last executing test programs: 6.658793286s ago: executing program 2 (id=5666): r0 = socket$inet(0x2, 0x2, 0x8000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x42214396}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, &(0x7f00000001c0)=0x4) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000280)={0x67, @broadcast, 0x4e22, 0x0, 'dh\x00', 0x1, 0x10, 0x10}, 0x2c) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f00000002c0)={r4}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008850) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) write$tun(r7, &(0x7f0000000480)={@val={0x0, 0xf9}, @val={0x1, 0x1, 0x2, 0x7, 0x6771, 0x2f49}, @arp=@generic={0x102, 0x3de, 0x6, 0xb, 0x9, @random="d128647baf18", "e20796f2ec7f5599be6b23", @empty, "3184ccf3b6c2e89dd7fcb1e92f188e"}}, 0x3c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000600)={0x1, 'veth1_to_bond\x00', {}, 0x2}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r4) (async) bind$l2tp(r0, &(0x7f0000000680)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001d00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000700)={0x15c0, 0x1a, 0x2, 0x70bd29, 0x25dfdbfb, {0x17}, [@generic="22bd828a60102603fe3371d2dce784deed9e54a600a46af941ecbd76535030aa7fb6e67709c7f72f52909ab15703df", @typed={0x8, 0x62, 0x0, 0x0, @fd=r3}, @generic="32c19a0bac8e7fd660fe471c1d2470750425054f83e258bf1d911d149c43690b5a43ab381d75e981bc256abe66c81567735e3577ce567fffd3c445b5f288ab200c7e13f73cf6", @nested={0x291, 0xd7, 0x0, 0x1, [@nested={0x4, 0xf5}, @typed={0x9, 0xa6, 0x0, 0x0, @str='TIPC\x00'}, @generic="57c4a17e017d897d3aba82524270fef3ce5a7f5c2f4adb214fc469ac5fff3209ad93b237bb0cabb85a580d4f714996badfd839cbff6ef88d02305f4f6c164019f327936fba5639c1d842b751f4532e555764bba878644541dbb288408afa1b9c0a83a542b330cb1c0d41d9c2824400f43b865e4b1497bb34be97e079ac83c02fbb620961399c728ae18ae490c6200206988bcbb54a12fb1806b8e7438f0136f576016c2fb56f29b102a6e62760c059429e69a1b46867", @generic="24280f001b9902c9c5677ce88044d9b340f25e7429b1b23e700f1fa6e7e5fb854c2a662618e608097cd4e83ccebd420b863105ad4c0937396cd14488e8b6c4a1a5a3e84a9ed0220a3bf5a0fb25bd5379e09b90640c8b3283b693d9407e4ce25482e967fa32911de19fc2e22fff74607adcb41c822c475e58fe6a9eaacfd00b33480d3dc4a632148f049a8b4663a30b1397ceef949e208d731aaff2e2dd91ac5b90", @nested={0x4, 0x65}, @nested={0x4, 0x7f}, @generic="8a68ce84654b9ff36ae323f45d58338f05097a2fd0ddde590a6b51e801dc9d5fb58f9c465f57ee1e6ddf326b28b32c0590f4af6d412aa16f36daa5c51a61471b7affa0a0874c1035e093847b07c1feac97aa8d71debbff7c4ba4dff6782460faf917f8169ad847b9f594ec90cb44d09f4b37dd0eb2138a856300e9e0685e19c9a4878176bba51e4053a34f291dc10d5c3fbb5426e0a7d456beb93f2cb3a92a66b574", @typed={0x78, 0xfd, 0x0, 0x0, @binary="fe90b82e622fc07e20a69937dbefa5539d9cf497ffd8daadcb766150d9708715ff72130379cbfd076ee6f150f4c3664357ce263f58c6759d6fcf0ef939b1815578511598b0706b5acc67dee369c02b788feaada64b30b5fb220a886ec675eb05b69f54c124db2f1ea5f701ba546c8b17380bc8d1"}, @nested={0x4, 0x1c}]}, @nested={0x116b, 0xc3, 0x0, 0x1, [@generic="c1386d14b2820553f77765a0e1b66bcac1bcb3d06ca459510fa315c87cfbfc840be2bf242d127a975dc55063b7a8e0c3035b51948924bad19d855b0c93d2dd5c6b0081f00acb1a436da790ea175ed51b36d33cf0a06ca7c4267a030f835f5f76fdf423bcd52c49f97eceba5bc5b673f0ce315d935abe5abb6b42132c0a2cb36ea0d7d54a15bb036cd0005df4d6ad5c19", @generic="ce961cb951a866fd2579be4e6b44578b6181c1a91389da9a9294894e93c4c63b7d83c917506b9f5d463cb4d82fe5eed92ebd4dae4e5045dd9c5249592fad8fd64aa51576ffbea5f1f2bc495eb409f26cf3ab3b51ed053e7efa9e9fa73da653176c8c337277dca7ee7788b58dea74e50726852c7cc05727ec594729ac56aca61247e7f8a2c8ba6d3061a9ed58f6329041191c0c97c33532977321af8a028e851190020b6c8403afad513f54079653a0a1b0ec774327b1d0f084c0c0d86d511a6ec31bab3b501e136caa4c5e7a4f1ad674c43cb0", @generic="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", @nested={0x4, 0x12c}]}, @generic="7a58c3b8dea9cd182a7c3c319d4ed34d273f11c5798d0090037c8a54578f792ed062bbe37289f6647f8c4a9e5d743777a01b00b5410428b01487ea121464afe2814b5a86a59224da94a91e945ce6e5079ac8e1ec6481ae1724bdb6f5544560311ee94d7a49b50d2f9c13e8642d6d18a4f4b27cdc50127576a534a1646cd53e21e7cab48649b2202f55", @typed={0x8, 0xe5, 0x0, 0x0, @ipv4=@multicast1}, @generic="3d1fc23f13d2dded00b6b1f776514df8849713b991c52a9443ed93ee16349f927d34c17e1b23c4f1b220c40d176adca22c47c5e27cda7d53a7f0608ae6284c530b13b8369cb5f0ebd8812aead3a64c692d422f72fd9f73be32560774ea6884acd1d74d5f25822fdd85d5c50cac28dd120eb6b9d18c974a30ccbf3d41caa24c7c7de676b1412785de2c1625b87f2e2734be6a576272c39a91ec2565"]}, 0x15c0}, 0x1, 0x0, 0x0, 0x10}, 0x20044810) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000001d80)={{@_ha_fsid={[0x1]}, {0x8, 0x8001, 0x80000000, 0x9c77}}, {{[0x8, 0x9, 0x10, 0x1]}, 0x0, 0x2, 0x2, 0x0, &(0x7f0000001d40)=[{{@align=0xeb, {0x7, 0x2, 0x8, 0x80000001}}, 0x6, 0x0, ':$\\-\x00'}]}}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000002580)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002540)={&(0x7f0000001e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x194, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x180, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x30, 0x1, 'system_u:object_r:iptables_initrc_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x23, 0x1, 'system_u:object_r:su_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x28, 0x1, 'system_u:object_r:modules_conf_t:s0\x00'}, @NFTA_SECMARK_CTX={0x27, 0x1, 'system_u:object_r:null_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x30, 0x1, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x26, 0x1, 'system_u:object_r:kvm_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x24, 0x1, 'system_u:object_r:etc_mail_t:s0\x00'}, @NFTA_SECMARK_CTX={0x2f, 0x1, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x29, 0x1, 'system_u:object_r:crond_var_run_t:s0\x00'}]}}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x550, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x58, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x9a}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x6}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x71}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_USERDATA={0x92, 0x7, 0x1, 0x0, "dc963a2bafd6c11813b8d1ab03e781b9ea52f52f6a1ce54abd14509ec8cebdb0a058b1a6445f18ac5a736084214dc276ecbe71bbdda8586d3fca05d00bcd2291f262f26feb5044d8bb6b49f9ca8d5666bd0cd33eafb9fa0a9bb8be7e106b1e54c52e24bf5bd50ee32b8e4a49d7422d2615fcec71ec216c1fd42a5c17ce60ea4185a9b1d6879f074b37d1f0fbe26d"}, @NFTA_RULE_EXPRESSIONS={0x3d4, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x32}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffff8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xa0ed}]}}}, {0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}]}}}, {0x80, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x645}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffffffff99d4}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xf}, @NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xcdb}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x244, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x234, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xad, 0x3, "bf34ba9a353d8c0656785407b12e2edf4436af310729a1f3fee60d55a5c5536e5291104fe3362e6e9287b11cda9588d6d94830ddbfca509e2d08b7104b0a57932ac9c0b20a69545066b90284287baf729a782897689e133526e48905be66688daf8e679bf3f9f3fcc5dda5669c9ab620bc8f3e9ee4186b65e980cd7ad4ce31ddb63484aa787fa3ed45051f51ceea49a54879367f681a324bdcfcf83179a08ef73ad5057569f83a085f"}, @NFTA_MATCH_NAME={0xb, 0x1, 'recent\x00'}, @NFTA_MATCH_INFO={0x49, 0x3, "4ac2540a9a559a0360d5bf1b4725023e0b4728fa985c0226d6e75448f119474a9dc3308c906ae0578d2210d9e824ab87b0747d4edfb21adc4004aa321432bffec6e3764c20"}, @NFTA_MATCH_INFO={0xfc, 0x3, "a3c36cdbd18bbe945043a2753b91048a753d61e260bdd85311dfc3c6e8b2477a9ad6a07624135bfc38fdb4999f9ca981b54193d98613af4d2083ebacb0a53ee2efa07acb4844a58a5aeb5d2db77c86e05cd6c990a6238fb5f0d45e67d06c767c4693c14b730ccd838cf3b01cc676723bd0ec3efe04e323aea53a8c0c9822fd798c1e89dfa4477c357efddfbfd93423c9a17f0fbe22ebbc6f3a53570f23243be02bfc187fbee7d10c14a9b5a506a4177cf8a8604f3d7b86e7e57854aee1a913ef18399f8f1b02d9eabcc45c58bd30560a39b59fa75377dca8e35dd5da4fa6ad721dde17d0ba388a877f2a4e84fcc4379a6ff2a01ce8e4107c"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x8000}]}}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x72c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000025c0)={r1, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x8, 0x40, 0x0, 0x56f9, 0xf2, 0x5, 0x8}, &(0x7f0000002680)=0x9c) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002700), 0xffffffffffffffff) (rerun: 32) sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x64, r11, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x48}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10044000}, 0x4004041) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002880), r10) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000002b80)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1a040008}, 0xc, &(0x7f0000002b40)={&(0x7f00000028c0)={0x250, r12, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVKEY={0x1f8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x51}]}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x78}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555550301}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8c}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 6.10223958s ago: executing program 2 (id=5668): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4002}, 0x2002}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000280)) openat$cgroup_int(r2, &(0x7f0000000400)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r3, @ANYRES64=r3], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) r4 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x2, 0x800041, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x40800}}, 0x20}, 0x1, 0x0, 0x0, 0x20048050}, 0x4040090) socket$nl_generic(0x10, 0x3, 0x10) 5.708593986s ago: executing program 2 (id=5683): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80000000000009, 0xfeb6}, {0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x184, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3505}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x3}, {{@in6=@dev, 0x0, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x2, 0x1, 0x0, 0x85}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x5a8, 0x0, 0x4}, {{@in6=@private2, 0x0, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x4, 0x2}]}]}, 0x23c}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x200040cc) 5.490873064s ago: executing program 2 (id=5676): socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @local, 0x2}}, 0xfc8e}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r1, 0x6}, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r1, 0x6}, &(0x7f0000000300)=0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xfffffffe, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'wg1\x00'}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'wg1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'pimreg1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25df9bfb, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}}, 0x34}}, 0x15c89c41972e2243) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0xd, r9, 0x1, 0xfe, 0x6, @local}, 0x14) (async) sendto$packet(r2, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0xd, r9, 0x1, 0xfe, 0x6, @local}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "754ba8e004b91b20", "80b20950c204106683f050257838f00b", "4043d7aa", "2f9d70f2c78bd3dd"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "754ba8e004b91b20", "80b20950c204106683f050257838f00b", "4043d7aa", "2f9d70f2c78bd3dd"}, 0x28) recvfrom(r10, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r10, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007", 0x4}, {0x0}, {0x0}, {0x0}], 0x4) (async) writev(r10, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007", 0x4}, {0x0}, {0x0}, {0x0}], 0x4) 4.190918992s ago: executing program 2 (id=5690): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000080)=0xffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000180)=0xfff, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x13, 0x4, 0x1000, 0x90, 0x2140d, r3, 0x7b8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x40000004}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x18, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@generic={0x6, 0xa, 0xf, 0xb1a6, 0x3}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x401}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc}, @generic={0x1, 0xc, 0x7, 0x9, 0x2}, @generic={0x6, 0x3, 0x3, 0x0, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6d4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.865678208s ago: executing program 2 (id=5694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200000d0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff0a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x50) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000a5e6257c49108eda242565d766824e52c69ab546de2f87e0616b26be3f5d0f3d0bbf4f26142ece9afd245af5062e5265e6f9e2f0ac4a67b12ee7151378181fe2520b76f486f6c99cd82ba6956c2ebeedc26047347a225f5fb90c438c56d6e0a1c91f790a85348455555901d08e15227f9dfe8a310c491981a3d93d3c6bd9e8c79eead8c470b5a7fa8e6a3e510c24392b5a892189805d4a", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) write$tun(r4, &(0x7f0000000980)={@val={0x0, 0x88f7}, @val={0x0, 0x0, 0x2, 0x0, 0xf1f3, 0x8c}, @llc={@snap={0xab, 0xaa, "91", "42bfb3", 0x60}}}, 0x16) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r9, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0xfffffffc, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x2c0e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MTU={0x8, 0x4, 0x1bf}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.945063127s ago: executing program 3 (id=5697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async, rerun: 32) syz_emit_ethernet(0x3a, &(0x7f0000000640)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0xca, 0x0, 0x1000, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) (rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.862584426s ago: executing program 4 (id=5698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.798973742s ago: executing program 0 (id=5699): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000200000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cf00000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'wg1\x00', {0x2}, 0x108}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x1, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge_slave_0\x00', {0x4}, 0xf1ee}) 2.720611355s ago: executing program 1 (id=5700): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xd) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000004000010000001c000180060001000200000008000300ac1414b60800060003"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x2000}}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 2.653232685s ago: executing program 4 (id=5701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) 2.525959124s ago: executing program 3 (id=5702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x19, 0x10, 0x1, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x0, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA, @IFLA_GRE_OFLAGS={0x0, 0x3, 0x7fff}]}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x1) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x2c}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @loopback}, &(0x7f00000005c0)=0x10, 0x80000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x0, 0x780, 0x7, 0x5, {{0x6, 0x4, 0x2, 0x21, 0x18, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast2, @broadcast, {[@generic={0x94, 0x2}, @end]}}}}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000040)='\x00', 0x400, &(0x7f00000000c0)={@_ha_fsid={[0x7f, 0x5]}, {0x3, 0x4, 0x8e11, 0x5}}, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x5}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c010000100001000000000000000000ac1e0101000000000000000000000000fc020000000000c6e7aeb0c0a8a9b80f89630000000000000000b3c5d0cfb281337742117a14f2894908dd8e9d5b62bbc459d213a37d40f12bf189ed07a38729c3bf51c1e46e2844b4c99c16639d1ea93f4b32fdeb35f418c6b9b170ccae70df9a6f831a36a0329ca15b59b8de53de629f9ab7b0f2665c24890d9f0e9869d7be48f4c0d467b9f45fca446156caadcf25302b87cfb3a0447927fdc118cf508447607954a5eb13ca141d84a0d6e80bac2b1028df7aab544700000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.498430477s ago: executing program 1 (id=5703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x24, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x40}, 0x28) write(0xca, &(0x7f0000000040)="0414702a04004da270", 0x9) 2.259641213s ago: executing program 0 (id=5704): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) writev(r0, &(0x7f0000002540)=[{&(0x7f0000000040)="9639bfbe3e69adadb99523fda2562b0963f364eebb032290c98fd2d1d241da3d6d827c5e77cd7af0d054acb3dfecaaa39adb832d1df857ac0517a3f91efcbe323c7d7e93598b5d27e0", 0x49}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="50f2350b52631d2b3bb5f6e1846860a6969ce821b11ae841332b9bf60158adcac33d6810676494e936a9ea9b469a01d88b2475f57c768e71f167c4ded2686abe8d45f1cf12ae04a34e86bc049cf432e275fff525dfdfceca9d83cce78c9d83a95a1ffe287cdc8a963a4449ccded7099f7b278bab7f4adb6e0b1fc5a6cc393f2081b021aec21e333634452e74d16cc515a2c57797db6d176d444424d016822552ad7c5eb669872c5fcc35ae1fe11827ef7fa6ce625ca5b1a8dd6478ff157bd22cb4ae39b5506d83c0ed25a2d7aa8a3e", 0xcf}, {&(0x7f0000001540)="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", 0x1000}], 