T15821] gretap0: left promiscuous mode [ 1217.812452][T15821] bond12: left promiscuous mode [ 1217.817356][T15821] bond12: left allmulticast mode [ 1217.861968][T15821] ip6gretap2: left promiscuous mode [ 1217.872087][T15821] ip6gretap2: left allmulticast mode [ 1217.889171][T15821] bond14: left promiscuous mode [ 1217.894281][T15821] bridge18: left promiscuous mode [ 1217.906226][T15821] ipvlan2: left allmulticast mode [ 1217.916006][T15821] bond14: left allmulticast mode [ 1217.928654][T15821] bridge18: left allmulticast mode [ 1217.945435][T15821] bond16: left promiscuous mode [ 1217.950560][T15821] bridge19: left promiscuous mode [ 1217.956004][T15821] bond16: left allmulticast mode [ 1217.961492][T15821] bridge19: left allmulticast mode [ 1218.218330][T15821] veth25: left promiscuous mode [ 1218.247793][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.377417][T15834] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 1218.402840][T15834] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 1218.415137][T15392] syz1: Port: 1 Link DOWN [ 1225.432767][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.442122][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.525508][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.551103][ T35] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.578625][ T35] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1225.587004][ T35] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1225.671354][ T35] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.700632][ T35] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1225.732732][ T35] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1225.759725][ T35] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.778780][ T35] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1225.791627][ T35] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1225.814658][ T35] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.836733][ T35] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1225.853329][ T35] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1226.081913][T15865] syzkaller0: entered promiscuous mode [ 1226.087479][T15865] syzkaller0: entered allmulticast mode [ 1226.114581][T15884] syzkaller0: entered promiscuous mode [ 1226.124418][T15884] syzkaller0: entered allmulticast mode [ 1226.435324][ T29] audit: type=1804 audit(1779835553.631:15): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.18140" name="/newroot/3604/memory.events" dev="tmpfs" ino=18192 res=1 errno=0 [ 1226.497028][ T29] audit: type=1800 audit(1779835553.641:16): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18140" name="memory.events" dev="tmpfs" ino=18192 res=0 errno=0 [ 1227.057266][T15918] netlink: 'syz.2.18143': attribute type 4 has an invalid length. [ 1229.071002][ T5649] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1230.862467][T15906] aD speed is unknown, defaulting to 1000 [ 1231.038005][T15943] 8021q: VLANs not supported on wg2 [ 1231.182925][T15953] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1231.423266][T15962] ip6tnl8: entered allmulticast mode [ 1231.441682][T15906] lo speed is unknown, defaulting to 1000 [ 1231.560186][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18151'. [ 1231.717741][T15971] aD speed is unknown, defaulting to 1000 [ 1232.072894][T15981] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18154'. [ 1232.377080][T15971] lo speed is unknown, defaulting to 1000 [ 1232.519586][T15986] tipc: Resetting bearer [ 1232.850896][T15986] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1232.920027][T10082] syz1: Port: 1 Link ACTIVE [ 1232.981179][T15392] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1233.085211][T15994] netlink: 'syz.1.18158': attribute type 4 has an invalid length. [ 1233.132064][T15994] netlink: 'syz.1.18158': attribute type 4 has an invalid length. [ 1233.228142][T15994] netlink: 'syz.1.18158': attribute type 4 has an invalid length. [ 1233.344977][T15997] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1233.353945][T15997] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1233.690040][T16006] aD speed is unknown, defaulting to 1000 [ 1233.818197][T15393] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1233.828319][T16007] block nbd6: server does not support multiple connections per device. [ 1233.899566][T16007] block nbd6: shutting down sockets [ 1234.244376][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18163'. [ 1234.297711][T16012] tipc: Resetting bearer [ 1234.801065][T16013] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1234.830467][T16013] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1234.843953][T16013] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1234.904286][T15393] syz1: Port: 1 Link DOWN [ 1235.176556][T16024] netlink: 'syz.0.18167': attribute type 1 has an invalid length. [ 1235.280952][T16024] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1235.388106][T16028] macvlan0: entered promiscuous mode [ 1235.400928][T16028] macvlan0: entered allmulticast mode [ 1235.413698][T16028] bond24: entered allmulticast mode [ 1235.427195][T16028] bond24: entered promiscuous mode [ 1235.439811][T16028] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1235.461723][T16028] team0: Port device macvlan0 added [ 1235.546848][T16023] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.612273][T16006] lo speed is unknown, defaulting to 1000 [ 1235.759658][T16023] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.837535][T16034] tipc: Resetting bearer [ 1235.937461][T16034] bond24: left allmulticast mode [ 1235.951108][T16034] bond24: left promiscuous mode [ 1236.066772][T16023] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.192802][T16023] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.279146][T16039] tipc: Enabling of bearer rejected, already enabled [ 1236.464758][T16960] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.573452][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.657172][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.726557][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.769486][T16045] syz_tun: entered allmulticast mode [ 1236.789940][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18171'. [ 1236.892082][T16045] syz_tun (unregistering): left allmulticast mode [ 1237.089439][T16053] tipc: Enabling of bearer rejected, failed to enable media [ 1237.187585][T16055] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 1237.201543][T16055] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 1237.349769][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18178'. [ 1237.367131][T16063] smc: net device wg2 erased user defined pnetid SY [ 1237.387606][T16063] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1237.430983][T16065] netlink: 'syz.4.18177': attribute type 1 has an invalid length. [ 1237.464748][T16065] netlink: 'syz.4.18177': attribute type 1 has an invalid length. [ 1237.651515][T16047] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1237.686347][T16075] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1237.805413][T16078] netlink: 'syz.0.18184': attribute type 29 has an invalid length. [ 1237.981930][T16081] bond25: entered promiscuous mode [ 1237.989811][T16081] bond25: entered allmulticast mode [ 1237.995707][T16081] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1238.241839][T16091] netlink: 'syz.2.18187': attribute type 1 has an invalid length. [ 1238.250766][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18187'. [ 1238.344690][T16089] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 1238.465711][T16097] tipc: Enabling of bearer rejected, already enabled [ 1238.609881][T16102] syzkaller0: entered promiscuous mode [ 1238.632486][T16102] syzkaller0: entered allmulticast mode [ 1239.449528][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18196'. [ 1239.574522][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18197'. [ 1239.598823][T16136] netlink: 'syz.2.18197': attribute type 7 has an invalid length. [ 1239.615959][T16136] netlink: 'syz.2.18197': attribute type 8 has an invalid length. [ 1239.632606][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18197'. [ 1239.760289][T16138] tipc: Enabled bearer , priority 0 [ 1239.774895][T16138] syzkaller0: entered promiscuous mode [ 1239.785484][T16138] syzkaller0: entered allmulticast mode [ 1239.806511][T16138] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1239.909677][T16138] tipc: Resetting bearer [ 1239.936400][T16137] tipc: Resetting bearer [ 1240.064539][T16137] tipc: Disabling bearer [ 1240.218149][T16148] netlink: 68 bytes leftover after parsing attributes in process `syz.4.18201'. [ 1240.360093][T16153] tipc: Enabled bearer , priority 0 [ 1240.379203][T16153] syzkaller0: entered promiscuous mode [ 1240.404868][T16153] syzkaller0: entered allmulticast mode [ 1240.439557][T16153] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1240.504977][T16153] tipc: Resetting bearer [ 1240.534294][T16152] tipc: Resetting bearer [ 1240.551241][T16163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18206'. [ 1240.629928][T16152] tipc: Disabling bearer [ 1240.896638][T16177] aD speed is unknown, defaulting to 1000 [ 1241.253161][T16177] lo speed is unknown, defaulting to 1000 [ 1241.963430][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18212'. [ 1242.280114][T16204] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18214'. [ 1244.097269][T16201] aD speed is unknown, defaulting to 1000 [ 1244.392334][T16221] netlink: 204 bytes leftover after parsing attributes in process `syz.0.18219'. [ 1244.586318][T16233] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1244.606819][T16233] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1244.649010][T16233] tipc: Resetting bearer [ 1244.753873][T16201] lo speed is unknown, defaulting to 1000 [ 1244.860169][T16240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1245.825040][T16257] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1245.881772][T16257] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1246.136073][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18232'. [ 1246.747200][T16283] erspan0: left promiscuous mode [ 1246.905177][T16283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.942093][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18236'. [ 1247.015499][T16283] veth1_vlan: left promiscuous mode [ 1247.036527][T16283] veth0_vlan: left promiscuous mode [ 1247.053884][T16283] veth0_vlan: entered promiscuous mode [ 1247.077935][T16283] veth1_vlan: entered promiscuous mode [ 1247.108044][T16283] veth1_macvtap: left promiscuous mode [ 1247.141769][T16283] veth0_macvtap: left promiscuous mode [ 1247.156380][T16283] veth0_macvtap: entered promiscuous mode [ 1247.181832][T15391] aD speed is unknown, defaulting to 1000 [ 1247.223566][T15391] syz2: Port: 1 Link ACTIVE [ 1247.966107][T16329] netlink: 'syz.1.18240': attribute type 10 has an invalid length. [ 1248.373367][T16308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1248.384709][T16308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1248.401183][T16308] veth1_vlan: left promiscuous mode [ 1248.412113][T16308] veth0_vlan: left promiscuous mode [ 1248.424615][T16308] veth0_vlan: entered promiscuous mode [ 1248.435012][T16308] veth1_vlan: entered promiscuous mode [ 1248.447648][T16308] veth1_macvtap: left promiscuous mode [ 1248.458130][T16308] veth0_macvtap: left promiscuous mode [ 1248.479308][T16308] veth0_macvtap: entered promiscuous mode [ 1248.519897][T16308] veth1_macvtap: entered promiscuous mode [ 1248.529903][T16308] geneve0: left promiscuous mode [ 1248.557973][T16308] geneve0: entered promiscuous mode [ 1248.632749][T16308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1248.645395][T16308] ip6gretap0: entered promiscuous mode [ 1248.656640][T16308] erspan0: entered promiscuous mode [ 1248.669398][T16308] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1248.676932][T16308] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1248.686145][T16308] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1248.716113][T16298] syzkaller0: entered promiscuous mode [ 1248.728580][T16298] syzkaller0: entered allmulticast mode [ 1248.801636][T16321] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 1249.149395][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.167580][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.193631][T15407] aD speed is unknown, defaulting to 1000 [ 1249.205970][T15407] syz2: Port: 1 Link DOWN [ 1249.225749][T15411] syz1: Port: 1 Link ACTIVE [ 1249.276134][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.305379][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.333357][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.348900][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.385307][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1249.414254][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.479634][T15411] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1249.609457][T16356] netlink: 'syz.0.18247': attribute type 20 has an invalid length. [ 1249.654289][T16357] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 1249.840506][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18249'. [ 1249.859093][ T3294] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1249.889185][T16364] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1249.897364][T16369] tipc: Enabling of bearer rejected, already enabled [ 1249.909565][T15411] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1249.924723][T16369] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1249.943218][T16369] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1250.032811][T16368] netlink: 'syz.3.18251': attribute type 9 has an invalid length. [ 1250.048736][T16368] netlink: 'syz.3.18251': attribute type 6 has an invalid length. [ 1250.062063][T16368] netlink: 'syz.3.18251': attribute type 7 has an invalid length. [ 1250.070596][T16368] netlink: 'syz.3.18251': attribute type 8 has an invalid length. [ 1250.389606][T16388] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 1250.397089][T16388] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 1250.418238][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18256'. [ 1250.489814][T16391] bond26: (slave syz_tun): Removing an active aggregator [ 1250.529177][T16391] bond26: (slave syz_tun): Releasing backup interface [ 1250.560943][T16394] tipc: Failed to remove unknown binding: 66,0,0/20185096:3460030085/3460030087 [ 1250.591799][T16394] tipc: Failed to remove unknown binding: 66,0,0/20185096:3460030085/3460030086 [ 1250.627809][T16397] netlink: 'syz.4.18257': attribute type 2 has an invalid length. [ 1250.673299][T16397] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 1250.705109][T16397] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 1250.827556][T16402] tipc: Failed to remove unknown binding: 66,0,0/20185096:3460030085/3460030087 [ 1250.862622][T16402] tipc: Failed to remove unknown binding: 66,0,0/20185096:3460030085/3460030086 [ 1250.905363][ T4246] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1250.930542][ T4246] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1251.178736][T15392] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1251.333059][T16420] netlink: 'syz.0.18264': attribute type 1 has an invalid length. [ 1251.377697][T16419] veth15: entered allmulticast mode [ 1251.528572][T16420] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1251.676517][T16422] tipc: Resetting bearer [ 1251.704876][T16431] syzkaller0: entered promiscuous mode [ 1251.714699][T16431] syzkaller0: entered allmulticast mode [ 1252.324007][T16448] geneve8: entered promiscuous mode [ 1252.338724][ T4246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 52160 - 0 [ 1252.386449][ T4246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 52160 - 0 [ 1252.465250][ T4246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 52160 - 0 [ 1252.795179][T16467] netlink: 'syz.4.18275': attribute type 1 has an invalid length. [ 1252.825024][T16467] netlink: 'syz.4.18275': attribute type 1 has an invalid length. [ 1252.860632][T16467] tipc: Enabling of bearer rejected, already enabled [ 1253.176814][T16483] tipc: Enabling of bearer rejected, already enabled [ 1253.345333][T16497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18283'. [ 1253.367259][T16497] netlink: 'syz.0.18283': attribute type 7 has an invalid length. [ 1253.382956][T16497] netlink: 'syz.0.18283': attribute type 8 has an invalid length. [ 1253.394387][T16492] netlink: 'syz.2.18280': attribute type 1 has an invalid length. [ 1253.400700][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18283'. [ 1253.420252][T16492] netlink: 'syz.2.18280': attribute type 1 has an invalid length. [ 1253.432624][T16492] netlink: 'syz.2.18280': attribute type 1 has an invalid length. [ 1253.440964][T16492] netlink: 248 bytes leftover after parsing attributes in process `syz.2.18280'. [ 1253.450643][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18280'. [ 1253.467132][T16497] team0: entered promiscuous mode [ 1253.472487][T16497] : entered promiscuous mode [ 1253.492637][T16497] bond0: entered promiscuous mode [ 1253.497757][T16497] : entered promiscuous mode [ 1253.503835][T16497] erspan0: entered promiscuous mode [ 1253.510625][T16497] hsr0: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1253.520661][T16497] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1253.530640][T16497] hsr0: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 1253.548267][T16497] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1253.556377][T16492] netlink: 'syz.2.18280': attribute type 1 has an invalid length. [ 1253.570330][T16492] netlink: 'syz.2.18280': attribute type 1 has an invalid length. [ 1253.579553][T16492] netlink: 'syz.2.18280': attribute type 1 has an invalid length. [ 1253.587595][T16492] netlink: 248 bytes leftover after parsing attributes in process `syz.2.18280'. [ 1253.598820][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18280'. [ 1253.767457][T16509] netlink: 'syz.0.18286': attribute type 1 has an invalid length. [ 1253.873901][T16511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18286'. [ 1253.977045][T16509] bond27: entered promiscuous mode [ 1253.997315][T16509] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1254.028627][T16511] bond27: entered allmulticast mode [ 1254.061547][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18287'. [ 1254.103102][T16509] bond27: (slave bridge19): making interface the new active one [ 1254.140714][T16509] bridge19: entered promiscuous mode [ 1254.157796][T16509] bridge19: entered allmulticast mode [ 1254.184872][T16509] bond27: (slave bridge19): Enslaving as an active interface with an up link [ 1254.810402][T16543] netlink: 'syz.0.18293': attribute type 1 has an invalid length. [ 1254.819485][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1255.026731][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18293'. [ 1255.270482][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18294'. [ 1259.404043][T16539] aD speed is unknown, defaulting to 1000 [ 1259.444579][T16562] syzkaller0: entered promiscuous mode [ 1259.459235][T16562] syzkaller0: entered allmulticast mode [ 1259.946003][T16539] lo speed is unknown, defaulting to 1000 [ 1259.992526][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18301'. [ 1260.018058][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18301'. [ 1260.042750][T16576] netlink: 58 bytes leftover after parsing attributes in process `syz.4.18301'. [ 1260.116070][T16576] team0 (unregistering): Port device bond17 removed [ 1260.265121][T16586] tipc: Enabling of bearer rejected, already enabled [ 1260.639953][T16602] validate_nla: 2 callbacks suppressed [ 1260.639973][T16602] netlink: 'syz.4.18308': attribute type 1 has an invalid length. [ 1260.752733][T16602] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1260.966974][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18310'. [ 1261.420725][T16617] netlink: 'syz.2.18311': attribute type 1 has an invalid length. [ 1261.547173][T16624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18313'. [ 1261.574247][T16626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18311'. [ 1261.605097][T16631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18313'. [ 1261.714903][T16637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18311'. [ 1261.925555][T16622] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1261.940787][T16622] bond20: (slave vxcan1): Error -95 calling set_mac_address [ 1261.986691][T16623] erspan0: entered promiscuous mode [ 1262.066059][T16626] bond20: (slave bridge23): Enslaving as an active interface with a down link [ 1262.117628][T16637] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1262.155354][T16617] macvlan2: entered promiscuous mode [ 1262.160955][T16617] macvlan2: entered allmulticast mode [ 1262.167412][T16617] bond20: entered promiscuous mode [ 1262.173933][T16617] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1262.191019][T16617] bond20: left promiscuous mode [ 1262.549179][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18318'. [ 1262.726678][T16653] batadv0 (unregistering): left promiscuous mode [ 1262.745230][T16662] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18320'. [ 1262.802382][T16662] bond0: (slave dummy0): Releasing backup interface [ 1262.813164][T16662] dummy0 (unregistering): left allmulticast mode [ 1263.164724][T16667] netlink: 'syz.3.18323': attribute type 1 has an invalid length. [ 1263.243682][T16667] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1263.463694][T16681] netlink: 'syz.4.18326': attribute type 1 has an invalid length. [ 1263.629733][T16691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18328'. [ 1263.920158][T16681] veth15: entered allmulticast mode [ 1264.066282][T16704] netlink: 'syz.1.18331': attribute type 1 has an invalid length. [ 1264.130759][T16704] bond28: (slave geneve9): making interface the new active one [ 1264.140409][T16704] bond28: (slave geneve9): Enslaving as an active interface with an up link [ 1264.152602][T16962] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1264.169589][T16704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18331'. [ 1264.194948][T16704] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1264.245877][T16962] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1264.264391][T16962] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1264.806164][T16730] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1264.876336][T16738] syzkaller0: entered promiscuous mode [ 1264.888824][T16738] syzkaller0: entered allmulticast mode [ 1265.191931][T16754] netlink: 'syz.1.18343': attribute type 1 has an invalid length. [ 1265.352188][T16754] veth23: entered allmulticast mode [ 1265.756762][T16764] pim6reg: entered allmulticast mode [ 1265.763562][ T29] audit: type=1804 audit(1779835592.961:17): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.18345" name="/newroot/3671/cgroup.controllers" dev="tmpfs" ino=18533 res=1 errno=0 [ 1265.814572][ T29] audit: type=1800 audit(1779835592.961:18): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18345" name="cgroup.controllers" dev="tmpfs" ino=18533 res=0 errno=0 [ 1266.059257][T16769] syzkaller0: entered promiscuous mode [ 1266.077057][T16769] syzkaller0: entered allmulticast mode [ 1266.303649][T16775] netlink: 'syz.4.18350': attribute type 1 has an invalid length. [ 1266.367091][T16779] __nla_validate_parse: 2 callbacks suppressed [ 1266.367113][T16779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18350'. [ 1266.386489][T16775] bond22: entered promiscuous mode [ 1266.392595][T16775] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1266.400864][T16779] bond22: entered allmulticast mode [ 1266.428373][T16775] bond22: (slave bridge22): making interface the new active one [ 1266.436240][T16775] bridge22: entered promiscuous mode [ 1266.442439][T16775] bridge22: entered allmulticast mode [ 1266.460012][T16775] bond22: (slave bridge22): Enslaving as an active interface with an up link [ 1266.771741][T16789] netlink: 'syz.3.18354': attribute type 11 has an invalid length. [ 1266.783039][T16787] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1267.021829][T16794] aD speed is unknown, defaulting to 1000 [ 1267.022016][T16791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18355'. [ 1267.052862][T16796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18356'. [ 1267.228052][T16791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18355'. [ 1267.314170][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18357'. [ 1267.779082][T16812] syzkaller0: mtu less than device minimum [ 1267.919568][T16794] lo speed is unknown, defaulting to 1000 [ 1268.595962][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18363'. [ 1268.644278][T16841] veth0: entered promiscuous mode [ 1268.656948][T16841] macvtap1: entered promiscuous mode [ 1268.675570][T16841] macvtap1: entered allmulticast mode [ 1268.690286][T16841] veth0: entered allmulticast mode [ 1268.729096][T16844] veth0: left allmulticast mode [ 1268.760092][T16844] veth0: left promiscuous mode [ 1268.776430][T16844] macvtap1: left promiscuous mode [ 1268.794848][T16844] macvtap1: left allmulticast mode [ 1269.053515][T16851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18365'. [ 1269.080732][T16851] netlink: 'syz.2.18365': attribute type 7 has an invalid length. [ 1269.097009][T16851] netlink: 'syz.2.18365': attribute type 8 has an invalid length. [ 1269.127713][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18365'. [ 1270.393634][T16881] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18372'. [ 1270.426601][T16881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1270.532405][T16892] netlink: 288 bytes leftover after parsing attributes in process `syz.1.18376'. [ 1270.583516][T16892] openvswitch: netlink: Flow key attr not present in new flow. [ 1270.600218][T16887] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1270.695665][T16892] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1271.158293][T16914] netlink: 'syz.4.18379': attribute type 1 has an invalid length. [ 1271.236677][T16914] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1271.352709][T16918] : renamed from bond0 [ 1271.407886][T16921] team0: entered promiscuous mode [ 1271.413338][T16921] team0: entered allmulticast mode [ 1271.420047][T16918] __nla_validate_parse: 1 callbacks suppressed [ 1271.420066][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18381'. [ 1271.421343][T16921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.459759][T16925] netlink: 244 bytes leftover after parsing attributes in process `syz.4.18382'. [ 1271.463927][T16918] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1271.506521][T16918] team1: entered promiscuous mode [ 1271.515817][T16918] team1: entered allmulticast mode [ 1271.521842][T16918] 8021q: adding VLAN 0 to HW filter on device team1 [ 1271.529768][T16905] syzkaller1: entered promiscuous mode [ 1271.535541][T16905] syzkaller1: entered allmulticast mode [ 1271.621307][T16924] xt_TCPMSS: Only works on TCP SYN packets [ 1271.854744][T16932] aD speed is unknown, defaulting to 1000 [ 1271.912959][T16939] bond24: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1271.934974][T16939] bond24 (unregistering): Released all slaves [ 1272.259171][T16950] 8021q: adding VLAN 0 to HW filter on device  [ 1272.296103][T16950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.465780][T16950] veth0_macvtap: left promiscuous mode [ 1272.492686][T16950] veth0_macvtap: entered promiscuous mode [ 1272.545370][T16950] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check. [ 1272.623380][T16962] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.648928][T16962] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.686762][T16932] lo speed is unknown, defaulting to 1000 [ 1272.696505][T16962] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.724475][T16962] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.096484][T16970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1273.368285][T16972] netlink: 'syz.0.18392': attribute type 1 has an invalid length. [ 1273.466428][T16972] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1273.805601][T16977] tipc: Resetting bearer [ 1273.964619][T16977] vlan1: left allmulticast mode [ 1273.971500][T16977] bond16: left allmulticast mode [ 1273.979503][T16977] geneve5: left allmulticast mode [ 1273.985793][T16977] ip6erspan2: left allmulticast mode [ 1273.992525][T16977] macvlan0: left promiscuous mode [ 1273.997918][T16977] macvlan0: left allmulticast mode [ 1274.023730][T16977] veth17: left allmulticast mode [ 1274.043644][T16977] bond23: left allmulticast mode [ 1274.097762][T16977] vlan6: left promiscuous mode [ 1274.112362][ T29] audit: type=1804 audit(1779835601.311:19): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.18394" name="/newroot/3681/memory.events" dev="tmpfs" ino=18587 res=1 errno=0 [ 1274.149260][T16977] bond24: left promiscuous mode [ 1274.160770][T16977] bridge13: left promiscuous mode [ 1274.166970][T16977] vlan6: left allmulticast mode [ 1274.182112][T16977] bond24: left allmulticast mode [ 1274.191408][ T29] audit: type=1800 audit(1779835601.331:20): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18394" name="memory.events" dev="tmpfs" ino=18587 res=0 errno=0 [ 1274.220077][T16977] bridge13: left allmulticast mode [ 1274.241019][T16977] vlan7: left allmulticast mode [ 1274.259717][T16977] : left allmulticast mode [ 1274.265797][T16977] : left allmulticast mode [ 1274.274108][T16977] bond26: left promiscuous mode [ 1274.288846][T16977] bridge14: left promiscuous mode [ 1274.294127][T16977] bond26: left allmulticast mode [ 1274.299642][T16977] bridge14: left allmulticast mode [ 1274.310745][T16977] veth23: left allmulticast mode [ 1274.316117][T16977] veth25: left allmulticast mode [ 1274.326321][T16977] team0: left promiscuous mode [ 1274.331666][T16977] team0: left allmulticast mode [ 1274.339706][T16977] team1: left promiscuous mode [ 1274.344583][T16977] team1: left allmulticast mode [ 1274.353252][ T4246] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.372225][ T4246] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.393303][ T4246] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.464247][ T4246] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.724605][T17000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18397'. [ 1274.836522][T17004] netlink: 'syz.3.18396': attribute type 13 has an invalid length. [ 1274.857253][T17004] netlink: 'syz.3.18396': attribute type 17 has an invalid length. [ 1275.265336][T17004] 8021q: adding VLAN 0 to HW filter on device  [ 1275.302293][T17004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.443799][T17029] netlink: 204 bytes leftover after parsing attributes in process `syz.2.18399'. [ 1275.503530][T17004] veth0_macvtap: left promiscuous mode [ 1275.544637][T17004] veth0_macvtap: entered promiscuous mode [ 1275.629869][T17004] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check. [ 1275.785217][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.810573][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.896592][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.915810][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.066064][T17042] netlink: 1956 bytes leftover after parsing attributes in process `syz.0.18401'. [ 1276.170244][T17041] tipc: Resetting bearer [ 1276.483191][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18403'. [ 1276.970104][T17062] netlink: 'syz.4.18408': attribute type 39 has an invalid length. [ 1277.002038][T17067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18409'. [ 1277.129500][T17060] tipc: Resetting bearer [ 1278.255677][T17060] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1278.269020][T17060] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1278.398125][T17062] bond0 (unregistering): Released all slaves [ 1278.461481][T17067] veth1_to_batadv: entered allmulticast mode [ 1278.530165][T10938] syz1: Port: 1 Link DOWN [ 1278.534707][ T48] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.560366][ T48] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.590712][ T48] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.631200][ T48] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.662688][T17066] aD speed is unknown, defaulting to 1000 [ 1278.773301][ T48] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.793654][ T48] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.810090][ T48] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.835987][ T48] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.893008][T17089] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1279.545195][T17104] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1279.687549][T17118] tipc: Resetting bearer [ 1279.743587][T17066] lo speed is unknown, defaulting to 1000 [ 1279.751993][ T57] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.771897][ T57] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.861716][ T57] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.881182][ T57] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.074883][T17133] syzkaller1: entered promiscuous mode [ 1280.092549][T17133] syzkaller1: entered allmulticast mode [ 1280.161927][T17141] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1280.195369][T17141] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1280.291682][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18422'. [ 1280.373733][T17150] syz.3.18422: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1280.395916][T17150] CPU: 0 UID: 0 PID: 17150 Comm: syz.3.18422 Not tainted syzkaller #0 PREEMPT(full) [ 1280.395945][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1280.395968][T17150] Call Trace: [ 1280.395977][T17150] [ 1280.395992][T17150] dump_stack_lvl+0xe8/0x150 [ 1280.396085][T17150] warn_alloc+0x249/0x340 [ 1280.396150][T17150] ? stack_trace_save+0xa9/0x100 [ 1280.396211][T17150] ? __pfx_warn_alloc+0x10/0x10 [ 1280.396247][T17150] ? kasan_save_track+0x4f/0x80 [ 1280.396281][T17150] ? kasan_save_track+0x3e/0x80 [ 1280.396306][T17150] ? __kasan_kmalloc+0x93/0xb0 [ 1280.396332][T17150] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1280.396359][T17150] ? xskq_create+0x56/0x170 [ 1280.396509][T17150] ? xsk_setsockopt+0x54c/0x990 [ 1280.396539][T17150] ? do_sock_setsockopt+0x17c/0x1b0 [ 1280.396628][T17150] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1280.396650][T17150] ? do_syscall_64+0x174/0xf80 [ 1280.396712][T17150] __vmalloc_node_range_noprof+0x132/0x1750 [ 1280.396777][T17150] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1280.396813][T17150] ? __kasan_kmalloc+0x93/0xb0 [ 1280.396848][T17150] vmalloc_user_noprof+0xad/0xe0 [ 1280.396877][T17150] ? xskq_create+0xbf/0x170 [ 1280.396907][T17150] xskq_create+0xbf/0x170 [ 1280.396941][T17150] xsk_init_queue+0x8a/0xe0 [ 1280.396973][T17150] xsk_setsockopt+0x54c/0x990 [ 1280.397004][T17150] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1280.397033][T17150] ? __pfx_aa_sk_perm+0x10/0x10 [ 1280.397123][T17150] ? aa_sock_opt_perm+0xff/0x1a0 [ 1280.397181][T17150] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1280.397230][T17150] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1280.397260][T17150] do_sock_setsockopt+0x17c/0x1b0 [ 1280.397290][T17150] __x64_sys_setsockopt+0x13d/0x1b0 [ 1280.397316][T17150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.397355][T17150] do_syscall_64+0x174/0xf80 [ 1280.397378][T17150] ? clear_bhb_loop+0x40/0x90 [ 1280.397404][T17150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.397423][T17150] RIP: 0033:0x7f733d99ce59 [ 1280.397452][T17150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.397469][T17150] RSP: 002b:00007f733e787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1280.397491][T17150] RAX: ffffffffffffffda RBX: 00007f733dc15fa0 RCX: 00007f733d99ce59 [ 1280.397507][T17150] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1280.397519][T17150] RBP: 00007f733da32d6f R08: 0000000000000004 R09: 0000000000000000 [ 1280.397532][T17150] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.397545][T17150] R13: 00007f733dc16038 R14: 00007f733dc15fa0 R15: 00007fffeffff588 [ 1280.397579][T17150] [ 1280.397688][T17150] Mem-Info: [ 1280.728235][T17150] active_anon:9848 inactive_anon:15 isolated_anon:0 [ 1280.728235][T17150] active_file:2318 inactive_file:41378 isolated_file:0 [ 1280.728235][T17150] unevictable:768 dirty:383 writeback:0 [ 1280.728235][T17150] slab_reclaimable:13672 slab_unreclaimable:188466 [ 1280.728235][T17150] mapped:30521 shmem:1299 pagetables:3647 [ 1280.728235][T17150] sec_pagetables:0 bounce:0 [ 1280.728235][T17150] kernel_misc_reclaimable:0 [ 1280.728235][T17150] free:1199731 free_pcp:23362 free_cma:0 [ 1280.819643][T17150] Node 0 active_anon:39492kB inactive_anon:60kB active_file:9272kB inactive_file:165308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122084kB dirty:1528kB writeback:0kB shmem:3660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17132kB pagetables:14492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1280.873215][T17150] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1280.925737][T17150] Node 0 DMA free:11080kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:100kB free_cma:0kB [ 1281.029268][T17150] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1281.048591][T17150] Node 0 DMA32 free:1092692kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39356kB inactive_anon:60kB active_file:9272kB inactive_file:165308kB unevictable:1536kB writepending:1532kB zspages:0kB present:3129332kB managed:2552788kB mlocked:0kB bounce:0kB free_pcp:40292kB local_pcp:19600kB free_cma:0kB [ 1281.167705][T17150] lowmem_reserve[]: 0 0 0 0 0 [ 1281.183008][T17150] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:676kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 1281.264820][T17150] lowmem_reserve[]: 0 0 0 0 0 [ 1281.277915][T17150] Node 1 Normal free:3696288kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:51676kB local_pcp:27772kB free_cma:0kB [ 1281.346674][T17150] lowmem_reserve[]: 0 0 0 0 0 [ 1281.357381][T17150] Node 0 DMA: 2*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11080kB [ 1281.406431][T17150] Node 0 DMA32: 5387*4kB (UM) 6356*8kB (UME) 3771*16kB (UME) 981*32kB (UME) 219*64kB (UME) 1040*128kB (UME) 856*256kB (UE) 455*512kB (UME) 210*1024kB (UM) 54*2048kB (UM) 0*4096kB = 1088988kB [ 1281.466085][T17150] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1281.494136][T17150] Node 1 Normal: 11*4kB (U) 17*8kB (UM) 16*16kB (UM) 9*32kB (UM) 12*64kB (UM) 12*128kB (UM) 9*256kB (UM) 11*512kB (UM) 9*1024kB (UM) 7*2048kB (U) 894*4096kB (UM) = 3696340kB [ 1281.527002][T17150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.554914][T17150] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1281.578999][T17150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.600491][T17150] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1281.642438][T17150] 47391 total pagecache pages [ 1281.659967][T17150] 0 pages in swap cache [ 1281.672535][T17150] Free swap = 124996kB [ 1281.685787][T17150] Total swap = 124996kB [ 1281.696948][T17150] 2097051 pages RAM [ 1281.710155][T17150] 0 pages HighMem/MovableOnly [ 1281.724361][T17150] 427070 pages reserved [ 1281.738012][T17150] 0 pages cma reserved [ 1281.996988][T17182] syzkaller1: entered promiscuous mode [ 1282.016161][T17182] syzkaller1: entered allmulticast mode [ 1282.372844][T17188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1282.575732][T17202] netlink: 'syz.2.18431': attribute type 13 has an invalid length. [ 1283.147451][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18436'. [ 1283.193327][T17218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18436'. [ 1283.226609][T17223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18435'. [ 1283.285092][T17225] macvlan1: entered promiscuous mode [ 1283.309350][T17225] macvlan1: entered allmulticast mode [ 1283.315734][T17225] veth1_vlan: entered allmulticast mode [ 1284.253335][T17250] netlink: 'syz.0.18440': attribute type 16 has an invalid length. [ 1284.254661][T17264] netlink: 'syz.4.18443': attribute type 1 has an invalid length. [ 1284.376482][T17250] netlink: 'syz.0.18440': attribute type 17 has an invalid length. [ 1284.430266][T17266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1284.524341][T17268] bond24: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1284.569523][T17268] bond24: (slave vxcan3): Error -95 calling set_mac_address [ 1284.779440][T17272] bond24: (slave gretap3): making interface the new active one [ 1284.825934][T17272] bond24: (slave gretap3): Enslaving as an active interface with an up link [ 1285.058022][T17250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.090400][T17250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.118348][T17250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.266850][T17250] veth1_to_batadv: left allmulticast mode [ 1285.284726][T17250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1285.309837][T17250] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1285.368223][T17264] bond24: (slave bridge23): Enslaving as an active interface with a down link [ 1285.414029][T17278] macvlan2: entered promiscuous mode [ 1285.432980][T17278] macvlan2: entered allmulticast mode [ 1285.449105][T17278] bond24: entered promiscuous mode [ 1285.464361][T17278] gretap3: entered promiscuous mode [ 1285.476740][T17278] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1285.519232][T17278] bond24: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 1285.551133][T17278] bond24: left promiscuous mode [ 1285.556345][T17278] gretap3: left promiscuous mode [ 1285.579522][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18445'. [ 1285.623744][T17290] lo: Caught tx_queue_len zero misconfig [ 1286.177972][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18450'. [ 1286.434661][T17337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18450'. [ 1286.527621][T17314] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1286.640150][T17319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.813617][T17324] bond0: (slave veth29): Enslaving as an active interface with an up link [ 1286.881259][T17335] netlink: 200 bytes leftover after parsing attributes in process `syz.3.18450'. [ 1286.996589][T17337] bond0: (slave bridge15): Enslaving as an active interface with an up link [ 1287.035997][T17346] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 1287.174150][T17350] tipc: Resetting bearer [ 1287.688776][T17368] netlink: 108 bytes leftover after parsing attributes in process `syz.4.18457'. [ 1288.361313][T17350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1288.460445][T17358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18456'. [ 1288.483293][T17358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18456'. [ 1288.895571][T17363] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18457'. [ 1288.980197][T17384] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 1288.984118][T15406] aD speed is unknown, defaulting to 1000 [ 1289.033108][T15406] syz2: Port: 1 Link ACTIVE [ 1289.262299][T17414] netlink: 'syz.4.18464': attribute type 1 has an invalid length. [ 1289.306215][T17414] netlink: 'syz.4.18464': attribute type 2 has an invalid length. [ 1289.344135][T17414] tipc: Enabling of bearer rejected, already enabled [ 1289.635807][T17436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1290.014319][T17446] pim6reg99999991: entered allmulticast mode [ 1291.078885][T17484] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1291.542940][T17501] netlink: 'syz.2.18480': attribute type 4 has an invalid length. [ 1291.574606][T17501] netlink: 'syz.2.18480': attribute type 4 has an invalid length. [ 1291.610785][T17501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.629688][T15393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.678450][T17508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.292011][T17527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1292.498938][T15398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.934946][T17542] netlink: 'syz.2.18486': attribute type 1 has an invalid length. [ 1293.343487][T17558] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18491'. [ 1293.487295][T17561] tipc: Enabling of bearer rejected, already enabled [ 1293.504072][T17561] tipc: Resetting bearer [ 1293.813141][T17571] aD speed is unknown, defaulting to 1000 [ 1293.854483][T17576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1294.049710][T17586] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 1294.094178][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18498'. [ 1294.247936][T17571] lo speed is unknown, defaulting to 1000 [ 1295.679110][T17600] veth1_vlan: left allmulticast mode [ 1295.691022][T17600] macvlan1: left promiscuous mode [ 1295.696299][T17600] macvlan1: left allmulticast mode [ 1295.772359][T17600] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 1295.781336][T17600] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 1295.790072][T17600] veth13: left allmulticast mode [ 1295.857963][T17600] bond22: left promiscuous mode [ 1295.863308][T17600] bridge22: left promiscuous mode [ 1295.869077][T17600] bond22: left allmulticast mode [ 1295.874129][T17600] bridge22: left allmulticast mode [ 1295.901541][T15398] aD speed is unknown, defaulting to 1000 [ 1295.912358][T15398] syz2: Port: 1 Link DOWN [ 1295.993327][ T4246] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.010935][ T4246] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.091528][ T4246] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.118719][ T4246] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.330357][T17627] netlink: 'syz.2.18506': attribute type 1 has an invalid length. [ 1296.458242][T17632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18506'. [ 1296.651700][T17630] bond21: (slave geneve5): making interface the new active one [ 1296.705588][T17630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.779601][T17630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.800521][T17630] bond21: (slave geneve5): Enslaving as an active interface with an up link [ 1296.907588][T17632] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1296.961327][T15407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.975117][T17627] tipc: Resetting bearer [ 1296.998728][T10082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.017111][T17627] tipc: Resetting bearer [ 1297.074472][ T4246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1297.087068][ T4246] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1297.101942][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.110233][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.120342][T10082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.158722][T17638] lo: Caught tx_queue_len zero misconfig [ 1297.199792][ T4246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1297.210520][ T4246] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1297.230085][T15393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.284061][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18512'. [ 