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0x91c}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="0095d486dd4c6186cdfa32bd04b93bda7c05f3fa4a6ce2fff8bfa5f21511afb60ec3e8785d2fada459b86a3c9fd62c0151e74ec6e1780241b2100a1e97a03fd26f217d69a5742487f611dc8b85ab0bcf1c650fa0d9749dc607d28d480026c76cba461abc219bb453a9ca519b937bc39e25936d364c5f01c6ddde67c1f6470c7830c7b46c462fb6b0f02880b681be1b29005a397a4bc993a90570452e3d4027aae355566158484e369e25bb36bd206796"], 0xc4}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, 0xffffffffffffffff, 0xc, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xd600, 0x0, 0x0, 0xffffffffffffffff}}, 0x40) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) 2.198954667s ago: executing program 4 (id=5705): r0 = socket(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) 2.19760287s ago: executing program 1 (id=5706): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000003c0)) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000003c0)) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x6, 0x1}, {0xc, 0x1ffef}, {0xffe0, 0xfff1}}, [{0x8, 0xb, 0xdad}, {0x8, 0xb, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x9, 0x1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0x0, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r9, {0x9, 0x6}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_basic={{0x6}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_VAR="85aa91", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="588157181a96474153", @TCF_META_TYPE_VAR="16942a495915"]}, @TCA_EM_META_HDR={0x0, 0x1, {{0x9, 0x3, 0x2}, {0x1, 0x1, 0x1}}}, @TCA_EM_META_HDR={0x0, 0x1, {{0x80, 0x7, 0x1}, {0xb, 0xa2, 0x2}}}, @TCA_EM_META_HDR={0x0, 0x1, {{0x7, 0x1, 0x1}, {0xe, 0xef, 0x1}}}, @TCA_EM_META_HDR={0x0, 0x1, {{0x101, 0x3, 0x2}, {0x200, 0x80}}}, @TCA_EM_META_HDR={0x0, 0x1, {{0x5, 0xff, 0x1}, {0x3bd, 0x0, 0x2}}}, @TCA_EM_META_HDR={0x0, 0x1, {{0x0, 0x3}, {0x1, 0xc}}}]}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40400d4) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000240), 0x4) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x401, 0x100bf28, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) unshare(0x22020400) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="372c9b737177cdf414fe8f55d913fb79b31f8832cfc37640954ae18fb5f194a422d94398020927192a2efbb712e248b84f8a0ca7d37f7b160629d4b4b825dab928bfc5acc6278ef3f381", @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="372c9b737177cdf414fe8f55d913fb79b31f8832cfc37640954ae18fb5f194a422d94398020927192a2efbb712e248b84f8a0ca7d37f7b160629d4b4b825dab928bfc5acc6278ef3f381", @ANYRES64=0x0], 0x20) sendto$inet6(r7, 0x0, 0x0, 0x8c0, 0x0, 0x0) (async) sendto$inet6(r7, 0x0, 0x0, 0x8c0, 0x0, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)=0xfffffffd) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r10, 0x11, 0x2, &(0x7f0000001100)=""/4096, &(0x7f0000002100)=0x1000) socket$nl_route(0x10, 0x3, 0x0) 2.196593311s ago: executing program 3 (id=5707): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4010000100001000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000000074e220000000000a53420fdb0d052d8082f460000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000500640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x32}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000300)=@ethtool_cmd={0x25, 0x9, 0x7, 0x6, 0x2, 0x43, 0x8, 0x4, 0x2, 0xd, 0xb, 0x8, 0x400, 0x9, 0x3, 0x9, [0x2ac197ca, 0x100]}}) r8 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x10, 0xffffffffffffffff, 0xd12cf000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000022c0)={0x0, 0x3}, 0x8) accept$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) r10 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x1}, 0x10) write(r6, &(0x7f0000000240)="7c2e95dcb303ca4fba04be6596484bd6a8ea5906e62e94d621c15d2d7550b70225923b54a05f8e6dd1f86642a2737e8ef19369c3206cd2b8fbd1c432c60530c5208597e3fb7dcd38ba180923f6d8fba6b389687816f404cc8204d804e258782e1af49d4b339ed85d30be8f9fa64507f085e102e7d176bc22863c", 0x7a) 2.155508085s ago: executing program 0 (id=5708): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r0 = socket(0x8, 0x3, 0x3) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x42000004, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0x179a) bind(r1, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0xa) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xd4, 0x0, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@migrate={0xe8, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@mcast2, @in6=@mcast1, 0xfffe, 0x0, 0x2, 0x0, 0x2, 0xe0, 0x80}, 0x6e6bb8}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e20, @in6=@private2}}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@private=0x2, 0x0, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) getsockname(r3, &(0x7f0000000240)=@x25, &(0x7f00000002c0)=0x80) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000003c0)={0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000680)={r5, @in6={{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x7}}, 0x4, 0xb, 0x5, 0x6f2, 0x10001}, &(0x7f0000000780)=0x98) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) listen(r1, 0x1) 1.990646978s ago: executing program 4 (id=5709): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x340, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}]}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0xca, 0x3, "080f2379296faaa7ad502d0547da0c7e57cfce9b7675aeabdc4dcde88f15c4d7cd43f071cdf78255c7d38007abf34b71694160c0b77c43a0ae726913c30eea4902ba3950e259978ca5151382d354082ff8661fa2ff581c6b33778af40fda62bb2d951dc6b84c215de19ab9dc93dcbdd9b0b4e7eb37ba2dada987d16842383cfc52dd53bcb869dc64dd1bedf0b44e78c84a7c950f22131da9af3557488f412ec8e994f6cdd54010a45287edbfbda0308e39dff76aaded32890ff2e600fe6db4005653cc16fd59"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "96aa6733635303e263e405829796734024fee8d16e145f38f2ce"}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbfc4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7f1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c5d000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdfbe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x676}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x10}, 0x14) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x50440020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x60000004}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.770290999s ago: executing program 1 (id=5710): r0 = socket(0xb, 0x2, 0x80000001) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x1, 0x4) (async) unshare(0x2c020400) (async) syz_emit_ethernet(0x86, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x78, 0x66, 0x0, 0x2, 0x1, 0x0, @private=0xa010102, @remote}, @time_exceeded={0xb, 0x3, 0x0, 0x0, 0x9, 0x0, {0x17, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x40, 0x2f, 0x4, @multicast1, @loopback, {[@timestamp={0x44, 0x10, 0xca, 0x0, 0xf, [0x800088be, 0x401, 0x101]}, @rr={0x7, 0x13, 0x45, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x1, 0x8, "ecaf15aac48c"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x48, 0x0, 0x8, [0x0, 0x338c, 0x1]}]}}}}}}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000009000000000000f9"], 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000f0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e1d, @loopback}, 0x10) (async) getsockname(r0, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) 1.763213112s ago: executing program 4 (id=5711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000480)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xc, 'geneve0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f00000005c0)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000d00)="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", 0x107}, {&(0x7f0000002f80)="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", 0xbe7}, {&(0x7f00000009c0)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b356ca23162493370e9055e9320279b93aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a000000809658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f01587e997359498ac5b57e8b86fbf5327519ebc68cb81762ebdada6dca6eaee8ac113c10eead6548244be72d5e261f0084329890a01da108431ece9146f6a5f6214c44e05a9750f872bb69b2ac0386c26b78819c32bec4043042e0c8cfc589a077c5e3b062fd0f5a277056779ea2155662ff91e332e587bbd2e7c25d54fbd18052034f68a83ceeb4f3e6f0182a3f88aabf84ddf4428f9a569a161da8d5c74408a24bef6a524953a65b12d16ae5f06c359c5bddc0a9e263c1ffc", 0x173}], 0x5}}], 0x1, 0x8800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x4, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 1.553908871s ago: executing program 3 (id=5712): r0 = socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x24, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x8004, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xeb, 0x2, 0x100, 0x0, 0x0, {[@generic={0x13, 0x10, "9753d19222b83ecfdb6ebbe04c11"}]}}}}}}}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x7}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x4c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)={0x1c, 0x56, 0x601, 0x2, 0x25dfdbfc, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @nested={0x4, 0x2c}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.548405966s ago: executing program 4 (id=5713): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000580)={0xffffffffffffffff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYRES8=r0], 0x0, 0xfffffffffffffe7c}, 0x28) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000001c0), 0x37) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000580)=0x5, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="d80100001000010000000000feffffffe0000002000000000000000000000000fe80000000000000000000000000005200000000000000000200000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c00000000000000000000000000ffff7f000001000000000000000000000000000000000000000000000000fefffffffffffffffdfffffffffffffffcffffffffffffff000000000000000000000000000000000000000000000000feffff3f000000000000000000000000000000000000000000000000000000000000000000000000000000000a00030084000000000000001c00170000000000ffffffff00000000ffffffff29bd70000f000000c10001"], 0x1d8}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="2f0019003400000004000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000640)={0x0, @broadcast, @empty}, &(0x7f0000000680)=0xc) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)=@updpolicy={0xc0, 0x19, 0x200, 0x70bd2b, 0x25dfdbfd, {{@in=@broadcast, @in=@loopback, 0x4e24, 0x72, 0x4e24, 0x0, 0xa, 0xa0, 0x20, 0x33, r8, r10}, {0xfffffffffffffffc, 0x40, 0x0, 0x5, 0x9, 0x1, 0x1000, 0x8001}, {0x6, 0x5, 0x859}, 0x7fffffff, 0x6e6bb2, 0x2, 0x1, 0x2, 0x3}, [@sa_dir={0x5, 0x21, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040801}, 0x8804) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x40, 0xd, {@empty, {[0x0, 0xff]}}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xff, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r11, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000aa000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.336830389s ago: executing program 0 (id=5714): r0 = socket(0xf, 0x3, 0xfffffffd) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x50) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200000800040001000000", 0x24) 1.238884562s ago: executing program 0 (id=5715): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f00000004c0)={0x0, @in={{0x2, 0x1, @local}}, 0x5, 0x400}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001002abd700010000000e00000020000000000000000000000006401010200000000000000000000000000000000000000000a00400006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000500000000000000000000000000715a201300000000000008000000000000000000000000000000fbffffffffffffff010000000000000100000000000080000000000000000000000001000000000000ab6500b86b6e000001000100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b4000000140001000000000001000080e00000020000000000000000000000006401010200000000000000000000000000000000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000000000"], 0xb4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x2, 0x8, 0x5, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x7fffffff, 0x87}}) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@allocspi={0x110, 0x16, 0x1, 0x70bd2d, 0x25dfdbff, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x1ff, 0x4e20, 0x2, 0x2, 0xa0, 0xa0, 0x2, r3, 0xee00}, {@in6=@empty, 0x4d6, 0x33}, @in=@private=0xa010102, {0x1ff, 0x2, 0x3, 0xd985, 0x9, 0xa, 0x9, 0x5e74}, {0x1, 0x1, 0x6, 0xfffffffffffff751}, {0x5, 0xe3b9, 0x9}, 0x70bd28, 0x3505, 0xa, 0x2, 0x96, 0x11}, 0x10001, 0x101}, [@iptfs_reorder_window={0x6}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd25, 0x400}}]}, 0x110}, 0x1, 0x0, 0x0, 0x50}, 0x48000) 1.202077218s ago: executing program 1 (id=5716): unshare(0x24020400) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2ef6a4d94344d9715963f3e1df1904070ea6189bb1aa7b99beb64c3f21ba6c148f", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x200003, @mcast1, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r5, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket(0x2b, 0x80801, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$inet6_tcp_int(r7, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) recvmsg$can_j1939(r7, &(0x7f0000000680)={&(0x7f0000000340)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000000540)=""/168, 0xa8}], 0x3, &(0x7f0000000640)=""/9, 0x9}, 0x0) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f0000000000)='lapb0\x00'/40) 1.04517564s ago: executing program 0 (id=5717): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x80) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_emit_ethernet(0x72, &(0x7f0000000080)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1={0xfc, 0x1, '\x00', 0x20}, @mcast1={0xff, 0x0, '\x00', 0x0}, [@routing={0x0, 0x0, 0x3, 0x6}]}}}}}}}, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000001480)=0x2, 0x12) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 691.904557ms ago: executing program 3 (id=5719): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0xa0) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) (async, rerun: 64) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'}) (rerun: 64) 404.736705ms ago: executing program 3 (id=5720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'erspan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'xfrm0\x00', 0x400}) r1 = socket(0x2b, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x4020000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9800000052000100ffffffff04000000020000008200a08025e6a1b3a185a4e9578f331924c26966489fd348f638fa2ff715659111e834723037c30a63133674519d1a16072f686380a3a34e13b34f4680a07ae0f770a76483107598c7737336903960a695a4dba8ec1ee1fdbc546cf809351bceb147af6bd70ec6b3e69cae1600e12c0181970f20c74ea7c3e4f32a9bee2a869c458f0000"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x5, 0x8}, 0xffffffcc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close(r2) socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@delqdisc={0x228, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xe}, {0xf, 0x9}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0xfffffffd, 0x4}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe4, 0x6, 0x490, 0x3, 0x0, 0x9, 0x4, 0x2}}, {0x8, 0x2, [0x1, 0x8688]}}, {{0x1c, 0x1, {0x7, 0x1, 0x7, 0x8000, 0x2, 0x0, 0xb7d0, 0xb}}, {0x1a, 0x2, [0x3, 0x8, 0x8, 0x10, 0x9, 0x0, 0x8001, 0x8, 0x2, 0x4fac, 0x7]}}, {{0x1c, 0x1, {0x8, 0xec, 0x401, 0x6, 0x2, 0x0, 0x2, 0x5}}, {0xe, 0x2, [0x401, 0x3, 0x2, 0x4, 0xd18e]}}, {{0x1c, 0x1, {0xe, 0x1, 0x40, 0x80000001, 0x0, 0x5, 0xfffffffe}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x6, 0x8, 0xfffffffe, 0x0, 0x2, 0x4, 0x6}}, {0x10, 0x2, [0x9a2, 0x3, 0x1, 0x1, 0x100, 0x5]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x29, 0x8, 0x8, 0x7, 0x0, 0x6, 0xc13, 0x3}}, {0xa, 0x2, [0xc, 0x81, 0x3]}}, {{0x1c, 0x1, {0x4, 0x4, 0x0, 0xc, 0x2, 0x9, 0xffff, 0x3}}, {0xa, 0x2, [0x1, 0xffff, 0xfff]}}, {{0x1c, 0x1, {0xd1, 0x4, 0x800, 0x2, 0x0, 0xfffffffb, 0x40}}, {0x4}}, {{0x1c, 0x1, {0xe1, 0x6, 0x7, 0x6, 0x1, 0x400000, 0x2, 0x4}}, {0xc, 0x2, [0x4, 0x4, 0x2, 0x8001]}}, {{0x1c, 0x1, {0xa, 0xc, 0x1, 0x1200, 0x0, 0xff, 0xff, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x0]}}]}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9b, 0xa, 0x4, 0x8, 0x2, 0xfffffffd, 0x2}}, {0x4}}]}]}, 0x228}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x5) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x6e2a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0xe0) listen(r3, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(0xffffffffffffffff, 0x101) 0s ago: executing program 1 (id=5721): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xd5, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={r4, @local, @broadcast}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): 835180][T25242] x_tables: duplicate underflow at hook 2 [ 716.671173][T25261] netlink: 'syz.0.4206': attribute type 1 has an invalid length. [ 716.793585][T25272] set match dimension is over the limit! [ 716.831117][T25258] netlink: 'syz.1.4205': attribute type 11 has an invalid length. [ 717.566843][T25307] Bluetooth: MGMT ver 1.23 [ 719.157466][T25364] netlink: 'syz.3.4231': attribute type 83 has an invalid length. [ 719.250269][T25366] net_ratelimit: 3 callbacks suppressed [ 719.250288][T25366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 719.412992][T25375] netlink: 'syz.1.4234': attribute type 2 has an invalid length. [ 719.460952][T25375] netlink: 'syz.1.4234': attribute type 2 has an invalid length. [ 719.460972][T25375] __nla_validate_parse: 12 callbacks suppressed [ 719.460983][T25375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4234'. [ 719.874300][T25388] netlink: zone id is out of range [ 719.889809][T25388] netlink: zone id is out of range [ 720.259696][T25395] syzkaller0: entered promiscuous mode [ 720.259718][T25395] syzkaller0: entered allmulticast mode [ 720.546772][T25410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4241'. [ 720.654267][T25410] netlink: 'syz.4.4241': attribute type 62 has an invalid length. [ 720.821257][T25413] syzkaller0: entered promiscuous mode [ 720.821279][T25413] syzkaller0: entered allmulticast mode [ 720.936248][T25426] netlink: 'syz.4.4245': attribute type 1 has an invalid length. [ 720.936268][T25426] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4245'. [ 721.296225][T25433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4247'. [ 721.446616][T25439] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4250'. [ 721.463459][T25439] netlink: 'syz.4.4250': attribute type 2 has an invalid length. [ 721.526453][T25433] hsr_slave_1 (unregistering): left promiscuous mode [ 721.572046][T25453] netlink: 'syz.4.4250': attribute type 2 has an invalid length. [ 721.572068][T25453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'. [ 721.969243][T25464] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 722.084138][T25470] IPv6: Can't replace route, no match found [ 722.179093][T25475] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4257'. [ 722.198906][T25476] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4257'. [ 722.208810][T25471] netlink: 'syz.1.4254': attribute type 23 has an invalid length. [ 722.221854][T25475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4257'. [ 722.222027][T25476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4257'. [ 722.782477][T25494] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 723.235870][T25508] syzkaller1: entered promiscuous mode [ 723.236047][T25508] syzkaller1: entered allmulticast mode [ 723.745916][T25521] netlink: 'syz.4.4266': attribute type 7 has an invalid length. [ 723.745941][T25521] netlink: 'syz.4.4266': attribute type 8 has an invalid length. [ 724.198889][T25529] IPVS: length: 130 != 8 [ 724.656998][T25547] __nla_validate_parse: 7 callbacks suppressed [ 724.657017][T25547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4275'. [ 725.096039][T25582] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4280'. [ 725.096063][T25582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4280'. [ 725.233991][T25582] tipc: Enabling of bearer rejected, failed to enable media [ 725.416546][T25594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4282'. [ 725.470136][T25592] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 725.772429][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4281'. [ 725.772480][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4281'. [ 725.997639][T25608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 726.100094][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 726.100114][T25613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4286'. [ 726.100137][T25613] netlink: 'syz.3.4286': attribute type 13 has an invalid length. [ 726.100149][T25613] netlink: 'syz.3.4286': attribute type 12 has an invalid length. [ 726.171899][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 726.171931][T25618] netlink: 'syz.3.4286': attribute type 13 has an invalid length. [ 726.171944][T25618] netlink: 'syz.3.4286': attribute type 12 has an invalid length. [ 726.172293][T25620] netlink: 'syz.3.4286': attribute type 13 has an invalid length. [ 726.172308][T25620] netlink: 'syz.3.4286': attribute type 12 has an invalid length. [ 726.179170][T25621] netlink: 'syz.3.4286': attribute type 13 has an invalid length. [ 727.192959][T25647] bond0: (slave bond_slave_1): Releasing backup interface [ 727.527033][T25685] x_tables: duplicate underflow at hook 3 [ 728.019195][T25692] validate_nla: 1 callbacks suppressed [ 728.019220][T25692] netlink: 'syz.1.4304': attribute type 30 has an invalid length. [ 729.620909][T25740] can: request_module (can-proto-0) failed. [ 729.983592][T25756] __nla_validate_parse: 8 callbacks suppressed [ 729.983613][T25756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4322'. [ 731.397081][T25781] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4326'. [ 731.546139][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4332'. [ 731.546163][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4332'. [ 731.739157][T25810] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4334'. [ 731.774652][T25810] gretap0: entered promiscuous mode [ 731.800046][T25802] netlink: 'syz.4.4333': attribute type 11 has an invalid length. [ 731.800066][T25802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4333'. [ 732.313855][T25829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4340'. [ 732.340105][T25829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4340'. [ 732.443356][T25831] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 732.523581][T25831] bond4 (unregistering): Released all slaves [ 732.938285][T25852] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 733.077279][T25856] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 733.622344][T25868] netlink: 'syz.3.4350': attribute type 10 has an invalid length. [ 733.622365][T25868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4350'. [ 733.700216][T25868] dummy0: entered promiscuous mode [ 733.852685][T25868] team0: Port device dummy0 removed [ 733.853936][T25868] bridge0: port 3(dummy0) entered blocking state [ 733.854371][T25868] bridge0: port 3(dummy0) entered disabled state [ 733.854671][T25868] dummy0: entered allmulticast mode [ 734.504035][T25892] netlink: 1200 bytes leftover after parsing attributes in process `syz.3.4355'. [ 734.532933][T25884] bridge5: entered promiscuous mode [ 734.534313][T25884] bridge5: entered allmulticast mode [ 735.108341][T25913] netlink: 'syz.4.4360': attribute type 1 has an invalid length. [ 735.356413][T25913] 8021q: adding VLAN 0 to HW filter on device bond7 [ 735.408433][T25925] gretap1: entered promiscuous mode [ 735.684586][T25947] __nla_validate_parse: 3 callbacks suppressed [ 735.684607][T25947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4362'. [ 735.829117][T25913] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 735.854861][T25922] netlink: 'syz.4.4360': attribute type 3 has an invalid length. [ 735.855588][T25922] netlink: 'syz.4.4360': attribute type 3 has an invalid length. [ 736.252837][T25971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4368'. [ 736.276928][T25952] syzkaller0: entered promiscuous mode [ 736.276953][T25952] syzkaller0: entered allmulticast mode [ 736.447498][T25954] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4365'. [ 736.527999][T25981] netlink: 284 bytes leftover after parsing attributes in process `syz.4.4372'. [ 736.529164][T25987] netlink: 284 bytes leftover after parsing attributes in process `syz.4.4372'. [ 736.578444][T25988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4371'. [ 736.587932][T25988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4371'. [ 740.104128][T25999] mac80211_hwsim hwsim46 ..ãc¤±: renamed from wlan1 [ 740.324482][T26012] netlink: 'syz.0.4378': attribute type 3 has an invalid length. [ 740.324684][T26012] netlink: 'syz.0.4378': attribute type 3 has an invalid length. [ 740.960359][T26038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4384'. [ 741.257094][T26056] netlink: 'syz.2.4388': attribute type 30 has an invalid length. [ 741.503493][T26067] netlink: 'syz.3.4391': attribute type 178 has an invalid length. [ 741.578465][T26067] netlink: zone id is out of range [ 741.578481][T26067] netlink: zone id is out of range [ 741.578489][T26067] netlink: zone id is out of range [ 741.578496][T26067] netlink: zone id is out of range [ 741.578503][T26067] netlink: zone id is out of range [ 741.578511][T26067] netlink: zone id is out of range [ 741.578518][T26067] netlink: zone id is out of range [ 741.578526][T26067] netlink: zone id is out of range [ 741.578532][T26067] netlink: zone id is out of range [ 741.578540][T26067] netlink: set zone limit has 4 unknown bytes [ 742.576181][T26108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4400'. [ 742.615994][T26108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4400'. [ 742.935179][T26117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4404'. [ 743.631530][T26127] tipc: Started in network mode [ 743.631561][T26127] tipc: Node identity 000000000000003a0000000000000001, cluster identity 4711 [ 743.631615][T26127] tipc: Enabling of bearer rejected, failed to enable media [ 743.950047][ T8225] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 744.979119][T26190] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4421'. [ 744.989882][T26188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4420'. [ 745.044162][ T5722] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 745.155942][T26195] syzkaller0: entered promiscuous mode [ 745.155965][T26195] syzkaller0: entered allmulticast mode [ 745.192078][T26192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4420'. [ 745.192105][T26192] nbd: nbd64 already in use [ 745.210337][T26018] block nbd64: NBD_DISCONNECT [ 745.488649][T26018] udevd[26018]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 745.710677][T26214] syzkaller0: entered promiscuous mode [ 745.710699][T26214] syzkaller0: entered allmulticast mode [ 745.943083][T26224] syzkaller0: entered promiscuous mode [ 745.943106][T26224] syzkaller0: entered allmulticast mode [ 746.503565][T26245] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4429'. [ 746.506687][T26245] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4429'. [ 746.578241][T26248] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4429'. [ 746.695439][T26252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4428'. [ 746.695462][T26252] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4428'. [ 746.884574][T26246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4428'. [ 746.914089][T26245] bond3: (slave lo): Releasing backup interface [ 746.917260][T26245] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 746.946736][T26249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4428'. [ 747.008908][T26245] bond0: (slave bond_slave_0): Releasing backup interface [ 747.065400][T26245] team0: Port device team_slave_0 removed [ 747.099343][T26245] team0: Port device team_slave_1 removed [ 747.108901][T26245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.108926][T26245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.139276][T26245] net_ratelimit: 5 callbacks suppressed [ 747.139297][T26245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 747.697578][T26282] netlink: 'syz.1.4436': attribute type 1 has an invalid length. [ 747.697598][T26282] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.4436'. [ 747.721363][T26277] netlink: 'syz.1.4436': attribute type 1 has an invalid length. [ 747.721385][T26277] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.4436'. [ 747.748392][T26293] batadv_slave_1: entered promiscuous mode [ 747.759936][T26299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4438'. [ 747.759969][T26299] netlink: 'syz.0.4438': attribute type 30 has an invalid length. [ 747.965009][T26299] netlink: 'syz.0.4438': attribute type 30 has an invalid length. [ 748.522595][T26290] batadv_slave_1: left promiscuous mode [ 748.944324][T26327] netlink: 'syz.2.4445': attribute type 7 has an invalid length. [ 749.344107][T26345] netlink: 'syz.0.4448': attribute type 15 has an invalid length. [ 749.344129][T26345] netlink: 'syz.0.4448': attribute type 7 has an invalid length. [ 751.510580][T26409] __nla_validate_parse: 32 callbacks suppressed [ 751.510598][T26409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4467'. [ 751.511342][T26409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4467'. [ 751.512153][T26409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4467'. [ 751.512941][T26409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4467'. [ 751.513704][T26409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4467'. [ 751.514486][T26409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4467'. [ 751.515275][T26409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4467'. [ 751.516069][T26409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4467'. [ 751.516869][T26409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4467'. [ 751.517682][T26409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4467'. [ 752.228695][T26444] syzkaller1: entered promiscuous mode [ 752.228718][T26444] syzkaller1: entered allmulticast mode [ 752.378000][T26451] xt_hashlimit: overflow, try lower: 0/0 [ 753.228398][T26470] netlink: 'syz.3.4481': attribute type 4 has an invalid length. [ 753.490217][T26480] bond0: (slave bond_slave_0): Releasing backup interface [ 753.626520][T26480] bond0: (slave bond_slave_1): Releasing backup interface [ 753.856688][T26480] team0: Port device team_slave_0 removed [ 753.977734][T26480] team0: Port device team_slave_1 removed [ 754.003708][T26480] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 754.287667][T26477] xt_policy: output policy not valid in PREROUTING and INPUT [ 754.928036][T26528] FAULT_INJECTION: forcing a failure. [ 754.928036][T26528] name failslab, interval 1, probability 0, space 0, times 0 [ 754.928069][T26528] CPU: 1 UID: 0 PID: 26528 Comm: syz.0.4493 Not tainted syzkaller #0 PREEMPT(full) [ 754.928113][T26528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.928124][T26528] Call Trace: [ 754.928131][T26528] [ 754.928139][T26528] dump_stack_lvl+0xe8/0x150 [ 754.928175][T26528] should_fail_ex+0x410/0x560 [ 754.928204][T26528] should_failslab+0xa8/0x100 [ 754.928229][T26528] ? __nf_conntrack_alloc+0x81/0x3e0 [ 754.928257][T26528] kmem_cache_alloc_noprof+0xa1/0x600 [ 754.928285][T26528] ? nf_ct_pernet+0x45/0x270 [ 754.928311][T26528] ? __nf_conntrack_alloc+0x81/0x3e0 [ 754.928344][T26528] __nf_conntrack_alloc+0x81/0x3e0 [ 754.928377][T26528] init_conntrack+0x22c/0x1080 [ 754.928401][T26528] ? __pfx_init_conntrack+0x10/0x10 [ 754.928440][T26528] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 754.928465][T26528] ? __lock_acquire+0x747/0x2de0 [ 754.928484][T26528] ? __siphash_unaligned+0x25c/0x3e0 [ 754.928517][T26528] nf_conntrack_in+0xc13/0x1600 [ 754.928564][T26528] ? __pfx_nf_conntrack_in+0x10/0x10 [ 754.928593][T26528] ? unwind_next_frame+0x8f/0x2550 [ 754.928621][T26528] ? nf_ct_skb_network_trim+0x26e/0x700 [ 754.928646][T26528] ? __pfx_nf_ct_skb_network_trim+0x10/0x10 [ 754.928672][T26528] ? nf_ct_set+0x6b/0x130 [ 754.928698][T26528] tcf_ct_act+0x2478/0x42d0 [ 754.928751][T26528] ? __pfx_tcf_ct_act+0x10/0x10 [ 754.928800][T26528] ? is_bpf_text_address+0x26/0x2b0 [ 754.928837][T26528] ? lock_acquire+0x115/0x350 [ 754.928862][T26528] tcf_action_exec+0x185/0x8d0 [ 754.928893][T26528] basic_classify+0x1b2/0x2d0 [ 754.928923][T26528] tcf_classify+0x43d/0x1160 [ 754.928959][T26528] tc_run+0x42d/0x750 [ 754.928989][T26528] ? __pfx_tc_run+0x10/0x10 [ 754.929019][T26528] __netif_receive_skb_core+0x1443/0x30c0 [ 754.929062][T26528] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 754.929085][T26528] ? __alloc_skb+0x27a/0x7a0 [ 754.929107][T26528] ? rcu_is_watching+0x16/0xb0 [ 754.929130][T26528] ? __alloc_skb+0x27a/0x7a0 [ 754.929152][T26528] ? trace_kmem_cache_alloc+0x29/0xe0 [ 754.929200][T26528] ? netif_receive_skb+0x102/0xbf0 [ 754.929220][T26528] ? netif_receive_skb+0x102/0xbf0 [ 754.929243][T26528] netif_receive_skb+0x1fe/0xbf0 [ 754.929270][T26528] ? __pfx_netif_receive_skb+0x10/0x10 [ 754.929297][T26528] ? tun_rx_batched+0x185/0x790 [ 754.929322][T26528] tun_rx_batched+0x1de/0x790 [ 754.929349][T26528] ? __pfx_tun_rx_batched+0x10/0x10 [ 754.929371][T26528] ? lock_acquire+0x115/0x350 [ 754.929396][T26528] ? tun_get_user+0x23ba/0x44d0 [ 754.929421][T26528] ? __local_bh_enable_ip+0xd6/0x140 [ 754.929444][T26528] ? tun_get_user+0x27b0/0x44d0 [ 754.929466][T26528] tun_get_user+0x2be0/0x44d0 [ 754.929500][T26528] ? tun_get_user+0x27b0/0x44d0 [ 754.929518][T26528] ? aa_file_perm+0x18b/0x15f0 [ 754.929546][T26528] ? aa_file_perm+0x4ed/0x15f0 [ 754.929569][T26528] ? __pfx_tun_get_user+0x10/0x10 [ 754.929591][T26528] ? __lock_acquire+0x747/0x2de0 [ 754.929612][T26528] ? kstrtoull+0x137/0x1d0 [ 754.929639][T26528] ? ref_tracker_alloc+0x341/0x4b0 [ 754.929662][T26528] ? lock_acquire+0x115/0x350 [ 754.929681][T26528] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 754.929707][T26528] ? lock_acquire+0x115/0x350 [ 754.929726][T26528] ? tun_get+0x1c/0x2f0 [ 754.929752][T26528] ? tun_get+0x1c/0x2f0 [ 754.929771][T26528] ? tun_get+0x1c/0x2f0 [ 754.929795][T26528] tun_chr_write_iter+0x113/0x200 [ 754.929818][T26528] vfs_write+0x612/0xba0 [ 754.929855][T26528] ? __pfx_vfs_write+0x10/0x10 [ 754.929891][T26528] ? __fget_files+0x2a/0x420 [ 754.929925][T26528] ksys_write+0x150/0x270 [ 754.929954][T26528] ? __pfx_ksys_write+0x10/0x10 [ 754.929994][T26528] do_syscall_64+0x166/0x520 [ 754.930018][T26528] ? trace_irq_disable+0x3b/0x140 [ 754.930037][T26528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.930057][T26528] ? clear_bhb_loop+0x70/0xc0 [ 754.930080][T26528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.930099][T26528] RIP: 0033:0x7f8bb8b9e159 [ 