1297.314820][T17661] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1297.431753][T17665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18513'. [ 1297.476286][T17667] netlink: 'syz.3.18514': attribute type 1 has an invalid length. [ 1297.518926][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.531745][T17661] bond22: (slave veth29): Enslaving as an active interface with an up link [ 1297.581516][T17670] netlink: 200 bytes leftover after parsing attributes in process `syz.2.18512'. [ 1297.652657][T17667] veth31: entered allmulticast mode [ 1297.679230][T17664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18512'. [ 1297.714268][T17665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18513'. [ 1297.782515][T17664] bond22: (slave bridge24): Enslaving as an active interface with an up link [ 1297.909424][T17682] lo: entered allmulticast mode [ 1297.919538][T17682] lo: left allmulticast mode [ 1297.931424][T17682] pim6reg: left allmulticast mode [ 1297.939333][ T3294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.989274][T17684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18519'. [ 1298.026712][T17686] netlink: 9 bytes leftover after parsing attributes in process `syz.1.18520'. [ 1298.046457][T17686] 1: renamed from c0 [ 1298.064664][T17686] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1298.092734][T17686] 1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1298.110711][T17686] 1: entered allmulticast mode [ 1298.116954][T17686] hsr_slave_0: entered allmulticast mode [ 1298.123634][T17686] hsr_slave_1: entered allmulticast mode [ 1298.218159][T17684] aD speed is unknown, defaulting to 1000 [ 1298.797455][T17704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18524'. [ 1298.820503][T17684] lo speed is unknown, defaulting to 1000 [ 1299.853721][T17723] netlink: 'syz.1.18529': attribute type 1 has an invalid length. [ 1300.923230][T17731] siw: device registration error -23 [ 1301.253401][T17733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18531'. [ 1302.388992][T16960] net_ratelimit: 10 callbacks suppressed [ 1302.389011][T16960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.638244][T17725] veth23: entered allmulticast mode [ 1302.661127][T17730] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.18530'. [ 1302.713391][T17740] netlink: 'syz.3.18533': attribute type 1 has an invalid length. [ 1302.810239][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18533'. [ 1302.834738][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18533'. [ 1302.857448][T17740] bond29: entered promiscuous mode [ 1302.875567][T17740] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1302.914174][T17754] netlink: 'syz.2.18536': attribute type 1 has an invalid length. [ 1302.954196][T17756] netlink: 'syz.1.18535': attribute type 11 has an invalid length. [ 1303.015481][T17759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18535'. [ 1303.029786][T17740] bond29: (slave bridge16): making interface the new active one [ 1303.037649][T17740] bridge16: entered promiscuous mode [ 1303.065500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.084077][T17740] bond29: (slave bridge16): Enslaving as an active interface with an up link [ 1303.158015][T17760] bond23: entered promiscuous mode [ 1303.304526][T17762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1303.390234][T17754] tunl0: Caught tx_queue_len zero misconfig [ 1303.466658][T17751] bond23: left promiscuous mode [ 1303.665852][T17774] netlink: 'syz.2.18540': attribute type 10 has an invalid length. [ 1303.711577][T17774] syz_tun: entered promiscuous mode [ 1303.822022][T17774] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1304.267144][ T29] audit: type=1804 audit(1779835631.461:21): pid=17805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.18548" name="/newroot/3692/cgroup.controllers" dev="tmpfs" ino=18643 res=1 errno=0 [ 1304.320821][ T29] audit: type=1800 audit(1779835631.491:22): pid=17805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18548" name="cgroup.controllers" dev="tmpfs" ino=18643 res=0 errno=0 [ 1304.542355][T17810] netlink: 'syz.2.18549': attribute type 3 has an invalid length. [ 1304.557431][T17810] nbd: nbd2 already in use [ 1304.563416][T17810] block nbd2: NBD_DISCONNECT [ 1304.568162][T17810] block nbd2: Send disconnect failed -32 [ 1304.574880][T17810] block nbd2: shutting down sockets [ 1304.656971][T17810] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1304.690240][T17810] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1304.715028][T17810] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1304.745020][T17810] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1304.797180][T17792] netlink: 'syz.3.18546': attribute type 1 has an invalid length. [ 1305.240131][T17836] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1305.397550][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.435107][T17846] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18554'. [ 1305.447886][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.494160][T17836] ip6gre3: entered allmulticast mode [ 1305.534875][T17836] ip6gre3: entered promiscuous mode [ 1305.555946][T17836] team0: Device ip6gre3 is of different type [ 1305.644785][T17845] netlink: 'syz.4.18556': attribute type 1 has an invalid length. [ 1305.684509][T17845] netlink: 'syz.4.18556': attribute type 1 has an invalid length. [ 1305.821692][T17845] tap0: tun_chr_ioctl cmd 1074025677 [ 1305.830529][T17845] tap0: linktype set to 778 [ 1306.071372][T17866] aD speed is unknown, defaulting to 1000 [ 1306.108579][T17876] netlink: 'syz.4.18560': attribute type 12 has an invalid length. [ 1306.228734][T17879] blkio.reset_stats is deprecated [ 1306.322709][T17882] batman_adv: batadv0: Adding interface: macvtap1 [ 1306.339580][T17882] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1306.587664][T17886] netlink: 'syz.1.18562': attribute type 1 has an invalid length. [ 1306.781196][T17885] 1: left allmulticast mode [ 1306.788542][T17885] hsr_slave_0: left allmulticast mode [ 1306.799850][T17885] hsr_slave_1: left allmulticast mode [ 1306.841071][T17885] geneve8: left promiscuous mode [ 1307.013177][T17889] gretap3: entered allmulticast mode [ 1307.036108][T17889] bond31: (slave gretap3): making interface the new active one [ 1307.061363][T17889] bond31: (slave gretap3): Enslaving as an active interface with an up link [ 1307.083429][ T3294] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 52160 - 0 [ 1307.096827][ T3294] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1307.107899][T17866] lo speed is unknown, defaulting to 1000 [ 1307.152985][ T3294] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 52160 - 0 [ 1307.184493][ T3294] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1307.256639][ T3294] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 52160 - 0 [ 1307.272439][ T3294] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1307.578530][T17919] syzkaller0: entered promiscuous mode [ 1307.593902][T17919] syzkaller0: entered allmulticast mode [ 1307.956443][T17937] netlink: 'syz.1.18572': attribute type 1 has an invalid length. [ 1308.109174][T17944] veth23: entered allmulticast mode [ 1308.119775][T17942] nbd2: detected capacity change from 0 to 63 [ 1308.174781][T17931] block nbd2: NBD_DISCONNECT [ 1308.271383][T17931] block nbd2: Disconnected due to user request. [ 1308.293309][T17931] block nbd2: shutting down sockets [ 1308.325590][ C1] blk_print_req_error: 138 callbacks suppressed [ 1308.325615][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.341170][ C1] buffer_io_error: 18 callbacks suppressed [ 1308.341189][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1308.378684][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.387886][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1308.395836][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.404970][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1308.412886][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.422015][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1308.431066][T17787] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.454128][T17958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18575'. [ 1308.467131][T17787] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1308.485151][T17787] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.508512][T17787] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1308.528908][T17787] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.548366][T17787] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1308.573375][T17787] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.597126][T17787] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1308.680532][T17787] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.693581][T17787] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1308.703527][T17787] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1308.712819][T17787] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1308.723572][T17787] ldm_validate_partition_table(): Disk read failed. [ 1308.732461][T17787] Dev nbd2: unable to read RDB block 0 [ 1308.743073][T17787] nbd2: unable to read partition table [ 1308.852005][T17787] ldm_validate_partition_table(): Disk read failed. [ 1308.895400][T17787] Dev nbd2: unable to read RDB block 0 [ 1308.927729][T17787] nbd2: unable to read partition table [ 1309.192851][T17962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18575'. [ 1309.244690][T17962] nbd: device at index 64 is going down [ 1309.323228][T17977] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1309.335729][T17977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1309.556722][T17980] syz_tun: left promiscuous mode [ 1309.592920][T17980] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1309.618631][T17980] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1309.660980][T17787] udevd[17787]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1310.132872][T16960] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1310.167531][T16960] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1310.211655][T16960] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1310.238181][T16960] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1310.368611][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18582'. [ 1310.792397][T18013] : renamed from sit0 [ 1311.728117][T18040] 8021q: adding VLAN 0 to HW filter on device 60X [ 1312.112298][ T29] audit: type=1800 audit(1779835639.301:23): pid=18025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18584" name="memory.events" dev="tmpfs" ino=18322 res=0 errno=0 [ 1312.188602][T18040] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1312.217731][T18040] 1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1312.292587][T18040] 0A: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1312.325919][T18040] veth1_vlan: left promiscuous mode [ 1312.376224][T18040] veth0_vlan: left promiscuous mode [ 1312.398934][T18040] veth0_vlan: entered promiscuous mode [ 1312.423391][T18040] veth1_vlan: entered promiscuous mode [ 1312.496676][T18040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1312.526013][T18040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1312.554258][T18040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1312.579277][T18040] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1312.615307][T18040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1312.630588][T18040] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1312.651643][T18040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1312.687733][T18040] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1312.802393][T15395] uyz0: Port: 1 Link ACTIVE [ 1312.825461][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.879250][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.892927][ T3294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1312.902501][ T3294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1312.919200][T15395] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1312.947698][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.970564][ T3294] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1312.980752][ T3294] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1312.999386][T15393] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1313.112240][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18594'. [ 1313.166984][T18092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18594'. [ 1313.197889][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18596'. [ 1313.289962][T15395] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1313.699440][T15395] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1313.860329][T15395] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1313.897124][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18599'. [ 1314.030166][T15395] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1317.872749][ T3294] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.881250][ T3294] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.938312][T18095] : renamed from sit0 (while UP) [ 1317.981298][ T3294] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.009776][ T3294] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.137754][T18123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18601'. [ 1318.167866][T18131] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.18602'. [ 1318.183122][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18601'. [ 1318.225414][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18601'. [ 1318.237674][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18603'. [ 1318.260518][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18601'. [ 1318.262058][T18131] syzkaller1: entered promiscuous mode [ 1318.295746][T18131] syzkaller1: entered allmulticast mode [ 1318.511399][T18134] vlan5: entered promiscuous mode [ 1318.516558][T18134] geneve1: entered promiscuous mode [ 1318.522638][T18134] vlan5: entered allmulticast mode [ 1318.527871][T18134] geneve1: entered allmulticast mode [ 1318.545191][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18605'. [ 1318.570062][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18605'. [ 1318.967360][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18609'. [ 1319.044120][T18168] IPv6: sit4: Disabled Multicast RS [ 1319.080646][T18168] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18610'. [ 1319.138167][T18169] aD speed is unknown, defaulting to 1000 [ 1319.411087][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18611'. [ 1319.529996][T18169] lo speed is unknown, defaulting to 1000 [ 1319.693438][T18177] syzkaller1: entered allmulticast mode [ 1319.924791][T18181] vlan5: entered promiscuous mode [ 1319.930108][T18181] bridge0: entered promiscuous mode [ 1319.998059][T18182] erspan0: left promiscuous mode [ 1320.036419][T18184] netlink: 'syz.3.18623': attribute type 4 has an invalid length. [ 1320.120930][ T5739] aD speed is unknown, defaulting to 1000 [ 1320.144307][ T5739] syz2: Port: 1 Link ACTIVE [ 1320.621278][T18202] aD speed is unknown, defaulting to 1000 [ 1320.783584][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18617'. [ 1321.672004][T15407] aD speed is unknown, defaulting to 1000 [ 1321.688651][T15407] syz2: Port: 1 Link DOWN [ 1321.699815][T18202] lo speed is unknown, defaulting to 1000 [ 1321.877458][T18226] netlink: 'syz.2.18621': attribute type 1 has an invalid length. [ 1322.006673][T18230] netlink: 'syz.2.18622': attribute type 13 has an invalid length. [ 1322.115776][T18232] netlink: 'syz.2.18624': attribute type 3 has an invalid length. [ 1322.154057][T18232] block nbd2: NBD_DISCONNECT [ 