754.930118][T26528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.930133][T26528] RSP: 002b:00007f8bb99af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 754.930154][T26528] RAX: ffffffffffffffda RBX: 00007f8bb8e25fa0 RCX: 00007f8bb8b9e159 [ 754.930167][T26528] RDX: 000000000000001c RSI: 0000200000000600 RDI: 0000000000000004 [ 754.930178][T26528] RBP: 00007f8bb99af090 R08: 0000000000000000 R09: 0000000000000000 [ 754.930188][T26528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.930199][T26528] R13: 00007f8bb8e26038 R14: 00007f8bb8e25fa0 R15: 00007ffd39c31b88 [ 754.930228][T26528] [ 755.718792][T26552] x_tables: duplicate underflow at hook 2 [ 756.936617][T26596] block nbd0: server does not support multiple connections per device. [ 756.937153][T26596] block nbd0: shutting down sockets [ 756.967565][T26592] bond0: up delay (540540933) is not a multiple of miimon (4), value rounded to 540540932 ms [ 757.939139][T26612] __nla_validate_parse: 152 callbacks suppressed [ 757.939162][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4511'. [ 757.939189][T26612] netlink: 'syz.1.4511': attribute type 14 has an invalid length. [ 757.939201][T26612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'. [ 758.344429][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4511'. [ 758.344465][T26612] netlink: 'syz.1.4511': attribute type 14 has an invalid length. [ 758.344479][T26612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'. [ 759.322874][T26660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4523'. [ 759.399058][T26664] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.4522'. [ 760.587828][T26690] Cannot find add_set index 2 as target [ 760.673527][T26693] x_tables: duplicate underflow at hook 2 [ 760.676795][T26673] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4525'. [ 761.264222][T26718] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4534'. [ 761.264250][T26718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4534'. [ 761.264263][T26718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4534'. [ 761.547085][T26722] bond5 (unregistering): Released all slaves [ 761.661756][T26723] bond5 (unregistering): Released all slaves [ 762.342107][T26751] erspan0: entered promiscuous mode [ 762.532693][T26749] erspan0: left promiscuous mode [ 762.755230][T15055] syzkaller1: tun_net_xmit 76 [ 762.757291][T15055] syzkaller1: tun_net_xmit 48 [ 762.852046][T26780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.156802][T26791] ip_tables: iptables: counters copy to user failed while replacing table [ 763.463388][T26802] __nla_validate_parse: 2 callbacks suppressed [ 763.463408][T26802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4555'. [ 763.486418][T26802] openvswitch: netlink: IP tunnel dst address not specified [ 763.504785][T26806] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4558'. [ 763.580455][T26805] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 763.582166][T26805] bond5 (unregistering): Released all slaves [ 763.673695][T26820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4554'. [ 763.742021][T26818] netlink: 'syz.4.4559': attribute type 2 has an invalid length. [ 763.780223][T26819] netlink: 'syz.4.4559': attribute type 2 has an invalid length. [ 763.841158][T26820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.176810][T26823] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 764.176850][T26823] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 764.176888][T26823] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 764.340309][T26823] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 764.439760][T26833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.535766][T26836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4565'. [ 764.721547][T26838] netlink: 'syz.0.4565': attribute type 3 has an invalid length. [ 765.265771][T26853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4569'. [ 765.265807][T26853] netlink: 'syz.2.4569': attribute type 8 has an invalid length. [ 765.265820][T26853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4569'. [ 765.342105][T26847] : option downdelay: invalid value (18446744073709547007) [ 765.342130][T26847] : option downdelay: allowed values 0 - 2147483647 [ 765.343932][T26847]  (unregistering): Released all slaves [ 765.404037][T26862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4573'. [ 765.554868][T26863] netlink: 'syz.1.4573': attribute type 39 has an invalid length. [ 765.654408][T26871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4575'. [ 766.144293][T26884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4577'. [ 766.167177][T26884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4577'. [ 767.235591][T26926] macvlan0: entered promiscuous mode [ 767.938344][T26957] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 768.601995][T26977] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 768.602021][T26977] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 768.751525][T26986] netlink: 'syz.4.4600': attribute type 1 has an invalid length. [ 768.790152][T26986] 8021q: adding VLAN 0 to HW filter on device bond8 [ 768.793852][T26986] __nla_validate_parse: 5 callbacks suppressed [ 768.793870][T26986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4600'. [ 768.871513][T26988] x_tables: duplicate entry at hook 2 [ 769.274873][T27000] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 769.371087][T27002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4605'. [ 769.981358][T27020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4610'. [ 770.127156][T27024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4610'. [ 772.082259][T27073] netlink: 'syz.0.4627': attribute type 21 has an invalid length. [ 772.082282][T27073] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4627'. [ 772.082331][T27073] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4627'. [ 772.143529][T27079] netlink: 71 bytes leftover after parsing attributes in process `syz.3.4628'. [ 772.403287][T27085] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4629'. [ 772.403565][T27086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4629'. [ 772.646714][T27091] netlink: 'syz.0.4632': attribute type 10 has an invalid length. [ 773.085646][T27094] bond0: option packets_per_slave: invalid value (868050663) [ 773.085676][T27094] bond0: option packets_per_slave: allowed values 0 - 65535 [ 773.543546][T27116] netlink: 'syz.0.4636': attribute type 1 has an invalid length. [ 773.592853][T27116] 8021q: adding VLAN 0 to HW filter on device bond5 [ 773.625726][T27125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4637'. [ 774.150537][T27148] __nla_validate_parse: 1 callbacks suppressed [ 774.150557][T27148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4642'. [ 774.357125][T27158] netlink: 'syz.2.4645': attribute type 1 has an invalid length. [ 774.416628][T27158] bond4: entered promiscuous mode [ 774.417095][T27158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 774.485273][T27164] ip6gretap1: entered promiscuous mode [ 774.485297][T27164] ip6gretap1: entered allmulticast mode [ 774.555686][T27158] vlan3: entered allmulticast mode [ 774.555709][T27158] bond4: entered allmulticast mode [ 774.597028][T27168] netlink: 'syz.1.4647': attribute type 1 has an invalid length. [ 774.742279][T27161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4644'. [ 774.795675][T27163] bond4: (slave bridge5): making interface the new active one [ 774.795699][T27163] bridge5: entered promiscuous mode [ 774.795872][T27163] bridge5: entered allmulticast mode [ 774.846282][T27163] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 775.077188][T27172] ip6tnl1: entered allmulticast mode [ 775.279117][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279153][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279178][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279202][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279227][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279251][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279274][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279298][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279322][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279345][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279369][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279579][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279605][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279629][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279653][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279675][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279699][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279723][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279747][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279771][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279795][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279819][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279864][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279889][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279912][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279935][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279959][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.279981][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.280004][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.280026][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.280048][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.280071][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.280095][T27199] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 775.583942][T27202] netlink: 'syz.3.4649': attribute type 54 has an invalid length. [ 775.583965][T27202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4649'. [ 775.854189][T11581] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.855141][T11581] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.879671][ T5722] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.889817][T11581] IPVS: starting estimator thread 0... [ 775.981687][T27215] IPVS: using max 32 ests per chain, 76800 per kthread [ 775.997569][ T5619] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 776.299838][T27230] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4656'. [ 776.346245][T27231] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4656'. [ 776.370925][T27229] pim6reg: entered allmulticast mode [ 776.491961][T27227] pim6reg: left allmulticast mode [ 776.576820][T27236] netlink: 'syz.4.4659': attribute type 2 has an invalid length. [ 776.576844][T27236] netlink: 'syz.4.4659': attribute type 1 has an invalid length. [ 776.576856][T27236] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4659'. [ 776.790089][ T5619] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 777.070106][T27254] netlink: 'syz.2.4663': attribute type 29 has an invalid length. [ 777.070129][T27254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4663'. [ 777.073281][T27254] netlink: 'syz.2.4663': attribute type 29 has an invalid length. [ 777.073300][T27254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4663'. [ 777.649109][T27270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4666'. [ 777.820644][T27266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4665'. [ 778.945721][T27312] x_tables: duplicate underflow at hook 1 [ 779.709973][T27335] batman_adv: batadv0: Adding interface: macvtap0 [ 779.709992][T27335] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.710018][T27335] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 779.909912][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 779.954567][T27346] batman_adv: batadv0: Adding interface: syzkaller0 [ 779.954582][T27346] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.954667][T27346] batman_adv: batadv0: Interface activated: syzkaller0 [ 780.061798][T27345] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 780.101138][T27345] batman_adv: batadv0: Removing interface: syzkaller0 [ 780.424829][T27355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4685'. [ 781.540458][T27379] netlink: 'syz.3.4690': attribute type 1 has an invalid length. [ 781.596590][T27381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4690'. [ 782.474373][T27355] erspan0: left allmulticast mode [ 782.589205][T27362] ipip1: entered promiscuous mode [ 782.596538][T27388] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4692'. [ 782.599205][T27388] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4692'. [ 782.600129][T15055] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.600183][T15055] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.600217][T15055] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.609693][T11581] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.740797][T27393] ip_tables: iptables: counters copy to user failed while replacing table [ 782.754865][T27379] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 782.898103][T27400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4696'. [ 782.982531][T27402] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 782.985654][T27402] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 783.118328][T27406] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4699'. [ 783.139895][T27407] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4699'. [ 783.165312][T27407] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4699'. [ 783.166401][T27407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4699'. [ 783.283612][T27412] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 783.527836][T27426] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4704'. [ 784.028472][T27440] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 784.028507][T27440] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 784.046198][T27440] tipc: Enabled bearer , priority 1 [ 784.410378][T27451] geneve2: entered promiscuous mode [ 784.539838][T15055] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 42847 - 0 [ 784.541400][T11581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 42847 - 0 [ 784.541440][T11581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 42847 - 0 [ 784.863941][T27463] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 785.342630][T27493] netlink: 'syz.0.4722': attribute type 1 has an invalid length. [ 785.343749][T27486] can: request_module (can-proto-0) failed. [ 785.480496][ T8223] tipc: Node number set to 1999291323 [ 785.546138][T27496] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 785.613755][T27497] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 785.824358][T27501] __nla_validate_parse: 9 callbacks suppressed [ 785.827529][T27501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4724'. [ 785.827550][T27501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4724'. [ 785.827565][T27501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4724'. [ 785.913508][T27501] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4724'. [ 785.993993][T27510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4727'. [ 786.013005][T27511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4727'. [ 786.337081][T27521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4730'. [ 786.447160][T27521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 786.687664][T27537] netlink: 'syz.1.4733': attribute type 1 has an invalid length. [ 786.687692][T27537] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.4733'. [ 787.435781][T27560] netlink: 'syz.0.4740': attribute type 1 has an invalid length. [ 787.479264][T27558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4739'. [ 787.509877][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 787.603006][T27560] 8021q: adding VLAN 0 to HW filter on device bond6 [ 787.603753][T27562] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 787.732181][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4740'. [ 787.872672][T27566] bond6: (slave geneve2): making interface the new active one [ 787.895330][T27566] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 787.941650][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.941790][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.941914][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.949567][T11586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.166108][T27571] ip6tnl4: entered allmulticast mode [ 788.231303][T11581] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 788.231569][T11581] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 788.276208][ T8223] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 788.329912][ T5722] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 788.590953][ T8223] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 788.637433][T27583] netlink: 'syz.4.4745': attribute type 11 has an invalid length. [ 788.717305][T27582] vlan5: entered allmulticast mode [ 788.717327][T27582] bridge3: entered allmulticast mode [ 788.731879][T27582] bridge3: port 1(erspan0) entered blocking state [ 788.733227][T27582] bridge3: port 1(erspan0) entered disabled state [ 788.733422][T27582] erspan0: entered allmulticast mode [ 788.761842][T27582] erspan0: left allmulticast mode [ 789.366288][T27607] netlink: 'syz.1.4748': attribute type 15 has an invalid length. [ 790.152788][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.152852][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.152886][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.152917][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.152949][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.152980][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.153012][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.153043][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.464049][T27637] netlink: 'syz.2.4757': attribute type 23 has an invalid length. [ 790.548043][T27649] sctp: [Deprecated]: syz.2.4757 (pid 27649) Use of int in max_burst socket option. [ 790.548043][T27649] Use struct sctp_assoc_value instead [ 790.707346][T27659] netlink: 'syz.1.4761': attribute type 8 has an invalid length. [ 790.868578][T27659] netlink: 'syz.1.4761': attribute type 8 has an invalid length. [ 790.869324][T27648] netlink: 'syz.0.4760': attribute type 1 has an invalid length. [ 790.869341][T27648] __nla_validate_parse: 12 callbacks suppressed [ 790.869353][T27648] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4760'. [ 790.921004][T27659] netlink: 'syz.1.4761': attribute type 8 has an invalid length. [ 791.013936][T27667] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 791.043032][T27659] netlink: 'syz.1.4761': attribute type 8 has an invalid length. [ 791.765870][T27684] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4768'. [ 791.881072][T27689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.989702][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 792.012717][T27695] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4772'. [ 792.015173][T27695] syzkaller0: entered promiscuous mode [ 792.015192][T27695] syzkaller0: entered allmulticast mode [ 792.478832][T27701] x_tables: duplicate underflow at hook 2 [ 792.538213][T27704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.272485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 794.761055][T27710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4776'. [ 795.287246][T27720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4775'. [ 795.288000][T27720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4775'. [ 795.396920][T27737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4782'. [ 795.650099][T27742] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 795.652136][T27742] bond5 (unregistering): Released all slaves [ 795.705138][T27750] x_tables: duplicate underflow at hook 1 [ 796.102276][T27765] syzkaller0: entered promiscuous mode [ 796.102298][T27765] syzkaller0: entered allmulticast mode [ 796.192880][T27765] tipc: Enabled bearer , priority 0 [ 796.215499][T27769] ip6gre2: entered promiscuous mode [ 796.215520][T27769] ip6gre2: entered allmulticast mode [ 796.341414][T27775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4794'. [ 796.453597][T27761] tipc: Resetting bearer [ 796.505805][T27761] tipc: Disabling bearer [ 796.518136][T27784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4795'. [ 796.554137][T27785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4795'. [ 796.582886][T27782] tipc: New replicast peer: 255.255.255.255 [ 796.618941][T27782] tipc: Enabled bearer , priority 26 [ 796.810273][T27796] sctp: [Deprecated]: syz.4.4798 (pid 27796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 796.810273][T27796] Use struct sctp_sack_info instead [ 797.384313][T11586] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 797.384557][T11586] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 797.410236][ T5722] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 797.451401][ T5722] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 797.490957][T27816] IPVS: rr: FWM 3 0x00000003 - no destination available [ 797.492472][T27816] validate_nla: 8 callbacks suppressed [ 797.492487][T27816] netlink: 'syz.3.4801': attribute type 1 has an invalid length. [ 797.672522][T27816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4801'. [ 797.727308][T27822] bond6: (slave geneve2): making interface the new active one [ 797.737887][T27822] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 797.741501][ T970] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 797.741562][ T970] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 797.741606][ T970] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 797.741638][ T970] netdevsim netdevsim3 €Â: set [1, 1] type 2 family 0 port 20000 - 0 [ 797.768506][T27816] bond6: entered promiscuous mode [ 797.768527][T27816] geneve2: entered promiscuous mode [ 797.818581][T27816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 797.910443][ T5722] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 798.057235][T27833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4802'. [ 798.187153][T27837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4805'. [ 798.240502][T27831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4803'. [ 798.292225][T27834] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 798.477934][T27842] netlink: 'syz.1.4806': attribute type 23 has an invalid length. [ 798.615211][T27846] sch_fq: defrate 0 ignored. [ 798.756457][T27850] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 798.756650][T27850] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 798.910556][T27853] netlink: 70 bytes leftover after parsing attributes in process `syz.0.4808'. [ 798.935846][T27853] netlink: 70 bytes leftover after parsing attributes in process `syz.0.4808'. [ 798.953293][T27853] netlink: 70 bytes leftover after parsing attributes in process `syz.0.4808'. [ 799.014153][T27864] netlink: 'syz.3.4811': attribute type 1 has an invalid length. [ 799.071934][T27864] bond7: entered promiscuous mode [ 799.074617][T27864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 799.076051][T27862] batman_adv: batadv0: Adding interface: veth0 [ 799.076066][T27862] batman_adv: batadv0: The MTU of interface veth0 is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.076168][T27862] batman_adv: batadv0: Interface activated: veth0 [ 799.187330][T27869] lo: entered allmulticast mode [ 799.293825][T27868] batman_adv: batadv0: Interface deactivated: veth0 [ 799.293850][T27868] batman_adv: batadv0: Removing interface: veth0 [ 799.319616][T27865] lo: left allmulticast mode [ 799.378317][T27878] netlink: 'syz.3.4811': attribute type 1 has an invalid length. [ 799.413579][T27864] bond7: (slave bridge2): making interface the new active one [ 799.413604][T27864] bridge2: entered promiscuous mode [ 799.440119][T27864] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 799.670319][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 799.692632][T27888] openvswitch: netlink: Message has 8 unknown bytes. [ 799.693980][T27890] netlink: 'syz.1.4813': attribute type 2 has an invalid length. [ 799.695445][T27885] bond7: (slave bridge3): Enslaving as a backup interface with an up link [ 799.753777][T27877] gretap0: left promiscuous mode [ 799.786644][T27891] netlink: 'syz.1.4813': attribute type 2 has an invalid length. [ 799.851880][T27877] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 799.881868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 800.157182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 800.568546][T27921] batadv0: entered promiscuous mode [ 800.577338][T27921] macvtap1: entered promiscuous mode [ 800.583811][T27921] macvtap1: entered allmulticast mode [ 800.583830][T27921] batadv0: entered allmulticast mode [ 800.623030][T27921] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 800.682118][T27921] batadv0: left allmulticast mode [ 800.683092][T27921] batadv0: left promiscuous mode [ 800.830528][T27930] netlink: 'syz.0.4822': attribute type 1 has an invalid length. [ 801.318849][T27948] tipc: Disabling bearer [ 801.354364][T27960] __nla_validate_parse: 4 callbacks suppressed [ 801.354405][T27960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4831'. [ 801.388525][T27962] netlink: 'syz.4.4832': attribute type 2 has an invalid length. [ 801.423889][T27946] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4829'. [ 801.589621][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 801.925220][T27978] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4836'. [ 801.984989][T27980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4837'. [ 802.080263][T27982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 802.101166][T27982] ip6tnl2: entered allmulticast mode [ 802.103563][T27982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 802.198162][T27985] syzkaller0: entered promiscuous mode [ 802.198348][T27985] syzkaller0: entered allmulticast mode [ 802.229906][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 802.295022][ T8235] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 802.355601][T27990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4842'. [ 802.355827][T27989] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4842'. [ 802.413428][ T8235] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 802.500659][T27996] netlink: 'syz.1.4843': attribute type 1 has an invalid length. [ 802.611861][T28000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4843'. [ 802.636913][T28000] 8021q: adding VLAN 0 to HW filter on device bond5 [ 802.767944][T28005] xt_l2tp: v2 doesn't support IP mode [ 802.768667][T28005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4846'. [ 802.792098][T28005] veth1_to_team: entered promiscuous mode [ 802.806058][T28005] veth1_to_team: left promiscuous mode [ 802.861636][T11666] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 803.033571][T28015] netlink: 'syz.3.4849': attribute type 1 has an invalid length. [ 803.326416][T28027] sock: sock_set_timeout: `syz.1.4852' (pid 28027) tries to set negative timeout [ 803.450131][T28029] batman_adv: batadv0: Removing interface: macvtap1 [ 803.592377][T28041] syzkaller0: create flow: hash 1102478981 index 1 [ 803.643632][T11586] syzkaller0: tun_net_xmit 76 [ 803.643827][T11586] syzkaller0: tun_net_xmit 48 [ 803.673993][ T8223] syzkaller0: tun_net_xmit 76 [ 804.135002][T11581] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 804.135238][T11581] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 804.157929][ T5722] syzkaller0: tun_net_xmit 76 [ 804.176787][T28050] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 804.201421][T28037] syzkaller0: delete flow: hash 1102478981 index 1 [ 804.461086][T28059] netlink: 'syz.0.4859': attribute type 1 has an invalid length. [ 804.756204][ T5619] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 807.773903][T28059] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 808.012122][T28074] __nla_validate_parse: 3 callbacks suppressed [ 808.012142][T28074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 808.012169][T28074] netlink: 'syz.1.4862': attribute type 30 has an invalid length. [ 808.090970][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 808.091005][T28078] netlink: 'syz.1.4862': attribute type 30 has an invalid length. [ 808.112552][T28074] vxlan1: entered promiscuous mode [ 808.112573][T28074] vxlan1: entered allmulticast mode [ 808.115098][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 808.115127][T28078] netlink: 'syz.1.4862': attribute type 30 has an invalid length. [ 808.119740][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 808.119768][T28078] netlink: 'syz.1.4862': attribute type 30 has an invalid length. [ 808.140202][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 808.140233][T28078] netlink: 'syz.1.4862': attribute type 30 has an invalid length. [ 808.141752][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 808.143263][T28078] netlink: 'syz.1.4862': attribute type 30 has an invalid length. [ 808.167806][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 808.167838][T28078] netlink: 'syz.1.4862': attribute type 30 has an invalid length. [ 808.184457][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 808.184490][T28078] netlink: 'syz.1.4862': attribute type 30 has an invalid length. [ 808.186987][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 808.187014][T28078] netlink: 'syz.1.4862': attribute type 30 has an invalid length. [ 808.192938][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 808.192966][T28078] netlink: 'syz.1.4862': attribute type 30 has an invalid length. [ 808.269791][ T970] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.270722][ T970] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.270757][ T970] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.270789][ T970] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.389659][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 809.147452][T28111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.169857][T28111] team0: Port device netdevsim1 added [ 809.354792][T28120] siw: device registration error -23 [ 809.458677][T28122] sctp: [Deprecated]: syz.2.4875 (pid 28122) Use of int in max_burst socket option deprecated. [ 809.458677][T28122] Use struct sctp_assoc_value instead [ 809.674088][T28126] syzkaller0: entered promiscuous mode [ 809.674111][T28126] syzkaller0: entered allmulticast mode [ 809.764721][T28135] bridge6: entered allmulticast mode [ 809.909680][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 810.210418][T28158] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 810.210447][T28158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.221738][T28179] validate_nla: 27 callbacks suppressed [ 814.221757][T28179] netlink: 'syz.4.4890': attribute type 1 has an invalid length. [ 814.248208][T28181] __nla_validate_parse: 28 callbacks suppressed [ 814.248226][T28181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4891'. [ 814.395949][T28188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 814.697246][T28198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.826971][T28207] netlink: 'syz.4.4895': attribute type 1 has an invalid length. [ 814.963347][ T30] audit: type=1800 audit(1790579860.271:18): pid=28202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4894" name=0A dev="tmpfs" ino=1652 res=0 errno=0 [ 814.965818][ T30] audit: type=1800 audit(1790579860.271:19): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4894" name=0A dev="tmpfs" ino=1652 res=0 errno=0 [ 815.029611][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 815.348778][T28232] netlink: 'syz.1.4898': attribute type 1 has an invalid length. [ 815.429905][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 815.504967][T28232] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 815.505156][T28232] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 816.100888][ T5277] veth0_macvtap: left promiscuous mode [ 816.274148][T28271] sctp: [Deprecated]: syz.3.4904 (pid 28271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 816.274148][T28271] Use struct sctp_sack_info instead [ 816.766661][T28284] openvswitch: netlink: Duplicate or invalid key (type 0). [ 816.781923][T28284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4905'. [ 816.806366][T28284] netlink: 'syz.2.4905': attribute type 1 has an invalid length. [ 816.931000][T28288] sch_fq: defrate 4294967293 ignored. [ 817.044359][T28295] netlink: 'syz.1.4908': attribute type 1 has an invalid length. [ 817.172538][T28303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4908'. [ 817.271775][T28314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4908'. [ 817.302857][T28295] bond7: entered promiscuous mode [ 817.302940][T28295] bond7: entered allmulticast mode [ 817.321156][T28295] 8021q: adding VLAN 0 to HW filter on device bond7 [ 817.589651][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 817.770840][T28330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4913'. [ 817.771108][T28330] veth1_macvtap: left promiscuous mode [ 817.793487][T28332] netlink: 'syz.2.4912': attribute type 18 has an invalid length. [ 817.793508][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4912'. [ 817.794547][T28332] netlink: 'syz.2.4912': attribute type 18 has an invalid length. [ 817.794564][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4912'. [ 818.040006][T28334] veth1_macvtap: entered promiscuous mode [ 818.060704][T28334] batman_adv: batadv0: Adding interface: macsec0 [ 818.060723][T28334] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.060750][T28334] batman_adv: batadv0: Interface activated: macsec0 [ 818.574219][T28352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4916'. [ 818.575562][T28313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4910'. [ 818.970637][T28369] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4920'. [ 819.410144][T28390] netlink: 'syz.0.4925': attribute type 1 has an invalid length. [ 819.506499][T28390] 8021q: adding VLAN 0 to HW filter on device bond11 [ 819.761420][T28412] __nla_validate_parse: 1 callbacks suppressed [ 819.761440][T28412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4928'. [ 819.762921][T28409] openvswitch: netlink: Flow actions attr not present in new flow. [ 819.822784][T28412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4928'. [ 819.829880][T28412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.307857][T28423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4929'. [ 820.640285][T28431] sctp: [Deprecated]: syz.4.4930 (pid 28431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.640285][T28431] Use struct sctp_sack_info instead [ 821.535743][T28450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4937'. [ 821.581934][T28446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4936'. [ 821.939074][T28461] syzkaller1: entered promiscuous mode [ 821.939253][T28461] syzkaller1: entered allmulticast mode [ 822.780843][T28484] netlink: 'syz.3.4945': attribute type 4 has an invalid length. [ 823.304049][T28504] netlink: 