1322.169227][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18624'. [ 1322.246892][T18234] syz.2.18625: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1322.262605][T18234] CPU: 0 UID: 0 PID: 18234 Comm: syz.2.18625 Not tainted syzkaller #0 PREEMPT(full) [ 1322.262636][T18234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1322.262649][T18234] Call Trace: [ 1322.262659][T18234] [ 1322.262669][T18234] dump_stack_lvl+0xe8/0x150 [ 1322.262703][T18234] warn_alloc+0x249/0x340 [ 1322.262737][T18234] ? stack_trace_save+0xa9/0x100 [ 1322.262775][T18234] ? __pfx_warn_alloc+0x10/0x10 [ 1322.262813][T18234] ? kasan_save_track+0x4f/0x80 [ 1322.262838][T18234] ? kasan_save_track+0x3e/0x80 [ 1322.262863][T18234] ? __kasan_kmalloc+0x93/0xb0 [ 1322.262890][T18234] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1322.262917][T18234] ? xskq_create+0x56/0x170 [ 1322.262948][T18234] ? xsk_setsockopt+0x54c/0x990 [ 1322.262979][T18234] ? do_sock_setsockopt+0x17c/0x1b0 [ 1322.263003][T18234] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1322.263024][T18234] ? do_syscall_64+0x174/0xf80 [ 1322.263050][T18234] __vmalloc_node_range_noprof+0x132/0x1750 [ 1322.263115][T18234] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1322.263152][T18234] ? __kasan_kmalloc+0x93/0xb0 [ 1322.263188][T18234] vmalloc_user_noprof+0xad/0xe0 [ 1322.263217][T18234] ? xskq_create+0xbf/0x170 [ 1322.263248][T18234] xskq_create+0xbf/0x170 [ 1322.263283][T18234] xsk_init_queue+0x8a/0xe0 [ 1322.263315][T18234] xsk_setsockopt+0x54c/0x990 [ 1322.263347][T18234] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1322.263376][T18234] ? __pfx_aa_sk_perm+0x10/0x10 [ 1322.263409][T18234] ? aa_sock_opt_perm+0xff/0x1a0 [ 1322.263442][T18234] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1322.263471][T18234] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1322.263519][T18234] do_sock_setsockopt+0x17c/0x1b0 [ 1322.263550][T18234] __x64_sys_setsockopt+0x13d/0x1b0 [ 1322.263585][T18234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.263611][T18234] do_syscall_64+0x174/0xf80 [ 1322.263633][T18234] ? trace_irq_disable+0x3b/0x140 [ 1322.263711][T18234] ? clear_bhb_loop+0x40/0x90 [ 1322.263740][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.263762][T18234] RIP: 0033:0x7fc62599ce59 [ 1322.263784][T18234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.263802][T18234] RSP: 002b:00007fc62691f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1322.263825][T18234] RAX: ffffffffffffffda RBX: 00007fc625c15fa0 RCX: 00007fc62599ce59 [ 1322.263841][T18234] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1322.263854][T18234] RBP: 00007fc625a32d6f R08: 0000000000000004 R09: 0000000000000000 [ 1322.263867][T18234] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.263881][T18234] R13: 00007fc625c16038 R14: 00007fc625c15fa0 R15: 00007ffeece7aba8 [ 1322.263918][T18234] [ 1322.264015][T18234] Mem-Info: [ 1322.566249][T18234] active_anon:9642 inactive_anon:15 isolated_anon:0 [ 1322.566249][T18234] active_file:2383 inactive_file:41394 isolated_file:0 [ 1322.566249][T18234] unevictable:768 dirty:431 writeback:0 [ 1322.566249][T18234] slab_reclaimable:13676 slab_unreclaimable:193952 [ 1322.566249][T18234] mapped:32649 shmem:1304 pagetables:3638 [ 1322.566249][T18234] sec_pagetables:0 bounce:0 [ 1322.566249][T18234] kernel_misc_reclaimable:0 [ 1322.566249][T18234] free:1193286 free_pcp:21283 free_cma:0 [ 1322.604991][T18235] netlink: 'syz.2.18625': attribute type 10 has an invalid length. [ 1322.623221][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18625'. [ 1322.632472][T18235] openvswitch: netlink: Message has 2 unknown bytes. [ 1322.640383][T18235] netlink: 'syz.2.18625': attribute type 10 has an invalid length. [ 1322.648932][T18234] Node 0 active_anon:38568kB inactive_anon:60kB active_file:9532kB inactive_file:165372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130596kB dirty:1720kB writeback:0kB shmem:3680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17356kB pagetables:14456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1322.686079][T18234] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1322.719487][T18234] Node 0 DMA free:11080kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:84kB free_cma:0kB [ 1322.752385][T18234] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1322.758335][T18234] Node 0 DMA32 free:1077320kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38568kB inactive_anon:60kB active_file:9532kB inactive_file:165372kB unevictable:1536kB writepending:1720kB zspages:0kB present:3129332kB managed:2552788kB mlocked:0kB bounce:0kB free_pcp:30160kB local_pcp:9140kB free_cma:0kB [ 1322.795128][T18234] lowmem_reserve[]: 0 0 0 0 0 [ 1322.801595][T18234] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:676kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 1322.961858][T18234] lowmem_reserve[]: 0 0 0 0 0 [ 1322.967038][T18234] Node 1 Normal free:3684944kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54828kB local_pcp:25508kB free_cma:0kB [ 1323.030251][T18234] lowmem_reserve[]: 0 0 0 0 0 [ 1323.035368][T18234] Node 0 DMA: 2*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11080kB [ 1323.051041][T18234] Node 0 DMA32: 3482*4kB (UME) 7509*8kB (UME) 3883*16kB (UM) 988*32kB (UME) 214*64kB (UME) 1055*128kB (UME) 858*256kB (UM) 445*512kB (UME) 206*1024kB (U) 50*2048kB (UM) 0*4096kB = 1077312kB [ 1323.144823][T18234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1323.158484][T18234] Node 1 Normal: 11*4kB (U) 17*8kB (UM) 17*16kB (UM) 8*32kB (UM) 13*64kB (UM) 13*128kB (UM) 10*256kB (UM) 10*512kB (UM) 8*1024kB (UM) 8*2048kB (U) 891*4096kB (UM) = 3684996kB [ 1323.183659][T18239] aD speed is unknown, defaulting to 1000 [ 1323.287739][T18234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1323.308761][T18234] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1323.324868][T18234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1323.350432][T18234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1323.387321][T18234] 46152 total pagecache pages [ 1323.416805][T18234] 0 pages in swap cache [ 1323.432542][T18234] Free swap = 124996kB [ 1323.446630][T18234] Total swap = 124996kB [ 1323.465722][T18234] 2097051 pages RAM [ 1323.480476][T18234] 0 pages HighMem/MovableOnly [ 1323.494647][T18234] 427070 pages reserved [ 1323.504819][T18234] 0 pages cma reserved [ 1324.567918][T18239] lo speed is unknown, defaulting to 1000 [ 1324.578630][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1324.578651][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1324.622176][T18279] netlink: 'syz.0.18634': attribute type 1 has an invalid length. [ 1324.732020][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18633'. [ 1324.778668][T18278] openvswitch: netlink: Invalid VLAN frame [ 1325.387787][T18290] veth1_vlan: left promiscuous mode [ 1325.394990][T18290] veth0_vlan: left promiscuous mode [ 1325.402512][T18290] veth0_vlan: entered promiscuous mode [ 1325.412641][T18290] veth1_vlan: entered promiscuous mode [ 1325.426980][T18290] veth0_macvtap: left promiscuous mode [ 1325.434134][T18290] veth0_macvtap: entered promiscuous mode [ 1325.441531][T18290] veth1_macvtap: entered promiscuous mode [ 1325.451318][T18290] geneve0: entered promiscuous mode [ 1325.465324][T18290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1325.512583][T18290] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1325.556876][ T5739] aD speed is unknown, defaulting to 1000 [ 1325.569165][ T5739] syz2: Port: 1 Link ACTIVE [ 1325.686075][ T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.858879][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1325.895109][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.937411][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.978136][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.064342][T18300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18639'. [ 1326.160550][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18639'. [ 1326.672704][T18312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18642'. [ 1327.149726][T18319] aD speed is unknown, defaulting to 1000 [ 1327.170742][T18320] netlink: 'syz.0.18645': attribute type 1 has an invalid length. [ 1327.419647][T18332] netlink: 'syz.4.18647': attribute type 13 has an invalid length. [ 1327.460854][T18332] netlink: 'syz.4.18647': attribute type 17 has an invalid length. [ 1328.090127][T18330] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1328.471426][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18650'. [ 1328.495621][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18650'. [ 1328.517849][T18348] netlink: 'syz.0.18650': attribute type 18 has an invalid length. [ 1329.177470][T15407] aD speed is unknown, defaulting to 1000 [ 1329.294073][T18332] veth1_vlan: left promiscuous mode [ 1329.302296][T18332] veth0_vlan: left promiscuous mode [ 1329.309357][T18332] veth0_vlan: entered promiscuous mode [ 1329.320871][T18332] veth1_vlan: entered promiscuous mode [ 1329.340815][T18332] veth1_macvtap: left promiscuous mode [ 1329.347861][T18332] veth0_macvtap: left promiscuous mode [ 1329.355511][T18332] veth0_macvtap: entered promiscuous mode [ 1329.370893][T18332] veth1_macvtap: entered promiscuous mode [ 1329.378029][T18332] geneve0: left promiscuous mode [ 1329.384759][T18332] geneve0: entered promiscuous mode [ 1329.404090][T18332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1329.413752][T18332] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1329.432440][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18649'. [ 1329.452573][T18319] lo speed is unknown, defaulting to 1000 [ 1329.564273][T15391] aD speed is unknown, defaulting to 1000 [ 1329.669305][T18361] bond17: (slave team_slave_1): Releasing backup interface [ 1329.801684][T18361] bond5: (slave bond6): Releasing backup interface [ 1329.877931][T18361] bond7: (slave ip6gre2): Releasing backup interface [ 1329.928983][T18361] ip6gre2: left allmulticast mode [ 1330.046919][T18361] bond8: (slave veth7): Releasing active interface [ 1330.067453][T18379] netlink: 'syz.2.18655': attribute type 4 has an invalid length. [ 1330.081376][T18361] bond8: (slave veth7): the permanent HWaddr of slave - 52:fa:ec:e4:30:9b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1330.090516][T18379] netlink: 17 bytes leftover after parsing attributes in process `syz.2.18655'. [ 1330.125438][T18361] batadv1: entered promiscuous mode [ 1330.147830][T18361] bond8: (slave batadv1): Releasing active interface [ 1330.159882][T18361] batadv1: left promiscuous mode [ 1330.169437][T18361] bond10: (slave bridge14): Releasing active interface [ 1330.178547][T18361] vlan5: left allmulticast mode [ 1330.183826][T18361] geneve0: left allmulticast mode [ 1330.193898][T18361] bridge0: port 1(vlan5) entered disabled state [ 1330.205988][T18361] geneve0: left promiscuous mode [ 1330.215366][T18384] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 1330.224129][T18361] bond11: (slave bridge16): Releasing backup interface [ 1330.237936][T18361] bond12: (slave bridge17): Releasing backup interface [ 1330.251214][T18361] bond13: (slave geneve4): Releasing active interface [ 1330.262605][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18655'. [ 1330.275945][T18361] bond14: (slave bridge18): Removing an active aggregator [ 1330.289601][T18361] bond14: (slave bridge18): Releasing backup interface [ 1330.296734][T18361] bond14: (slave bridge18): the permanent HWaddr of slave - ee:ea:d2:25:d5:37 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1330.321092][T18361] bond14: (slave bridge19): Releasing backup interface [ 1330.343528][T18361] bond16: (slave batadv2): Releasing active interface [ 1330.352374][T18361] gretap2: left allmulticast mode [ 1330.357613][T18361] gretap2: left promiscuous mode [ 1330.366651][T18361] bridge21: port 1(gretap2) entered disabled state [ 1330.381291][T18361] bond19: (slave geneve5): Releasing active interface [ 1330.391826][T18361] bond22: (slave bridge22): Releasing backup interface [ 1330.403149][T18361] bond24: (slave gretap3): Releasing active interface [ 1330.414870][T18361] bond24: (slave bridge23): Releasing active interface [ 1330.550477][T18389] netlink: 'syz.4.18656': attribute type 1 has an invalid length. [ 1330.567732][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18656'. [ 1330.586054][T18389] netlink: 'syz.4.18656': attribute type 1 has an invalid length. [ 1330.704839][ T29] audit: type=1804 audit(1779835657.901:24): pid=18396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.18657" name="/newroot/3807/cgroup.controllers" dev="tmpfs" ino=19210 res=1 errno=0 [ 1330.768642][ T29] audit: type=1800 audit(1779835657.901:25): pid=18396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18657" name="cgroup.controllers" dev="tmpfs" ino=19210 res=0 errno=0 [ 1331.086484][T18393] syzkaller1: entered promiscuous mode [ 1331.163831][T18393] syzkaller1: entered allmulticast mode [ 1331.866318][T18432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18662'. [ 1332.542043][T18452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18666'. [ 1332.565324][T18452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18666'. [ 1332.631207][T18459] netlink: 'syz.4.18664': attribute type 1 has an invalid length. [ 1332.789516][T18467] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1332.805009][T18467] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1332.813953][T18467] ip6gre2: left promiscuous mode [ 1332.820287][T18467] ip6gre2: left allmulticast mode [ 1332.825581][T18467] ip6tnl8: left allmulticast mode [ 1332.831144][T18467] macvlan0: left allmulticast mode [ 1332.836621][T18467] bond25: left promiscuous mode [ 1332.841763][T18467] bond25: left allmulticast mode [ 1332.847300][T18467] bond27: left promiscuous mode [ 1332.854433][T18467] bridge19: left promiscuous mode [ 1332.889421][T18467] bond27: left allmulticast mode [ 1332.904113][T18467] bridge19: left allmulticast mode [ 1332.914428][T18475] netlink: 'syz.0.18669': attribute type 1 has an invalid length. [ 1333.176627][T18485] veth33: entered allmulticast mode [ 1333.714601][T18513] bridge13: entered promiscuous mode [ 1333.756402][T18513] bridge13: entered allmulticast mode [ 1333.895520][T18523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18677'. [ 1333.996679][T18516] bridge13: entered promiscuous mode [ 1334.024069][T18516] bridge13: entered allmulticast mode [ 1334.793718][T18552] netlink: 'syz.4.18680': attribute type 1 has an invalid length. [ 1334.966719][T18557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18680'. [ 1335.108690][T18554] bond26: (slave geneve6): making interface the new active one [ 1335.151678][T18554] bond26: (slave geneve6): Enslaving as an active interface with an up link [ 1335.212328][T18557] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1335.262582][ T35] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1335.298183][ T35] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1335.642103][ T29] audit: type=1800 audit(1779835662.841:26): pid=18543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18679" name="memory.events" dev="tmpfs" ino=18801 res=0 errno=0 [ 1335.761927][T18552] tipc: Resetting bearer [ 1335.842424][ T35] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1335.867560][ T35] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1335.898532][T10082] aD speed is unknown, defaulting to 1000 [ 1336.173985][T18607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18689'. [ 1336.300511][T18617] netlink: 'syz.3.18690': attribute type 21 has an invalid length. [ 1336.321637][T18617] netlink: 'syz.3.18690': attribute type 21 has an invalid length. [ 1336.426715][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18691'. [ 