'syz.1.4949': attribute type 1 has an invalid length. [ 823.415822][T28515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4949'. [ 823.531445][T28508] lo: entered promiscuous mode [ 823.531622][T28508] tunl0: entered promiscuous mode [ 823.531769][T28508] gre0: entered promiscuous mode [ 823.531877][T28508] gretap0: entered promiscuous mode [ 823.532025][T28508] erspan0: entered promiscuous mode [ 823.532136][T28508] ip_vti0: entered promiscuous mode [ 823.532282][T28508] ip6_vti0: entered promiscuous mode [ 823.532413][T28508] sit0: entered promiscuous mode [ 823.532531][T28508] ip6tnl0: entered promiscuous mode [ 823.532640][T28508] ip6gre0: entered promiscuous mode [ 823.532752][T28508] syz_tun: entered promiscuous mode [ 823.532866][T28508] ip6gretap0: entered promiscuous mode [ 823.532985][T28508] bridge0: entered promiscuous mode [ 823.551172][T28508] bond0: entered promiscuous mode [ 823.551193][T28508] bond_slave_0: entered promiscuous mode [ 823.551322][T28508] bond_slave_1: entered promiscuous mode [ 823.551596][T28508] team0: entered promiscuous mode [ 823.551609][T28508] team_slave_0: entered promiscuous mode [ 823.557555][T28508] team_slave_1: entered promiscuous mode [ 823.557822][T28508] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 823.576830][T28508] nlmon0: entered promiscuous mode [ 823.577006][T28508] batadv0: entered promiscuous mode [ 823.577144][T28508] veth0: entered promiscuous mode [ 823.577288][T28508] veth1: entered promiscuous mode [ 823.577443][T28508] wg0: entered promiscuous mode [ 823.577579][T28508] wg1: entered promiscuous mode [ 823.580446][T28508] wg2: entered promiscuous mode [ 823.582894][T28508] veth0_to_bridge: entered promiscuous mode [ 823.586936][T28508] veth1_to_bridge: entered promiscuous mode [ 823.593119][T28508] veth0_to_bond: entered promiscuous mode [ 823.593407][T28508] veth1_to_bond: entered promiscuous mode [ 823.593630][T28508] veth0_to_team: entered promiscuous mode [ 823.597248][T28508] veth1_to_team: entered promiscuous mode [ 823.615336][T28508] veth0_to_batadv: entered promiscuous mode [ 823.615509][T28508] batadv_slave_0: entered promiscuous mode [ 823.615673][T28508] xfrm0: entered promiscuous mode [ 823.615836][T28508] veth0_to_hsr: entered promiscuous mode [ 823.616104][T28508] veth1_to_hsr: entered promiscuous mode [ 823.616411][T28508] hsr0: entered promiscuous mode [ 823.647043][T28508] veth1_virt_wifi: entered promiscuous mode [ 823.647190][T28508] veth0_virt_wifi: entered promiscuous mode [ 823.647330][T28508] virt_wifi0: entered promiscuous mode [ 823.655588][T28508] vlan0: entered promiscuous mode [ 823.686583][T28508] vlan1: entered promiscuous mode [ 823.698811][T28508] macvlan1: entered promiscuous mode [ 823.698964][T28508] ipvlan0: entered promiscuous mode [ 823.699132][T28508] ipvlan1: entered promiscuous mode [ 823.721977][T28508] geneve0: entered promiscuous mode [ 823.742590][T28508] geneve1: entered promiscuous mode [ 823.766958][T28508] netdevsim netdevsim3 €Â: entered promiscuous mode [ 823.804443][T28508] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 823.804593][T28508] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 823.804711][T28508] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 823.804884][T28508] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 823.805035][T28508] macvlan2: entered promiscuous mode [ 823.805137][T28508] macvlan3: entered promiscuous mode [ 823.805238][T28508] veth2: entered promiscuous mode [ 823.805420][T28508] veth3: entered promiscuous mode [ 823.805558][T28508] gretap1: entered promiscuous mode [ 823.827716][T28508] ip6tnl1: entered promiscuous mode [ 823.827859][T28508] bond1: entered promiscuous mode [ 823.827988][T28508] bond2: entered promiscuous mode [ 823.828249][T28508] bond3: entered promiscuous mode [ 823.828359][T28508] gre1: entered promiscuous mode [ 823.828492][T28508] bridge0.257: entered promiscuous mode [ 823.828744][T28508] macvlan4: entered promiscuous mode [ 823.828844][T28508] bond4: entered promiscuous mode [ 823.828972][T28508] veth4: entered promiscuous mode [ 823.855970][T28508] veth5: entered promiscuous mode [ 823.866641][T28508] veth6: entered promiscuous mode [ 823.868152][T28508] veth7: entered promiscuous mode [ 823.881632][T28508] veth8: entered promiscuous mode [ 823.884310][T28508] veth9: entered promiscuous mode [ 823.887197][T28508] veth10: entered promiscuous mode [ 823.893675][T28508] veth11: entered promiscuous mode [ 823.893825][T28508] vxcan0: entered promiscuous mode [ 823.903801][T28508] dummy1: entered promiscuous mode [ 823.903968][T28508] vxlan0: entered promiscuous mode [ 823.952306][T28508] bridge1: entered promiscuous mode [ 823.990349][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 824.025897][T28508] mac80211_hwsim hwsim69 wlan2: entered promiscuous mode [ 824.064407][T28508] bond5: entered promiscuous mode [ 824.090671][T28508] ip6erspan0: entered promiscuous mode [ 824.112316][T28540] netlink: 'syz.0.4954': attribute type 1 has an invalid length. [ 824.113753][T28508] bridge3: entered promiscuous mode [ 824.115652][T28508] veth12: entered promiscuous mode [ 824.115819][T28508] veth13: entered promiscuous mode [ 824.115960][T28508] ip6tnl2: entered promiscuous mode [ 824.116073][T28508] bridge_slave_1.: entered promiscuous mode [ 824.576933][T28543] tipc: Enabled bearer , priority 0 [ 824.691669][T28549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4957'. [ 824.691696][T28549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4957'. [ 824.958160][T11584] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.958192][T11584] netdevsim netdevsim3 €Â: unset [1, 1] type 2 family 0 port 20000 - 0 [ 824.964788][T11584] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.964820][T11584] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 824.964853][T11584] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.964875][T11584] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 824.964905][T11584] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.964927][T11584] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 825.085368][T28566] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 825.237614][T28573] x_tables: unsorted entry at hook 3 [ 825.249121][T28574] x_tables: unsorted entry at hook 3 [ 825.402491][T28579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4963'. [ 825.428716][T28579] netlink: 'syz.2.4963': attribute type 1 has an invalid length. [ 825.606818][T28579] 8021q: adding VLAN 0 to HW filter on device bond5 [ 825.743601][T28585] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 825.763022][ T5722] tipc: Node number set to 2238394538 [ 825.909690][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 826.128742][T28609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 826.708099][T28630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4972'. [ 826.931270][T28630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.931296][T28630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.937972][T28630] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 826.938006][T28630] batman_adv: batadv0: Removing interface: ip6gretap1 [ 826.978457][T28630] batman_adv: batadv0: Removing interface: ipvlan2 [ 826.992638][T28630] batman_adv: batadv0: Removing interface: macvtap0 [ 827.588453][T28651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4980'. [ 827.625001][T28656] IPv6: NLM_F_CREATE should be specified when creating new route [ 827.946329][T28672] netlink: 'syz.4.4982': attribute type 1 has an invalid length. [ 828.190899][T28692] team_slave_0: entered allmulticast mode [ 828.998712][T28719] tipc: Resetting bearer [ 829.043660][T28719] erspan0: left promiscuous mode [ 829.822259][T28758] netlink: 'syz.1.5000': attribute type 10 has an invalid length. [ 829.948827][T28749] sctp: [Deprecated]: syz.2.4999 (pid 28749) Use of int in max_burst socket option deprecated. [ 829.948827][T28749] Use struct sctp_assoc_value instead [ 829.971094][T28758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 829.984151][T28764] netlink: 'syz.1.5000': attribute type 10 has an invalid length. [ 829.989295][T28758] team0: Port device netdevsim1 added [ 830.215415][T28764] team0: Port device netdevsim1 removed [ 830.237609][T28764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.325505][T28764] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 830.539483][T14661] syz1: Port: 1 Link ACTIVE [ 831.194752][T28804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5012'. [ 831.194786][T28804] macvlan0: left promiscuous mode [ 831.195061][T28804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5012'. [ 831.456636][T28812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5014'. [ 831.456664][T28812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5014'. [ 831.456678][T28812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5014'. [ 831.459287][T28812] syzkaller0: entered promiscuous mode [ 831.459305][T28812] syzkaller0: entered allmulticast mode [ 831.614362][T28817] syzkaller0: entered promiscuous mode [ 831.614407][T28817] syzkaller0: entered allmulticast mode [ 831.669670][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 831.698133][T28815] tipc: Enabled bearer , priority 0 [ 832.105255][T28827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5017'. [ 832.193789][T28814] tipc: Resetting bearer [ 832.710674][T28814] tipc: Disabling bearer [ 833.138503][T28850] netlink: 'syz.3.5023': attribute type 34 has an invalid length. [ 833.138524][T28850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5023'. [ 833.193544][T28853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5024'. [ 833.319236][T28854] smc: net device lo applied user defined pnetid SYZ0 [ 833.450191][T28857] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 833.494076][T28860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5026'. [ 833.494100][T28860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5026'. [ 833.808932][T28869] netlink: 'syz.4.5028': attribute type 7 has an invalid length. [ 833.808954][T28869] netlink: 'syz.4.5028': attribute type 3 has an invalid length. [ 834.518959][T28900] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 834.519063][T28900] syzkaller0: linktype set to 1 [ 834.709161][T28910] netlink: 'syz.0.5035': attribute type 9 has an invalid length. [ 834.759206][ T30] audit: type=1800 audit(1790579880.061:20): pid=28910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5035" name="memory.events" dev="tmpfs" ino=1860 res=0 errno=0 [ 835.231062][T28920] xt_hashlimit: max too large, truncated to 1048576 [ 835.360838][T28927] netlink: 'syz.1.5039': attribute type 1 has an invalid length. [ 835.511356][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 835.537646][T28927] 8021q: adding VLAN 0 to HW filter on device bond8 [ 835.939297][T28939] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 836.013500][T28946] netlink: 'syz.4.5046': attribute type 2 has an invalid length. [ 836.265744][T28952] __nla_validate_parse: 9 callbacks suppressed [ 836.265765][T28952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5045'. [ 836.306002][T28955] macsec0: entered promiscuous mode [ 836.306774][T28955] macsec0: left promiscuous mode [ 836.408658][T28952] netlink: 'syz.3.5045': attribute type 4 has an invalid length. [ 836.408681][T28952] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5045'. [ 836.431868][T28952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.629103][T28963] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5051'. [ 837.108611][T28975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5057'. [ 837.471686][T28983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5059'. [ 837.871349][T28992] syzkaller0: entered promiscuous mode [ 837.871373][T28992] syzkaller0: entered allmulticast mode [ 838.196325][T29002] netlink: 'syz.0.5065': attribute type 1 has an invalid length. [ 838.383376][T29002] bond12: option mode: invalid value (8) [ 838.463137][T29002] bond12 (unregistering): Released all slaves [ 838.495074][T29023] netlink: 'syz.0.5065': attribute type 10 has an invalid length. [ 838.495096][T29023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5065'. [ 838.935407][T29023] dummy0: entered promiscuous mode [ 839.080473][ T5722] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 839.164522][T29041] netlink: 'syz.4.5071': attribute type 3 has an invalid length. [ 839.707585][T29065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.780499][T29033] xt_policy: output policy not valid in PREROUTING and INPUT [ 839.915919][ T8223] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 839.916615][T29048] bond0 (unregistering): Released all slaves [ 839.971002][T11584] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 840.791519][T19914] block nbd0: Receive control failed (result -32) [ 840.791614][T19586] block nbd0: Receive control failed (result -32) [ 841.080163][T11581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 841.080426][T11581] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 841.277244][T29109] sctp: [Deprecated]: syz.1.5086 (pid 29109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 841.277244][T29109] Use struct sctp_sack_info instead [ 841.284569][T29105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5085'. [ 841.566939][T29091] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0 [ 841.830320][ T5722] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 842.358657][T29130] IPVS: Error connecting to the multicast addr [ 842.981493][T29152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5098'. [ 843.136516][T29151] xt_CT: No such helper "netbios-ns" [ 843.352933][T29159] netlink: 'syz.3.5099': attribute type 9 has an invalid length. [ 843.357366][ T30] audit: type=1800 audit(1790579888.661:21): pid=29159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5099" name="memory.events" dev="tmpfs" ino=2104 res=0 errno=0 [ 843.615695][T29170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5101'. [ 843.855366][T29181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5102'. [ 843.953272][T29183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5103'. [ 844.436821][T29161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5109'. [ 844.469950][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 844.488640][T29193] netlink: 'syz.1.5105': attribute type 3 has an invalid length. [ 844.727658][T29197] syzkaller0: entered promiscuous mode [ 844.727680][T29197] syzkaller0: entered allmulticast mode [ 844.864575][T29203] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5110'. [ 844.872847][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 844.888622][T29197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5106'. [ 845.162825][T29196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.234640][T29205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5110'. [ 845.234662][T29205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5110'. [ 845.382308][T29203] syzkaller0: entered promiscuous mode [ 845.382330][T29203] syzkaller0: entered allmulticast mode [ 845.611887][T29216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.613632][T29216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 845.625944][T29216] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 845.629336][T29222] vlan0: entered promiscuous mode [ 846.564328][T29238] xt_CT: No such helper "netbios-ns" [ 847.436929][T29250] x_tables: duplicate underflow at hook 2 [ 850.258019][T29253] __nla_validate_parse: 2 callbacks suppressed [ 850.258038][T29253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5120'. [ 850.665566][T29268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5124'. [ 850.665598][T29268] netlink: 'syz.4.5124': attribute type 6 has an invalid length. [ 851.008682][T29277] netlink: 'syz.2.5127': attribute type 2 has an invalid length. [ 851.145677][T29284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5129'. [ 851.300352][T29282] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 851.322932][T29282] bond0 (unregistering): Released all slaves [ 852.379913][T29318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5138'. [ 852.698365][T29326] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5141'. [ 852.789655][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 853.145972][T29340] ip_tables: iptables: counters copy to user failed while replacing table [ 853.249933][T29340] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 853.615451][T29363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5150'. [ 853.647190][T29363] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5150'. [ 853.650767][T29363] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 853.651287][T29363] netlink: 'syz.0.5150': attribute type 1 has an invalid length. [ 853.691307][T29363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.422857][T29383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5155'. [ 854.422929][T29383] netlink: 'syz.4.5155': attribute type 1 has an invalid length. [ 854.422942][T29383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5155'. [ 854.425684][T29376] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.432023][T29385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5155'. [ 854.433745][T29385] netlink: 'syz.4.5155': attribute type 1 has an invalid length. [ 854.552339][T29376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.554594][T29390] openvswitch: netlink: Multiple metadata blocks provided [ 