1336.441432][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 1336.463217][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18690'. [ 1336.477424][T18615] aD speed is unknown, defaulting to 1000 [ 1336.489429][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18691'. [ 1336.501687][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18690'. [ 1336.526177][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18690'. [ 1336.990750][T18615] lo speed is unknown, defaulting to 1000 [ 1337.211420][T18640] A link change request failed with some changes committed already. Interface 45 may have been left with an inconsistent configuration, please check. [ 1337.261688][T18646] netlink: 292 bytes leftover after parsing attributes in process `syz.4.18698'. [ 1337.547699][T18652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.626767][T18653] syzkaller0: entered promiscuous mode [ 1337.632990][T18653] syzkaller0: entered allmulticast mode [ 1337.839077][T18637] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1338.035955][T18667] ipt_rpfilter: unknown options [ 1338.163537][T18675] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18702'. [ 1338.376092][T18684] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18705'. [ 1338.376836][T18665] aD speed is unknown, defaulting to 1000 [ 1338.817904][T18685] sctp: [Deprecated]: syz.3.18705 (pid 18685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1338.817904][T18685] Use struct sctp_sack_info instead [ 1339.276279][T18665] lo speed is unknown, defaulting to 1000 [ 1339.938648][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1340.182021][T18708] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1340.534976][T18732] aD speed is unknown, defaulting to 1000 [ 1341.493647][T10082] aD speed is unknown, defaulting to 1000 [ 1341.503614][T18732] lo speed is unknown, defaulting to 1000 [ 1341.510157][ T3294] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.511673][T10082] syz2: Port: 1 Link DOWN [ 1341.533637][ T3294] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1341.559412][ T3294] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.581108][ T3294] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1341.598663][ T3294] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.620938][ T3294] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1341.640331][ T3294] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.655995][ T3294] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1341.818646][T18757] lo: Caught tx_queue_len zero misconfig [ 1342.456768][T18767] netlink: 'syz.0.18722': attribute type 7 has an invalid length. [ 1342.465097][T18767] netlink: 'syz.0.18722': attribute type 8 has an invalid length. [ 1342.499128][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1342.513424][T18767] tipc: Resetting bearer [ 1342.766106][T18776] __nla_validate_parse: 4 callbacks suppressed [ 1342.766128][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18723'. [ 1343.338915][T18791] netlink: 13 bytes leftover after parsing attributes in process `syz.2.18727'. [ 1343.594181][T18800] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1343.604319][T18802] tipc: Resetting bearer [ 1344.013979][T18788] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1344.163146][T18813] netlink: 'syz.1.18733': attribute type 1 has an invalid length. [ 1344.367837][T18815] bond32: (slave gretap4): making interface the new active one [ 1344.386107][T18815] bond32: (slave gretap4): Enslaving as an active interface with an up link [ 1344.450094][T18813] bond32: (slave bridge13): Enslaving as an active interface with a down link [ 1344.466739][T18823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18735'. [ 1344.517039][T18823] ip6gre8: entered promiscuous mode [ 1344.531279][T18823] ip6gre8: entered allmulticast mode [ 1344.559815][T18813] macvlan5: entered promiscuous mode [ 1344.567237][T18813] macvlan5: entered allmulticast mode [ 1344.578682][T18813] bond32: entered promiscuous mode [ 1344.592054][T18813] gretap4: entered promiscuous mode [ 1344.606536][T18813] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1344.630127][T18813] bond32: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1344.633150][T18827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18736'. [ 1344.672106][T18813] bond32: left promiscuous mode [ 1344.680603][T18813] gretap4: left promiscuous mode [ 1344.719368][T18828] netlink: 'syz.3.18735': attribute type 6 has an invalid length. [ 1344.740910][T18828] netlink: 72 bytes leftover after parsing attributes in process `syz.3.18735'. [ 1345.127531][T18840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18738'. [ 1345.545477][T18860] 1: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1345.688679][T18870] netlink: 'syz.4.18742': attribute type 13 has an invalid length. [ 1345.749951][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18742'. [ 1346.285090][T18882] aD speed is unknown, defaulting to 1000 [ 1346.607374][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18747'. [ 1346.716129][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18747'. [ 1346.764704][T18894] netlink: 'syz.2.18746': attribute type 1 has an invalid length. [ 1346.773643][T18891] netlink: 348 bytes leftover after parsing attributes in process `syz.0.18747'. [ 1346.937007][T18894] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1347.464018][T18882] lo speed is unknown, defaulting to 1000 [ 1347.479424][ T57] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1347.504939][ T57] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1347.521665][ T57] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1347.530588][ T57] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.180623][T15415] uyz0: Port: 1 Link DOWN [ 1348.185179][ T3294] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.194825][ T3294] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.204569][ T3294] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.384650][T18950] netlink: 'syz.1.18755': attribute type 1 has an invalid length. [ 1348.453774][T18950] bond33: entered promiscuous mode [ 1348.466769][T18950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1348.589750][T18935] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1348.673391][T18948] bond33: left promiscuous mode [ 1348.884697][T18962] __nla_validate_parse: 3 callbacks suppressed [ 1348.884720][T18962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18758'. [ 1348.933839][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18758'. [ 1349.027528][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18758'. [ 1349.327343][T18971] bridge0: port 2(ipvlan5) entered blocking state [ 1349.344531][T18971] bridge0: port 2(ipvlan5) entered disabled state [ 1349.364660][T18971] ipvlan5: entered allmulticast mode [ 1349.391706][T18971] bridge0: entered allmulticast mode [ 1349.428013][T18971] ipvlan5: left allmulticast mode [ 1349.438759][T18971] bridge0: left allmulticast mode [ 1349.492173][T18976] tipc: Resetting bearer [ 1349.934689][T18989] netlink: 'syz.4.18761': attribute type 1 has an invalid length. [ 1350.083323][T18989] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1350.913577][T19002] xt_hashlimit: size too large, truncated to 1048576 [ 1351.113650][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18769'. [ 1351.300891][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1351.658635][T19014] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1351.836111][T19036] xt_hashlimit: size too large, truncated to 1048576 [ 1351.939478][T19039] tipc: Resetting bearer [ 1352.007649][T19041] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1352.041876][T19039] block nbd2: shutting down sockets [ 1352.338544][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1352.363823][T19044] bridge21: entered promiscuous mode [ 1352.378702][T19044] bridge21: entered allmulticast mode [ 1352.397768][T19044] team0: Port device bridge21 added [ 1352.523057][T19029] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1352.557385][T15400] IPVS: starting estimator thread 0... [ 1352.650499][T19055] IPVS: using max 25 ests per chain, 60000 per kthread [ 1353.014960][T19072] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1353.380994][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1353.872103][T19096] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1353.888606][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18786'. [ 1353.904319][T19096] unsupported nla_type 216 [ 1353.917106][T19096] netlink: zone id is out of range [ 1353.923757][T19096] netlink: zone id is out of range [ 1353.935150][T19096] netlink: zone id is out of range [ 1353.941306][T19096] netlink: zone id is out of range [ 1353.953441][T19096] netlink: zone id is out of range [ 1353.961640][T19096] netlink: zone id is out of range [ 1353.972544][T19096] netlink: zone id is out of range [ 1353.994044][T19100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18786'. [ 1354.013012][T19096] netlink: zone id is out of range [ 1354.019748][T19096] netlink: zone id is out of range [ 1354.031577][T19096] netlink: zone id is out of range [ 1354.135622][T19104] tipc: Resetting bearer [ 1354.423102][T19087] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1354.731752][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18789'. [ 1354.783843][T19115] xt_l2tp: invalid flags combination: 8 [ 1354.849376][T19115] netlink: 'syz.0.18789': attribute type 1 has an invalid length. [ 1354.873877][T19115] gre0: entered promiscuous mode [ 1354.888772][T19115] gre0: entered allmulticast mode [ 1354.994740][T19119] aD speed is unknown, defaulting to 1000 [ 1355.006159][T19124] netlink: 220 bytes leftover after parsing attributes in process `syz.3.18790'. [ 1355.020776][T19124] netlink: 'syz.3.18790': attribute type 2 has an invalid length. [ 1356.096376][T19119] lo speed is unknown, defaulting to 1000 [ 1356.644440][ T29] audit: type=1804 audit(1779835683.841:27): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.18799" name="/newroot/3664/cgroup.controllers" dev="tmpfs" ino=18519 res=1 errno=0 [ 1356.685428][ T29] audit: type=1800 audit(1779835683.841:28): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18799" name="cgroup.controllers" dev="tmpfs" ino=18519 res=0 errno=0 [ 1356.931020][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18798'. [ 1356.991515][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18801'. [ 1358.331312][T19201] aD speed is unknown, defaulting to 1000 [ 1358.704676][ T3294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.728340][ T3294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.775347][T19215] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1359.061321][T19229] netlink: 'syz.2.18810': attribute type 1 has an invalid length. [ 1359.263962][T19214] tipc: Resetting bearer [ 1359.315085][T19228] syzkaller0: entered promiscuous mode [ 1359.326903][T19228] syzkaller0: entered allmulticast mode [ 1359.342490][T15389] aD speed is unknown, defaulting to 1000 [ 1359.384875][T19229] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1359.396547][T19201] lo speed is unknown, defaulting to 1000 [ 1359.618579][ C1] net_ratelimit: 17 callbacks suppressed [ 1359.618603][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1359.699198][T19241] netlink: 108 bytes leftover after parsing attributes in process `syz.1.18813'. [ 1359.711255][T19238] bridge22: entered promiscuous mode [ 1359.716624][T19238] bridge22: entered allmulticast mode [ 1359.725662][T19238] team0: Port device bridge22 added [ 1359.746118][T19238] bridge23: entered promiscuous mode [ 1359.752002][T19238] bridge23: entered allmulticast mode [ 1359.760949][T19238] team0: Port device bridge23 added [ 1359.968966][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18814'. [ 1360.011942][T19249] ip6tnl4: entered allmulticast mode [ 1360.086775][T19255] netlink: 'syz.1.18816': attribute type 1 has an invalid length. [ 1360.139200][T19249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1360.240926][T19258] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 1360.255501][T19258] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 1360.308923][T19245] aD speed is unknown, defaulting to 1000 [ 1360.408185][T19264] netlink: 'syz.1.18818': attribute type 32 has an invalid length. [ 1360.455997][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18817'. [ 1360.533214][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18817'. [ 1360.542464][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18814'. [ 1360.658548][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1360.746545][T19269] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 1360.877663][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18820'. [ 1361.078780][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18820'. [ 1361.512351][T19245] lo speed is unknown, defaulting to 1000 [ 1361.626465][T19283] aD speed is unknown, defaulting to 1000 [ 1361.698551][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1361.810162][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18823'. [ 1361.876029][ T29] audit: type=1804 audit(1779835689.071:29): pid=19286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.18823" name="/newroot/3766/cgroup.controllers" dev="tmpfs" ino=19025 res=1 errno=0 [ 1361.944163][ T29] audit: type=1800 audit(1779835689.071:30): pid=19286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18823" name="cgroup.controllers" dev="tmpfs" ino=19025 res=0 errno=0 [ 1361.993386][ T29] audit: type=1804 audit(1779835689.141:31): pid=19286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.18823" name="/newroot/3766/cgroup.controllers" dev="tmpfs" ino=19025 res=1 errno=0 [ 1362.043618][T19294] netlink: 'syz.0.18825': attribute type 1 has an invalid length. [ 1362.053746][T19293] aD speed is unknown, defaulting to 1000 [ 1362.116771][T19294] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1362.371388][T19305] bridge14: entered promiscuous mode [ 1362.385464][T19305] bridge14: entered allmulticast mode [ 1362.536606][T19299] bridge14: entered promiscuous mode [ 1362.548519][T19299] bridge14: entered allmulticast mode [ 1362.575999][T19283] lo speed is unknown, defaulting to 1000 [ 1362.738535][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1363.033294][T19313] aD speed is unknown, defaulting to 1000 [ 1363.041355][T19293] lo speed is unknown, defaulting to 1000 [ 1363.478242][T19313] lo speed is unknown, defaulting to 1000 [ 1363.778467][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1364.240704][T19329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1364.818497][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1365.337159][T19343] aD speed is unknown, defaulting to 1000 [ 1365.534513][T19348] sctp: [Deprecated]: syz.1.18835 (pid 19348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1365.534513][T19348] Use struct sctp_sack_info instead [ 1365.571957][T19348] sctp: [Deprecated]: syz.1.18835 (pid 19348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1365.571957][T19348] Use struct sctp_sack_info instead [ 1365.651769][T19350] netlink: 'syz.2.18836': attribute type 1 has an invalid length. [ 1365.749786][T19350] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1365.783806][T19343] lo speed is unknown, defaulting to 1000 [ 1365.796552][T19350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1365.858614][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1366.898508][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1367.034142][T19372] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18842'. [ 1367.044008][T19372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1367.215123][T19375] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 