854.791128][T29376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.808666][T29376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 854.808690][T29376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 854.836423][T29376] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 854.861453][T15059] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.861568][T15059] bridge0: port 1(bridge_slave_0) entered listening state [ 854.864886][T15059] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.864990][T15059] bridge0: port 2(bridge_slave_1) entered listening state [ 854.927643][T29379] netlink: 'syz.3.5153': attribute type 3 has an invalid length. [ 854.927896][T29379] netlink: 'syz.3.5153': attribute type 3 has an invalid length. [ 855.056052][T29383] bond11: invalid ARP target 0.0.0.0 specified for addition [ 855.056076][T29383] bond11: option arp_ip_target: invalid value (0) [ 855.133046][T29383] bond11 (unregistering): Released all slaves [ 855.303767][T29393] batadv0: entered promiscuous mode [ 855.303792][T29393] batadv0: entered allmulticast mode [ 855.305695][T29393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.448852][T29412] __nla_validate_parse: 5 callbacks suppressed [ 855.448870][T29412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5158'. [ 855.778230][T29433] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 857.238396][T29472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5171'. [ 857.266439][T29468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5174'. [ 857.269868][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 857.320176][T29475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5176'. [ 858.182324][T29503] netlink: 'syz.3.5184': attribute type 9 has an invalid length. [ 858.348750][T29514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5188'. [ 858.348804][T29514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5188'. [ 858.648799][T29519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5189'. [ 859.162039][T29540] netlink: 'syz.1.5193': attribute type 1 has an invalid length. [ 859.203427][T29540] bond9: entered promiscuous mode [ 859.204027][T29540] 8021q: adding VLAN 0 to HW filter on device bond9 [ 859.232601][T29540] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 859.256711][T29543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5192'. [ 859.257992][T29542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5192'. [ 859.293287][T29540] 8021q: adding VLAN 0 to HW filter on device bond9 [ 859.310295][T29540] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 859.310319][T29540] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 859.314618][T29540] bond9: (slave ip6gre2): making interface the new active one [ 859.314639][T29540] ip6gre2: entered promiscuous mode [ 859.315989][T29540] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 859.807878][T29555] bridge4: entered allmulticast mode [ 860.504118][T29575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5201'. [ 860.636238][T29578] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 860.653159][T29578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5202'. [ 860.976762][T29586] Cannot find add_set index 2 as target [ 861.007112][T29563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5198'. [ 861.102231][T29589] netlink: 'syz.4.5206': attribute type 30 has an invalid length. [ 861.268335][T29597] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 861.514132][T29601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5208'. [ 861.648314][T29601] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 861.675524][T29601] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 862.242905][T29630] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5214'. [ 862.780402][T29611] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5211'. [ 862.899415][ T30] audit: type=1800 audit(1790579908.201:22): pid=29648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5219" name="memory.events" dev="tmpfs" ino=2232 res=0 errno=0 [ 863.557621][T29661] gre0: left promiscuous mode [ 863.557644][T29661] gre0: left allmulticast mode [ 864.077580][T29665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5223'. [ 865.132016][T29661] vlan0: left promiscuous mode [ 865.291840][T29661] batman_adv: batadv0: Interface deactivated: macsec0 [ 865.390073][T29661] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 865.480285][T29661] batman_adv: batadv0: Interface deactivated: gretap1 [ 865.516055][T29661] bond1: left promiscuous mode [ 865.516079][T29661] bond1: left allmulticast mode [ 865.534863][T29661] geneve2: left promiscuous mode [ 865.535206][T29661] batman_adv: batadv0: Interface deactivated: gretap2 [ 865.596113][T29661] ip6tnl1: left allmulticast mode [ 865.611596][T29661] ipip1: left promiscuous mode [ 865.641606][T29661] ip6tnl2: left allmulticast mode [ 865.735370][T29661] vxlan1: left promiscuous mode [ 865.735414][T29661] vxlan1: left allmulticast mode [ 865.779153][T29661] bond7: left promiscuous mode [ 865.779177][T29661] bond7: left allmulticast mode [ 865.825062][T29661] bond9: left promiscuous mode [ 865.825085][T29661] ip6gre2: left promiscuous mode [ 865.859718][T15059] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.859752][T15059] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.020304][T11668] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.020340][T11668] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.024131][T11668] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.024161][T11668] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.024198][T11668] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.024221][T11668] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.130911][T29701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5230'. [ 866.130933][T29701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5230'. [ 866.345747][T29705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5232'. [ 866.535747][T29711] netlink: 'syz.4.5231': attribute type 1 has an invalid length. [ 866.766216][T29711] 8021q: adding VLAN 0 to HW filter on device bond12 [ 866.935758][T29715] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 867.346329][T29734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5237'. [ 867.595772][T29744] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 867.841155][T29747] pim6reg: entered allmulticast mode [ 868.150155][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 868.642811][T29760] ovs-s: entered promiscuous mode [ 869.321488][T29775] xt_CT: No such helper "snmp" [ 869.476858][T29782] syzkaller0: entered promiscuous mode [ 869.477038][T29782] syzkaller0: entered allmulticast mode [ 869.574905][T29796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5255'. [ 869.602595][T29791] xt_hl: Unknown Hop Limit match mode: 4 [ 870.208625][T29810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5258'. [ 870.208660][T29810] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5258'. [ 870.949115][T29804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5256'. [ 871.023350][T29839] gre4: entered promiscuous mode [ 871.339236][T29843] syzkaller0: entered promiscuous mode [ 871.339259][T29843] syzkaller0: entered allmulticast mode [ 871.533548][T29849] No such timeout policy "syz1" [ 871.713547][T29858] macvlan0: entered promiscuous mode [ 871.952457][T29865] syzkaller0: entered promiscuous mode [ 871.952479][T29865] syzkaller0: entered allmulticast mode [ 872.367693][T29884] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5280'. [ 872.380880][T29884] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5280'. [ 872.684316][T29895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5283'. [ 872.684342][T29895] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5283'. [ 872.906627][T29901] netlink: 'syz.3.5284': attribute type 16 has an invalid length. [ 872.906649][T29901] netlink: 'syz.3.5284': attribute type 17 has an invalid length. [ 872.936176][T29901] lo: left promiscuous mode [ 872.975803][T29901] tunl0: left promiscuous mode [ 873.034805][T29901] gre0: left promiscuous mode [ 873.122171][T29901] gretap0: left promiscuous mode [ 873.250199][T29901] erspan0: left promiscuous mode [ 873.299426][T29901] ip_vti0: left promiscuous mode [ 873.394484][T29901] ip6_vti0: left promiscuous mode [ 873.481936][T29901] sit0: left promiscuous mode [ 873.623392][T29901] ip6tnl0: left promiscuous mode [ 873.699305][T29887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5281'. [ 874.125813][T29901] ip6gre0: left promiscuous mode [ 874.254214][T29901] ip6gretap0: left promiscuous mode [ 874.299231][T29901] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.299493][T29901] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.368207][T29901] bond0: left promiscuous mode [ 874.393529][T29901] team0: left promiscuous mode [ 874.512787][T29901] nlmon0: left promiscuous mode [ 874.526559][T29901] batadv0: left promiscuous mode [ 874.564109][T29901] veth0: left promiscuous mode [ 874.608547][T29901] veth1: left promiscuous mode [ 874.651465][T29901] wg0: left promiscuous mode [ 874.721472][T29901] wg1: left promiscuous mode [ 874.747343][T29901] wg2: left promiscuous mode [ 874.756421][T29901] veth0_to_bridge: left promiscuous mode [ 874.808499][T29901] veth1_to_bridge: left promiscuous mode [ 874.860499][T29901] veth0_to_bond: left promiscuous mode [ 874.896932][T29901] bond_slave_0: left promiscuous mode [ 874.913678][T29901] veth1_to_bond: left promiscuous mode [ 874.929018][T29901] bond_slave_1: left promiscuous mode [ 874.946615][T29901] veth0_to_team: left promiscuous mode [ 874.963729][T29901] team_slave_0: left promiscuous mode [ 874.981608][T29901] veth1_to_team: left promiscuous mode [ 875.002930][T29901] team_slave_1: left promiscuous mode [ 875.024032][T29901] veth0_to_batadv: left promiscuous mode [ 875.046976][T29901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.132304][T29901] batadv_slave_0: left promiscuous mode [ 875.148095][T29901] xfrm0: left promiscuous mode [ 875.177683][T29901] veth0_to_hsr: left promiscuous mode [ 875.219237][T29901] veth1_to_hsr: left promiscuous mode [ 875.260212][T29901] hsr0: left promiscuous mode [ 875.282013][T29901] veth1_virt_wifi: left promiscuous mode [ 875.303354][T29901] veth0_virt_wifi: left promiscuous mode [ 875.325495][T29901] virt_wifi0: left promiscuous mode [ 875.325809][T29901] vlan0: left promiscuous mode [ 875.326074][T29901] vlan1: left promiscuous mode [ 875.326086][T29901] v: left promiscuous mode [ 875.327496][T29901] macvlan1: left promiscuous mode [ 875.327655][T29901] ipvlan0: left promiscuous mode [ 875.327799][T29901] ipvlan1: left promiscuous mode [ 875.328586][T29901] geneve0: left promiscuous mode [ 875.328735][T29901] geneve1: left promiscuous mode [ 875.335243][T29901] netdevsim netdevsim3 €Â: left promiscuous mode [ 875.335262][T29901] netdevsim netdevsim3 €Â: left allmulticast mode [ 875.335393][T29901] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 875.335518][T29901] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 875.335635][T29901] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 875.335755][T29901] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 875.335900][T29901] mac80211_hwsim hwsim44 wlan1: left promiscuous mode [ 875.336043][T29901] macvlan2: left promiscuous mode [ 875.336155][T29901] macvlan3: left promiscuous mode [ 875.336258][T29901] veth2: left promiscuous mode [ 875.450543][T29901] veth3: left promiscuous mode [ 875.450708][T29901] gretap1: left promiscuous mode [ 875.450824][T29901] ip6tnl1: left promiscuous mode [ 875.450955][T29901] bond1: left promiscuous mode [ 875.450968][T29901] bond1: left allmulticast mode [ 875.451085][T29901] bond2: left promiscuous mode [ 875.451098][T29901] syz_tun: left promiscuous mode [ 875.451346][T29901] bond3: left promiscuous mode [ 875.451460][T29901] gre1: left promiscuous mode [ 875.451570][T29901] erspan1: left promiscuous mode [ 875.453560][T29901] bridge0.257: left promiscuous mode [ 875.453577][T29901] bridge0: left promiscuous mode [ 875.530887][T29901] macvlan4: left promiscuous mode [ 875.531028][T29901] bond4: left promiscuous mode [ 875.531174][T29901] veth4: left promiscuous mode [ 875.531324][T29901] veth5: left promiscuous mode [ 875.531467][T29901] veth6: left promiscuous mode [ 875.531610][T29901] veth7: left promiscuous mode [ 875.531754][T29901] veth8: left promiscuous mode [ 875.534952][T29901] veth9: left promiscuous mode [ 875.534967][T29901] veth9: left allmulticast mode [ 875.535120][T29901] veth10: left promiscuous mode [ 875.535265][T29901] veth11: left promiscuous mode [ 875.535407][T29901] vxcan0: left promiscuous mode [ 875.535549][T29901] vxcan1: left promiscuous mode [ 875.535690][T29901] dummy1: left promiscuous mode [ 875.535840][T29901] vxlan0: left promiscuous mode [ 875.535955][T29901] bridge1: left promiscuous mode [ 875.536084][T29901] mac80211_hwsim hwsim69 wlan2: left promiscuous mode [ 875.536237][T29901] bond5: left promiscuous mode [ 875.554629][T29901] bond6: left promiscuous mode [ 875.556124][T29901] geneve2: left promiscuous mode [ 875.556957][T29901] ip6erspan0: left promiscuous mode [ 875.558127][T29901] bond7: left promiscuous mode [ 875.560009][T29901] bridge2: left promiscuous mode [ 875.561105][T29901] bridge3: left promiscuous mode [ 875.563779][T29901] veth12: left promiscuous mode [ 875.564899][T29901] veth13: left promiscuous mode [ 875.565727][T29901] ip6tnl2: left promiscuous mode [ 875.569561][T29901] bridge_slave_1.: left promiscuous mode [ 875.623244][T29901] bridge4: left allmulticast mode [ 875.997051][T29958] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5292'. [ 875.997078][T29958] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5292'. [ 875.997092][T29958] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5292'. [ 876.047347][T29959] netlink: 'syz.4.5291': attribute type 4 has an invalid length. [ 876.047368][T29959] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5291'. [ 876.068827][T29956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5291'. [ 876.127731][T29962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 877.446533][T30006] __nla_validate_parse: 5 callbacks suppressed [ 877.446556][T30006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5302'. [ 877.538070][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804aeafc00: rx timeout, send abort [ 877.538395][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804aeafc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 877.686751][T30011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5303'. [ 877.686773][T30011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5303'. [ 877.716332][T30011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5303'. [ 877.716354][T30011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5303'. [ 878.032353][T30026] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 878.513712][T30046] netlink: 'syz.0.5310': attribute type 10 has an invalid length. [ 878.578349][T30046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 878.747613][T30050] xt_l2tp: missing protocol rule (udp|l2tpip) [ 878.748866][T30050] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 878.748899][T30050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.204776][T30055] netlink: 'syz.1.5312': attribute type 1 has an invalid length. [ 879.251393][T30058] netlink: 'syz.3.5314': attribute type 21 has an invalid length. [ 879.251470][T30058] netlink: 'syz.3.5314': attribute type 3 has an invalid length. [ 879.251481][T30058] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5314'. [ 879.753524][T30073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5316'. [ 880.457093][T30111] netlink: 'syz.0.5325': attribute type 10 has an invalid length. [ 880.515214][T30080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5319'. [ 880.958007][T30119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5328'. [ 881.370472][T30137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5334'. [ 881.573707][T30139] x_tables: duplicate entry at hook 3 [ 882.705962][T30168] __nla_validate_parse: 1 callbacks suppressed [ 882.705982][T30168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5341'. [ 882.860470][T30204] ipip1: entered allmulticast mode [ 883.196494][T30212] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5353'. [ 883.218819][T30212] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5353'. [ 883.281156][T30214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5353'. [ 883.393798][T30221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5353'. [ 883.393831][T30221] netlink: 34 bytes leftover after parsing attributes in process `syz.4.5353'. [ 883.809817][T30213] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5353'. [ 884.500400][T30237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5356'. [ 884.588822][T30239] ip6t_srh: unknown srh match flags 4000 [ 885.799759][T30279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5364'. [ 885.919040][T30289] netlink: 'syz.3.5366': attribute type 1 has an invalid length. [ 885.919065][T30289] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5366'. [ 885.919080][T30289] netlink: 'syz.3.5366': attribute type 1 has an invalid length. [ 886.695682][T30321] batman_adv: batadv0: Adding interface: macvtap1 [ 886.695701][T30321] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.695726][T30321] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 888.508857][T30393] tipc: Enabled bearer , priority 26 [ 889.108059][T30384] __nla_validate_parse: 6 callbacks suppressed [ 