1367.230186][T19377] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18844'. [ 1367.297266][T19380] netlink: 'syz.2.18843': attribute type 1 has an invalid length. [ 1367.298207][T19379] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18845'. [ 1367.314767][T19379] netlink: 47 bytes leftover after parsing attributes in process `syz.0.18845'. [ 1367.324517][T19379] netlink: 'syz.0.18845': attribute type 6 has an invalid length. [ 1367.333758][T19379] netlink: 'syz.0.18845': attribute type 6 has an invalid length. [ 1367.646022][T19392] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1367.646022][T19392] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1367.742052][T19399] wg2: Caught tx_queue_len zero misconfig [ 1367.832622][T19392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18850'. [ 1367.893490][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18850'. [ 1367.940697][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1368.078254][T19396] aD speed is unknown, defaulting to 1000 [ 1368.847524][T19396] lo speed is unknown, defaulting to 1000 [ 1368.910982][T16962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.929692][T16962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.978578][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1369.054292][T19439] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18854'. [ 1369.064138][T19439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1369.448694][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18855'. [ 1369.463335][T19451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18856'. [ 1369.552988][T19451] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1369.826941][T19465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18856'. [ 1369.944126][T19456] bond28: (slave veth17): Enslaving as an active interface with an up link [ 1370.018457][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1370.360266][T19465] bond28: (slave bridge24): Enslaving as an active interface with an up link [ 1370.726923][T19481] veth19: entered allmulticast mode [ 1371.058580][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1371.123162][T19503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1371.734918][T19523] aD speed is unknown, defaulting to 1000 [ 1372.098456][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1372.172875][T19523] lo speed is unknown, defaulting to 1000 [ 1372.192116][T19533] tipc: Resetting bearer [ 1372.236003][T19533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.247624][T19533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.327197][T19533] veth1_vlan: left promiscuous mode [ 1372.339329][T19533] veth0_vlan: left promiscuous mode [ 1372.354876][T19533] veth0_vlan: entered promiscuous mode [ 1372.391674][T19533] veth1_vlan: entered promiscuous mode [ 1372.414231][T19533] veth1_macvtap: left promiscuous mode [ 1372.433366][T19533] veth0_macvtap: left promiscuous mode [ 1372.452347][T19533] veth0_macvtap: entered promiscuous mode [ 1372.524000][T19534] veth19: entered allmulticast mode [ 1372.560769][T19534] bond29: (slave veth19): Enslaving as an active interface with an up link [ 1372.887388][T19555] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 1373.138500][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1373.183811][T19565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1373.206346][T19561] bridge25: entered promiscuous mode [ 1373.239135][T19561] bridge25: entered allmulticast mode [ 1373.600423][T19575] __nla_validate_parse: 9 callbacks suppressed [ 1373.600445][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18883'. [ 1373.601595][T19571] bridge25: entered promiscuous mode [ 1373.666459][T19571] bridge25: entered allmulticast mode [ 1373.997089][T19588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18886'. [ 1374.179476][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1374.418136][T19594] netlink: 'syz.1.18887': attribute type 12 has an invalid length. [ 1374.674287][T19600] ip6gre3: entered promiscuous mode [ 1374.689995][T19600] ip6gre3: entered allmulticast mode [ 1374.842814][T19603] block nbd2: server does not support multiple connections per device. [ 1374.884339][T19603] block nbd2: shutting down sockets [ 1375.218606][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1375.285917][T19609] vlan5: left promiscuous mode [ 1375.290941][T19609] geneve1: left promiscuous mode [ 1375.296231][T19609] vlan5: left allmulticast mode [ 1375.305623][T19609] geneve1: left allmulticast mode [ 1375.616701][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18896'. [ 1375.631077][T19632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18895'. [ 1375.685242][T19632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1375.769247][T15400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.815863][T19637] erspan0: left promiscuous mode [ 1375.888669][T15400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.947497][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.963402][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.999184][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.012965][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.107659][T19637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1376.143242][T19637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1376.193410][T19637] veth1_vlan: left promiscuous mode [ 1376.224629][T19637] veth0_vlan: left promiscuous mode [ 1376.250594][T19637] veth0_vlan: entered promiscuous mode [ 1376.258662][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1376.273335][T19637] veth1_vlan: entered promiscuous mode [ 1376.306834][T19637] veth1_macvtap: left promiscuous mode [ 1376.329132][T19637] veth0_macvtap: left promiscuous mode [ 1376.336897][T19637] veth1_macvtap: entered promiscuous mode [ 1376.346403][T19637] geneve0: left promiscuous mode [ 1376.357221][T19637] geneve0: entered promiscuous mode [ 1376.620023][T19637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1376.633630][T19637] erspan0: entered promiscuous mode [ 1376.646818][T19637] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1376.755246][T19625] tipc: Resetting bearer [ 1376.936617][T19625] tipc: Resetting bearer [ 1376.951564][T19625] tipc: Resetting bearer [ 1376.975420][T16962] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 1377.035357][T15389] syz0: Port: 1 Link ACTIVE [ 1377.040299][ T48] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.053015][ T48] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.076218][ T48] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.105243][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.113724][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18901'. [ 1377.126129][T15415] syz1: Port: 1 Link ACTIVE [ 1377.360874][ T48] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.389155][ T48] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.409359][ T48] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.425432][ T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.644021][T19648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1377.908029][T19691] netlink: 244 bytes leftover after parsing attributes in process `syz.3.18907'. [ 1377.949025][T19692] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18906'. [ 1377.978021][T19698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18907'. [ 1378.035794][T19698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18907'. [ 1378.214380][T19698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18907'. [ 1378.592573][T19711] netlink: 'syz.0.18910': attribute type 27 has an invalid length. [ 1378.823559][T19711] xt_hashlimit: max too large, truncated to 1048576 [ 1378.970873][T19725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18915'. [ 1379.501993][T19739] netlink: 'syz.0.18919': attribute type 1 has an invalid length. [ 1379.557599][T19739] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1379.868542][T19747] netlink: 'syz.3.18920': attribute type 1 has an invalid length. [ 1379.930422][T19747] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1380.121974][T19753] gre0: left promiscuous mode [ 1380.146532][T19753] veth1_macvtap: entered promiscuous mode [ 1380.179968][T19756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18931'. [ 1380.197158][T19753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1380.418531][ C1] net_ratelimit: 23 callbacks suppressed [ 1380.418573][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1380.861216][T19753] [ 1380.863615][T19753] ====================================================== [ 1380.870664][T19753] WARNING: possible circular locking dependency detected [ 1380.877730][T19753] syzkaller #0 Not tainted [ 1380.882168][T19753] ------------------------------------------------------ [ 1380.889209][T19753] syz.0.18931/19753 is trying to acquire lock: [ 1380.895364][T19753] ffffffff8ea855a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 1380.904551][T19753] [ 1380.904551][T19753] but task is already holding lock: [ 1380.911930][T19753] ffffffff8ea5f940 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 1380.921559][T19753] [ 1380.921559][T19753] which lock already depends on the new lock. [ 1380.921559][T19753] [ 1380.932064][T19753] [ 1380.932064][T19753] the existing dependency chain (in reverse order) is: [ 1380.941125][T19753] [ 1380.941125][T19753] -> #7 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1380.948914][T19753] __mutex_lock+0x1a3/0x1550 [ 1380.954153][T19753] pcpu_alloc_noprof+0x261/0x19c0 [ 1380.959730][T19753] bpf_prog_alloc_no_stats+0x10e/0x4f0 [ 1380.965751][T19753] bpf_prog_alloc+0x3c/0x1a0 [ 1380.970878][T19753] __get_filter+0xff/0x400 [ 1380.975937][T19753] sk_reuseport_attach_filter+0x24/0x210 [ 1380.982207][T19753] sk_setsockopt+0x1e50/0x2d60 [ 1380.987556][T19753] udp_lib_setsockopt+0xbc/0x6b0 [ 1380.993106][T19753] udpv6_setsockopt+0x67/0xb0 [ 1380.998398][T19753] do_sock_setsockopt+0x17c/0x1b0 [ 1381.004055][T19753] __x64_sys_setsockopt+0x13d/0x1b0 [ 1381.009887][T19753] do_syscall_64+0x174/0xf80 [ 1381.015032][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.021477][T19753] [ 1381.021477][T19753] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1381.029233][T19753] lock_sock_nested+0x41/0x100 [ 1381.034556][T19753] inet_shutdown+0x6a/0x390 [ 1381.039688][T19753] nbd_mark_nsock_dead+0x2e9/0x560 [ 1381.045422][T19753] sock_shutdown+0x15e/0x260 [ 1381.050557][T19753] nbd_clear_sock+0x24/0x170 [ 1381.055686][T19753] nbd_config_put+0x2dd/0x580 [ 1381.060922][T19753] nbd_genl_connect+0x19d5/0x1cf0 [ 1381.066498][T19753] genl_family_rcv_msg_doit+0x22a/0x330 [ 1381.072667][T19753] genl_rcv_msg+0x61c/0x7a0 [ 1381.077720][T19753] netlink_rcv_skb+0x232/0x4b0 [ 1381.083049][T19753] genl_rcv+0x28/0x40 [ 1381.087581][T19753] netlink_unicast+0x75c/0x8e0 [ 1381.092886][T19753] netlink_sendmsg+0x813/0xb40 [ 1381.098199][T19753] ____sys_sendmsg+0x972/0x9f0 [ 1381.103503][T19753] ___sys_sendmsg+0x2a5/0x360 [ 1381.108719][T19753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1381.114203][T19753] do_syscall_64+0x174/0xf80 [ 1381.119331][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.125770][T19753] [ 1381.125770][T19753] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1381.133456][T19753] __mutex_lock+0x1a3/0x1550 [ 1381.138592][T19753] nbd_queue_rq+0x37b/0x1100 [ 1381.143727][T19753] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1381.149898][T19753] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1381.156801][T19753] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1381.163326][T19753] blk_mq_run_hw_queue+0x348/0x4f0 [ 1381.168994][T19753] blk_mq_dispatch_list+0xd16/0xe10 [ 1381.174772][T19753] blk_mq_flush_plug_list+0x48d/0x570 [ 1381.180697][T19753] __blk_flush_plug+0x3ed/0x4d0 [ 1381.186168][T19753] __submit_bio+0x28d/0x580 [ 1381.191218][T19753] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1381.197397][T19753] block_read_full_folio+0x599/0x830 [ 1381.203252][T19753] filemap_read_folio+0x137/0x3b0 [ 1381.208838][T19753] do_read_cache_folio+0x358/0x590 [ 1381.214504][T19753] read_part_sector+0xb6/0x2b0 [ 1381.219875][T19753] adfspart_check_ICS+0xb1/0x960 [ 1381.225401][T19753] bdev_disk_changed+0x817/0x1770 [ 1381.230971][T19753] blkdev_get_whole+0x380/0x510 [ 1381.236443][T19753] bdev_open+0x31e/0xd30 [ 1381.241232][T19753] blkdev_open+0x470/0x610 [ 1381.246197][T19753] do_dentry_open+0x822/0x13a0 [ 1381.251529][T19753] vfs_open+0x3b/0x340 [ 1381.256136][T19753] path_openat+0x2e08/0x3860 [ 1381.261289][T19753] do_file_open+0x23e/0x4a0 [ 1381.266342][T19753] do_sys_openat2+0x113/0x200 [ 1381.271562][T19753] __x64_sys_openat+0x138/0x170 [ 1381.276974][T19753] do_syscall_64+0x174/0xf80 [ 1381.282109][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.288544][T19753] [ 1381.288544][T19753] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1381.295860][T19753] __mutex_lock+0x1a3/0x1550 [ 1381.300989][T19753] nbd_queue_rq+0xc6/0x1100 [ 1381.306040][T19753] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1381.312136][T19753] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1381.319021][T19753] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1381.325554][T19753] blk_mq_run_hw_queue+0x348/0x4f0 [ 1381.331212][T19753] blk_mq_dispatch_list+0xd16/0xe10 [ 1381.336959][T19753] blk_mq_flush_plug_list+0x48d/0x570 [ 1381.342868][T19753] __blk_flush_plug+0x3ed/0x4d0 [ 1381.348256][T19753] __submit_bio+0x28d/0x580 [ 1381.353312][T19753] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1381.359507][T19753] block_read_full_folio+0x599/0x830 [ 1381.365329][T19753] filemap_read_folio+0x137/0x3b0 [ 1381.370910][T19753] do_read_cache_folio+0x358/0x590 [ 1381.376564][T19753] read_part_sector+0xb6/0x2b0 [ 1381.381873][T19753] adfspart_check_ICS+0xb1/0x960 [ 1381.387356][T19753] bdev_disk_changed+0x817/0x1770 [ 1381.392918][T19753] blkdev_get_whole+0x380/0x510 [ 1381.398315][T19753] bdev_open+0x31e/0xd30 [ 1381.403101][T19753] blkdev_open+0x470/0x610 [ 1381.408060][T19753] do_dentry_open+0x822/0x13a0 [ 1381.413362][T19753] vfs_open+0x3b/0x340 [ 1381.417997][T19753] path_openat+0x2e08/0x3860 [ 1381.423138][T19753] do_file_open+0x23e/0x4a0 [ 1381.428189][T19753] do_sys_openat2+0x113/0x200 [ 1381.433416][T19753] __x64_sys_openat+0x138/0x170 [ 1381.438806][T19753] do_syscall_64+0x174/0xf80 [ 1381.443956][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.450411][T19753] [ 1381.450411][T19753] -> #3 (set->srcu){.+.+}-{0:0}: [ 1381.457572][T19753] __synchronize_srcu+0xca/0x300 [ 1381.463100][T19753] elevator_switch+0x1e8/0x7a0 [ 1381.468446][T19753] elevator_change+0x2cc/0x450 [ 1381.473769][T19753] elevator_set_default+0x36c/0x430 [ 1381.479515][T19753] blk_register_queue+0x3e9/0x4e0 [ 1381.485103][T19753] __add_disk+0x677/0xd50 [ 1381.490006][T19753] add_disk_fwnode+0xfb/0x480 [ 1381.495240][T19753] nbd_dev_add+0x72c/0xb50 [ 1381.500212][T19753] nbd_init+0x168/0x1f0 [ 1381.505020][T19753] do_one_initcall+0x250/0x870 [ 1381.510412][T19753] do_initcall_level+0x104/0x190 [ 1381.515890][T19753] do_initcalls+0x59/0xa0 [ 1381.520769][T19753] kernel_init_freeable+0x2a6/0x3e0 [ 1381.526533][T19753] kernel_init+0x1d/0x1d0 [ 1381.531423][T19753] ret_from_fork+0x514/0xb70 [ 1381.536598][T19753] ret_from_fork_asm+0x1a/0x30 [ 1381.541901][T19753] [ 1381.541901][T19753] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1381.549748][T19753] __mutex_lock+0x1a3/0x1550 [ 1381.554902][T19753] elevator_change+0x1b3/0x450 [ 1381.560205][T19753] elevator_set_none+0xb5/0x140 [ 1381.565600][T19753] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1381.571957][T19753] nbd_start_device+0x17f/0xb10 [ 1381.577356][T19753] nbd_genl_connect+0x165b/0x1cf0 [ 1381.582928][T19753] genl_family_rcv_msg_doit+0x22a/0x330 [ 1381.589024][T19753] genl_rcv_msg+0x61c/0x7a0 [ 1381.594076][T19753] netlink_rcv_skb+0x232/0x4b0 [ 1381.599392][T19753] genl_rcv+0x28/0x40 [ 1381.603940][T19753] netlink_unicast+0x75c/0x8e0 [ 1381.609251][T19753] netlink_sendmsg+0x813/0xb40 [ 1381.614659][T19753] ____sys_sendmsg+0x972/0x9f0 [ 1381.619969][T19753] ___sys_sendmsg+0x2a5/0x360 [ 1381.625187][T19753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1381.630693][T19753] do_syscall_64+0x174/0xf80 [ 1381.635836][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.642271][T19753] [ 1381.642271][T19753] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1381.650903][T19753] blk_alloc_queue+0x546/0x680 [ 1381.656209][T19753] __blk_mq_alloc_disk+0x197/0x390 [ 1381.661872][T19753] nbd_dev_add+0x499/0xb50 [ 1381.666846][T19753] nbd_init+0x168/0x1f0 [ 1381.671545][T19753] do_one_initcall+0x250/0x870 [ 1381.676853][T19753] do_initcall_level+0x104/0x190 [ 1381.682330][T19753] do_initcalls+0x59/0xa0 [ 1381.687201][T19753] kernel_init_freeable+0x2a6/0x3e0 [ 1381.692940][T19753] kernel_init+0x1d/0x1d0 [ 1381.697811][T19753] ret_from_fork+0x514/0xb70 [ 1381.702938][T19753] ret_from_fork_asm+0x1a/0x30 [ 1381.708248][T19753] [ 1381.708248][T19753] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1381.715486][T19753] __lock_acquire+0x15a5/0x2cf0 [ 1381.720923][T19753] lock_acquire+0x106/0x350 [ 1381.725979][T19753] fs_reclaim_acquire+0x71/0x100 [ 1381.731500][T19753] prepare_alloc_pages+0x152/0x650 [ 1381.737180][T19753] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1381.743540][T19753] __alloc_pages_noprof+0x10/0x100 [ 1381.749218][T19753] pcpu_populate_chunk+0x182/0xb30 [ 1381.754875][T19753] pcpu_alloc_noprof+0xcc2/0x19c0 [ 1381.760444][T19753] qdisc_alloc+0x462/0x9e0 [ 1381.765493][T19753] qdisc_create_dflt+0x8e/0x4e0 [ 1381.770895][T19753] mq_init_common+0x25c/0x440 [ 1381.776109][T19753] mq_init+0x84/0x270 [ 1381.780633][T19753] qdisc_create_dflt+0x13b/0x4e0 [ 1381.786124][T19753] dev_activate+0x1ce/0x1150 [ 1381.791259][T19753] __dev_open+0x67a/0x830 [ 1381.796220][T19753] __dev_change_flags+0x2fa/0x7e0 [ 1381.801824][T19753] netif_change_flags+0x88/0x1a0 [ 1381.807298][T19753] do_setlink+0xfa5/0x45a0 [ 1381.812259][T19753] rtnl_newlink+0x14ca/0x1bb0 [ 1381.817472][T19753] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1381.822973][T19753] netlink_rcv_skb+0x232/0x4b0 [ 1381.828286][T19753] netlink_unicast+0x75c/0x8e0 [ 1381.833595][T19753] netlink_sendmsg+0x813/0xb40 [ 1381.838907][T19753] ____sys_sendmsg+0x972/0x9f0 [ 1381.844227][T19753] ___sys_sendmsg+0x2a5/0x360 [ 1381.849444][T19753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1381.854923][T19753] do_syscall_64+0x174/0xf80 [ 1381.860052][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.866483][T19753] [ 1381.866483][T19753] other info that might help us debug this: [ 1381.866483][T19753] [ 1381.876726][T19753] Chain exists of: [ 1381.876726][T19753] fs_reclaim --> sk_lock-AF_INET6 --> pcpu_alloc_mutex [ 1381.876726][T19753] [ 1381.889528][T19753] Possible unsafe locking scenario: [ 1381.889528][T19753] [ 1381.896986][T19753] CPU0 CPU1 [ 1381.902360][T19753] ---- ---- [ 1381.907738][T19753] lock(pcpu_alloc_mutex); [ 1381.912257][T19753] lock(sk_lock-AF_INET6); [ 1381.919301][T19753] lock(pcpu_alloc_mutex); [ 1381.926394][T19753] lock(fs_reclaim); [ 1381.930402][T19753] [ 1381.930402][T19753] *** DEADLOCK *** [ 1381.930402][T19753] [ 1381.938558][T19753] 2 locks held by syz.0.18931/19753: [ 1381.943885][T19753] #0: ffffffff8fdc61c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1381.952975][T19753] #1: ffffffff8ea5f940 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 1381.963043][T19753] [ 1381.963043][T19753] stack backtrace: [ 1381.968951][T19753] CPU: 1 UID: 0 PID: 19753 Comm: syz.0.18931 Not tainted syzkaller #0 PREEMPT(full) [ 1381.968980][T19753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1381.968995][T19753] Call Trace: [ 1381.969003][T19753] [ 1381.969012][T19753] dump_stack_lvl+0xe8/0x150 [ 1381.969034][T19753] print_circular_bug+0x2e1/0x300 [ 1381.969059][T19753] check_noncircular+0x12e/0x150 [ 1381.969084][T19753] __lock_acquire+0x15a5/0x2cf0 [ 1381.969103][T19753] ? is_bpf_text_address+0x26/0x2b0 [ 1381.969125][T19753] ? __lock_acquire+0x6b5/0x2cf0 [ 1381.969143][T19753] ? kernel_text_address+0xa5/0xe0 [ 1381.969204][T19753] ? prepare_alloc_pages+0x152/0x650 [ 1381.969229][T19753] lock_acquire+0x106/0x350 [ 1381.969246][T19753] ? prepare_alloc_pages+0x152/0x650 [ 1381.969278][T19753] fs_reclaim_acquire+0x71/0x100 [ 1381.969301][T19753] ? prepare_alloc_pages+0x152/0x650 [ 1381.969326][T19753] prepare_alloc_pages+0x152/0x650 [ 1381.969354][T19753] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1381.969383][T19753] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1381.969411][T19753] ? pcpu_chunk_refresh_hint+0x80b/0x950 [ 1381.969443][T19753] __alloc_pages_noprof+0x10/0x100 [ 1381.969469][T19753] pcpu_populate_chunk+0x182/0xb30 [ 1381.969497][T19753] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1381.969566][T19753] pcpu_alloc_noprof+0xcc2/0x19c0 [ 1381.969599][T19753] qdisc_alloc+0x462/0x9e0 [ 1381.969629][T19753] qdisc_create_dflt+0x8e/0x4e0 [ 1381.969649][T19753] mq_init_common+0x25c/0x440 [ 1381.969676][T19753] mq_init+0x84/0x270 [ 1381.969697][T19753] ? __pfx_mq_init+0x10/0x10 [ 1381.969716][T19753] ? __raw_spin_lock_init+0x45/0x100 [ 1381.969741][T19753] ? qdisc_alloc+0x6ec/0x9e0 [ 1381.969762][T19753] qdisc_create_dflt+0x13b/0x4e0 [ 1381.969779][T19753] ? dev_activate+0x1a9/0x1150 [ 1381.969798][T19753] dev_activate+0x1ce/0x1150 [ 1381.969823][T19753] __dev_open+0x67a/0x830 [ 1381.969851][T19753] ? __pfx___dev_open+0x10/0x10 [ 1381.969875][T19753] ? __dev_change_flags+0x2b0/0x7e0 [ 1381.969895][T19753] ? __local_bh_enable_ip+0xd0/0x130 [ 1381.969920][T19753] __dev_change_flags+0x2fa/0x7e0 [ 1381.969941][T19753] ? __pfx___dev_change_flags+0x10/0x10 [ 1381.969960][T19753] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1381.969987][T19753] netif_change_flags+0x88/0x1a0 [ 1381.970009][T19753] do_setlink+0xfa5/0x45a0 [ 1381.970030][T19753] ? arch_stack_walk+0xfb/0x150 [ 1381.970056][T19753] ? __pfx_do_setlink+0x10/0x10 [ 1381.970076][T19753] ? __pfx_stack_trace_save+0x10/0x10 [ 1381.970103][T19753] ? unwind_next_frame+0xa6/0x2550 [ 1381.970129][T19753] ? lock_acquire+0xc1/0x350 [ 1381.970151][T19753] ? __mutex_trylock_common+0x158/0x260 [ 1381.970175][T19753] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1381.970198][T19753] ? rcu_is_watching+0x15/0xb0 [ 1381.970218][T19753] ? trace_contention_end+0x3d/0x140 [ 1381.970241][T19753] ? __mutex_lock+0x319/0x1550 [ 1381.970259][T19753] ? __pfx___nla_validate_parse+0x10/0x10 [ 1381.970340][T19753] ? rtnl_newlink+0x883/0x1bb0 [ 1381.970358][T19753] ? __pfx___mutex_lock+0x10/0x10 [ 1381.970381][T19753] ? ns_capable+0x89/0xe0 [ 1381.970400][T19753] rtnl_newlink+0x14ca/0x1bb0 [ 1381.970424][T19753] ? __pfx_rtnl_newlink+0x10/0x10 [ 1381.970439][T19753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.970474][T19753] ? kasan_quarantine_put+0xbb/0x1f0 [ 1381.970498][T19753] ? lockdep_hardirqs_on+0x7a/0x110 [ 1381.970517][T19753] ? nlmon_xmit+0xb0/0x100 [ 1381.970580][T19753] ? kmem_cache_free+0x182/0x650 [ 1381.970610][T19753] ? __lock_acquire+0x6b5/0x2cf0 [ 1381.970636][T19753] ? __dev_queue_xmit+0x2b6/0x3950 [ 1381.970659][T19753] ? __local_bh_enable_ip+0xd0/0x130 [ 1381.970676][T19753] ? lockdep_hardirqs_on+0x7a/0x110 [ 1381.970692][T19753] ? __dev_queue_xmit+0x2b6/0x3950 [ 1381.970713][T19753] ? __local_bh_enable_ip+0xd0/0x130 [ 1381.970728][T19753] ? __dev_queue_xmit+0x2b6/0x3950 [ 1381.970753][T19753] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1381.970777][T19753] ? __pfx_rtnl_newlink+0x10/0x10 [ 1381.970794][T19753] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1381.970812][T19753] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1381.970829][T19753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1381.970845][T19753] ? ref_tracker_free+0x693/0x840 [ 1381.970900][T19753] ? __pfx_ref_tracker_free+0x10/0x10 [ 1381.970924][T19753] netlink_rcv_skb+0x232/0x4b0 [ 1381.970945][T19753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1381.970963][T19753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1381.970989][T19753] ? netlink_deliver_tap+0x2e/0x1b0 [ 1381.971008][T19753] ? netlink_deliver_tap+0x2e/0x1b0 [ 1381.971031][T19753] netlink_unicast+0x75c/0x8e0 [ 1381.971054][T19753] netlink_sendmsg+0x813/0xb40 [ 1381.971079][T19753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1381.971101][T19753] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1381.971129][T19753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1381.971154][T19753] ____sys_sendmsg+0x972/0x9f0 [ 1381.971175][T19753] ? __might_fault+0xaf/0x130 [ 1381.971200][T19753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1381.971223][T19753] ? import_iovec+0x73/0xa0 [ 1381.971290][T19753] ___sys_sendmsg+0x2a5/0x360 [ 1381.971309][T19753] ? __lock_acquire+0x6b5/0x2cf0 [ 1381.971328][T19753] ? __pfx____sys_sendmsg+0x10/0x10 [ 1381.971351][T19753] ? futex_wait+0x2a2/0x390 [ 1381.971394][T19753] ? __fget_files+0x2a/0x420 [ 1381.971414][T19753] ? __fget_files+0x3a0/0x420 [ 1381.971439][T19753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1381.971460][T19753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1381.971484][T19753] ? rcu_is_watching+0x15/0xb0 [ 1381.971508][T19753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.971525][T19753] do_syscall_64+0x174/0xf80 [ 1381.971543][T19753] ? trace_irq_disable+0x3b/0x140 [ 1381.971568][T19753] ? clear_bhb_loop+0x40/0x90 [ 1381.971587][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.971605][T19753] RIP: 0033:0x7ff56919ce59 [ 1381.971628][T19753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1381.971644][T19753] RSP: 002b:00007ff5673f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1381.971663][T19753] RAX: ffffffffffffffda RBX: 00007ff569415fa0 RCX: 00007ff56919ce59 [ 1381.971676][T19753] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 1381.971687][T19753] RBP: 00007ff569232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1381.971698][T19753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1381.971708][T19753] R13: 00007ff569416038 R14: 00007ff569415fa0 R15: 00007fff1e302538 [ 1381.971729][T19753] [ 1382.130303][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.138995][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1382.140505][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.611631][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.619858][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.818628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.181312][T19753] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1383.218541][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1383.226336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.269400][T19753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1383.282371][T19753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1383.293524][T19753] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1383.306303][T19753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1383.315620][T19753] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1383.335335][T19753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1383.344235][T19753] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1383.360155][T19753] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1383.369839][T19753] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1383.378601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.392483][T19753] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1383.410045][T19753] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1383.419813][T19753] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1383.428329][T19753] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1383.440392][T19753] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1383.448335][T19753] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1383.457298][T19753] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1383.467650][T19753] tipc: Resetting bearer [ 1383.474691][T19753] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1383.483292][T19753] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1383.494867][T19753] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1383.508263][T19753] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1383.518836][T19753] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1383.531763][T19753] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1383.544578][T19753] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1383.556853][T19753] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1383.567111][T19753] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1383.575760][T19753] bond24: entered promiscuous mode [ 1383.581461][T19753] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1383.591756][T19753] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1383.600929][T19753] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1383.609683][T19753] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1383.619741][T19753] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1383.647070][T19753] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1383.660972][T19753] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1383.674849][T19753] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1383.686161][T19753] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1383.695021][T19753] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1383.705166][T19753] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1383.713835][T15413] bridge15: entered promiscuous mode [ 1383.719715][ T3353] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1383.727943][ T3353] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 1383.736745][ T3353] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.745209][ T3353] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1383.754088][ T3353] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 1383.762723][ T3353] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.780721][ T57] bond20: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 1383.790657][ T57] bond20: (slave veth25): link status definitely up, 10000 Mbps full duplex [ 1383.799655][ T57] bond20: (slave veth23): making interface the new active one [ 1383.809076][ T57] bond20: active interface up! [ 1383.861832][T19783] bond29: left promiscuous mode [ 1383.866743][T19783] bridge16: left promiscuous mode [ 1383.873575][T19783] ip6gre8: left promiscuous mode [ 1383.880109][T19783] ip6gre8: left allmulticast mode [ 1383.898582][ T3353] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1383.918541][ T3353] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 1383.926825][ T3353] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.937120][ T3353] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1383.946396][ T3353] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1383.955167][ T3353] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.338491][ C1] net_ratelimit: 2 callbacks suppressed [ 1386.338507][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1387.378585][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1387.939669][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.947874][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.956071][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.964232][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.418498][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1389.458730][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1390.499596][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available