889.108078][T30384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5387'. [ 889.164503][T30420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5395'. [ 889.164534][T30420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5395'. [ 889.164550][T30420] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 889.751726][T14665] tipc: Node number set to 59 [ 889.961578][T30430] syzkaller1: entered promiscuous mode [ 889.961769][T30430] syzkaller1: entered allmulticast mode [ 890.199754][T30442] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 890.972555][T30463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5404'. [ 891.162024][T30484] netlink: 'syz.4.5408': attribute type 46 has an invalid length. [ 891.271412][T30480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5407'. [ 891.339366][T30487] netlink: 'syz.4.5410': attribute type 1 has an invalid length. [ 891.557768][T30493] bond13: (slave veth5): Enslaving as an active interface with a down link [ 891.637293][T30497] bond13: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 891.641973][T30500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5412'. [ 891.724384][T30507] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 891.724501][T30507] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 891.981797][T30500] vxcan2: entered allmulticast mode [ 892.043772][T30514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5414'. [ 892.043799][T30514] nbd: socks must be embedded in a SOCK_ITEM attr [ 892.167381][T30503] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 892.185993][T30501] tipc: Resetting bearer [ 892.270854][T30516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5415'. [ 892.310295][T30516] netlink: 'syz.2.5415': attribute type 4 has an invalid length. [ 892.310319][T30516] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5415'. [ 892.503933][T30521] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5417'. [ 893.203553][T30555] netdevsim netdevsim2 €Â: renamed from netdevsim0 (while UP) [ 894.056401][T30563] netlink: 'syz.2.5426': attribute type 83 has an invalid length. [ 894.121567][T30566] netlink: 'syz.1.5427': attribute type 14 has an invalid length. [ 894.466558][T30558] __nla_validate_parse: 2 callbacks suppressed [ 894.466579][T30558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5425'. [ 894.502112][T30578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5430'. [ 894.659051][T30582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 894.773687][T30587] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 894.931830][T30593] netlink: 'syz.3.5433': attribute type 7 has an invalid length. [ 894.938434][T30593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5433'. [ 895.501897][T30599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5437'. [ 896.351901][T30624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5444'. [ 896.876817][T30638] syzkaller0: left promiscuous mode [ 896.876842][T30638] syzkaller0: left allmulticast mode [ 897.058782][T30623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5446'. [ 897.583220][T30659] bridge0: entered allmulticast mode [ 897.690242][T30661] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5454'. [ 897.696835][T30659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5454'. [ 898.021246][T30668] batman_adv: batadv0: Adding interface: veth0 [ 898.021262][T30668] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.021296][T30668] batman_adv: batadv0: Interface activated: veth0 [ 898.229738][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 898.414588][T30687] netlink: 'syz.0.5461': attribute type 2 has an invalid length. [ 898.577189][T30697] ovs-s!: entered promiscuous mode [ 899.016556][T19586] block nbd3: Wrong magic (0xc19c60e) [ 899.047043][T30704] nbd3: detected capacity change from 0 to 63 [ 899.052639][ T2473] block nbd3: Dead connection, failed to find a fallback [ 899.052663][ T2473] block nbd3: shutting down sockets [ 899.052761][ T2473] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 899.052864][ T2473] Buffer I/O error on dev nbd3, logical block 0, async page read [ 899.060302][ T2473] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 899.060332][ T2473] Buffer I/O error on dev nbd3, logical block 1, async page read [ 899.060435][ T2473] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 899.060457][ T2473] Buffer I/O error on dev nbd3, logical block 2, async page read [ 899.060570][ T2473] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 899.060591][ T2473] Buffer I/O error on dev nbd3, logical block 3, async page read [ 899.061062][ T2473] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 899.061087][ T2473] Buffer I/O error on dev nbd3, logical block 0, async page read [ 899.061176][ T2473] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 899.061198][ T2473] Buffer I/O error on dev nbd3, logical block 1, async page read [ 899.061292][ T2473] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 899.061314][ T2473] Buffer I/O error on dev nbd3, logical block 2, async page read [ 899.061398][ T2473] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 899.061420][ T2473] Buffer I/O error on dev nbd3, logical block 3, async page read [ 899.061514][ T2473] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 899.061535][ T2473] Buffer I/O error on dev nbd3, logical block 0, async page read [ 899.061624][ T2473] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 899.061652][ T2473] Buffer I/O error on dev nbd3, logical block 1, async page read [ 899.127607][T29257] ldm_validate_partition_table(): Disk read failed. [ 899.128189][T29257] Dev nbd3: unable to read RDB block 0 [ 899.154052][T29257] nbd3: unable to read partition table [ 899.303476][T29257] ldm_validate_partition_table(): Disk read failed. [ 899.310413][T29257] Dev nbd3: unable to read RDB block 0 [ 899.402306][T29257] nbd3: unable to read partition table [ 899.673640][T30724] netlink: 'syz.0.5470': attribute type 4 has an invalid length. [ 899.675562][T30725] netlink: 'syz.0.5470': attribute type 4 has an invalid length. [ 899.723280][T30701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5465'. [ 899.724515][T30726] netlink: 'syz.0.5470': attribute type 4 has an invalid length. [ 899.835799][T30724] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 900.157985][T30744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5472'. [ 900.460141][T30753] x_tables: duplicate entry at hook 1 [ 900.648540][T30762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5477'. [ 900.789969][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 901.138214][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5479'. [ 901.796764][T30802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5484'. [ 902.330594][T30808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5487'. [ 902.402348][T30800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5485'. [ 902.411895][T30809] No such timeout policy "s" [ 902.411910][T30809] netlink: Failed to associated timeout policy 's' [ 902.412627][T30811] No such timeout policy "s" [ 902.412638][T30811] netlink: Failed to associated timeout policy 's' [ 902.907543][T30823] xt_CT: No such helper "snmp" [ 902.974902][T30840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5492'. [ 903.038333][T30835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5492'. [ 903.231704][T30848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5496'. [ 903.340274][T11668] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.340336][T11668] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.340369][T11668] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.153858][T30915] batadv_slave_0: entered allmulticast mode [ 905.157634][T30915] __nla_validate_parse: 7 callbacks suppressed [ 905.157651][T30915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5514'. [ 905.157985][T30915] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 905.909905][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 906.343008][T30953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5519'. [ 906.362197][T30952] netlink: 'syz.3.5520': attribute type 8 has an invalid length. [ 906.408295][T30952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5520'. [ 906.579283][T30952] veth15: entered allmulticast mode [ 906.928274][T30968] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 906.988298][T30974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 907.189489][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 907.227235][T30964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5522'. [ 907.773461][T31001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5532'. [ 907.775519][T31003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5532'. [ 907.933627][T31011] netlink: 'syz.1.5535': attribute type 10 has an invalid length. [ 907.937115][T31011] bond0: (slave netdevsim1): Releasing backup interface [ 907.968633][T31011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 907.975146][T31008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5537'. [ 907.975617][T31008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5537'. [ 907.976050][T31008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5537'. [ 907.976513][T31008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5537'. [ 908.023993][T31011] team0: Port device netdevsim1 added [ 908.024108][ T8225] syz1: Port: 1 Link DOWN [ 908.024577][T31017] SET target dimension over the limit! [ 908.035791][T31011] netlink: 'syz.1.5535': attribute type 10 has an invalid length. [ 908.200654][T31011] team0: Port device netdevsim1 removed [ 908.229546][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 908.237641][T31011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 908.256626][T31011] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 908.515441][T31032] netlink: 'syz.3.5539': attribute type 2 has an invalid length. [ 908.933606][T31046] syzkaller0: entered promiscuous mode [ 908.933629][T31046] syzkaller0: entered allmulticast mode [ 909.269527][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 910.309528][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 910.933229][T31116] __nla_validate_parse: 33 callbacks suppressed [ 910.933250][T31116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5560'. [ 910.936781][T31115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.947882][T31116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5560'. [ 910.950237][T31116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5560'. [ 910.950259][T31116] block nbd4: Unsupported socket: should be TCP or UNIX. [ 910.960907][T31116] netlink: 'syz.2.5560': attribute type 1 has an invalid length. [ 911.087737][T31116] bond6: (slave veth5): Enslaving as an active interface with a down link [ 911.283964][T31124] bond6: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 911.349608][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 911.419357][T31127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5563'. [ 911.596843][T31135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 911.971789][T31144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5568'. [ 912.257368][T31131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5564'. [ 912.389493][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 913.429477][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 914.469471][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 915.219906][T31189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5578'. [ 915.254967][T31190] ip_tables: iptables: counters copy to user failed while replacing table [ 915.509477][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 915.552958][T31176] syzkaller0: entered promiscuous mode [ 915.552982][T31176] syzkaller0: entered allmulticast mode [ 915.842926][T31204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5583'. [ 916.549557][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 916.785777][T31221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5589'. [ 916.863065][T31221] 8021q: adding VLAN 0 to HW filter on device bond14 [ 917.440286][T31231] No such timeout policy "syz1" [ 917.465997][T31231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5591'. [ 917.569888][T31232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5594'. [ 917.589493][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 917.647623][T31243] Bluetooth: hci0: unsupported parameter 5135 [ 917.647644][T31243] Bluetooth: hci0: unsupported parameter 8192 [ 917.647657][T31243] Bluetooth: hci0: unsupported parameter 5135 [ 917.647669][T31243] Bluetooth: hci0: unsupported parameter 8192 [ 918.629596][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 919.669521][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 920.709546][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 920.968493][T31238] tipc: Enabling of bearer rejected, failed to enable media [ 920.990805][T31240] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5595'. [ 921.269566][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 921.335363][T31256] lo: entered promiscuous mode [ 921.420946][T31256] tunl0: entered promiscuous mode [ 921.422823][T31256] tipc: Resetting bearer [ 921.423034][T31256] tipc: Resetting bearer [ 921.423082][T31256] gre0: entered promiscuous mode [ 921.462578][T31256] gretap0: entered promiscuous mode [ 921.476572][T31256] erspan0: entered promiscuous mode [ 921.477539][T31264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5596'. [ 921.496244][T31256] ip_vti0: entered promiscuous mode [ 921.498047][T31256] ip6_vti0: entered promiscuous mode [ 921.517865][T31256] sit0: entered promiscuous mode [ 921.749800][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 921.770452][T31256] ip6tnl0: entered promiscuous mode [ 921.779085][T31256] ip6gre0: entered promiscuous mode [ 921.853454][T31256] syz_tun: entered promiscuous mode [ 921.870778][T31256] ip6gretap0: entered promiscuous mode [ 922.112471][T31274] openvswitch: netlink: Message has 8 unknown bytes. [ 922.172156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 922.264290][T31277] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 922.682826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 922.789466][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.946091][T31304] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 922.998907][T31304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5608'. [ 922.998928][T31304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5608'. [ 923.012112][T31305] netlink: 'syz.1.5608': attribute type 219 has an invalid length. [ 923.033004][T31307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5609'. [ 923.329547][ T1049] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.329591][ T1049] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.329621][ T1049] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.329751][ T1049] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.539796][T31322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5613'. [ 923.549328][T31320] batadv_slave_1: entered promiscuous mode [ 923.566226][T31320] batadv_slave_1: left promiscuous mode [ 923.608861][T31327] netlink: 'syz.1.5614': attribute type 1 has an invalid length. [ 923.608885][T31327] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5614'. [ 923.824500][T31335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5615'. [ 923.824535][T31335] netlink: 'syz.1.5615': attribute type 10 has an invalid length. [ 923.829554][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 923.870359][T31335] netlink: 'syz.1.5615': attribute type 1 has an invalid length. [ 923.963972][T31340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5615'. [ 924.022721][T31338] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5617'. [ 924.669747][T31367] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5622'. [ 924.683959][T31364] syzkaller0: entered promiscuous mode [ 924.684149][T31364] syzkaller0: entered allmulticast mode [ 924.822351][T31372] pim6reg: left allmulticast mode [ 924.869589][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 924.898167][T31367] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5622'. [ 925.637512][T31396] netlink: 'syz.2.5628': attribute type 7 has an invalid length. [ 925.909487][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 926.949583][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 927.819242][T31463] netlink: 'syz.0.5636': attribute type 10 has an invalid length. [ 927.836849][T31463] dummy0: left promiscuous mode [ 927.989924][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 928.998380][T31491] __nla_validate_parse: 5 callbacks suppressed [ 928.998400][T31491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5643'. [ 928.998428][T31491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5643'. [ 929.029843][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 929.188801][T31501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5646'. [ 929.224918][T31502] bridge0: port 1(veth0) entered blocking state [ 929.225076][T31502] bridge0: port 1(veth0) entered disabled state [ 929.225249][T31502] veth0: entered allmulticast mode [ 929.258051][T31502] veth0: entered promiscuous mode [ 929.310965][T31505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 929.311005][T31505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 929.311031][T31505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 929.311057][T31505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 929.311083][T31505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 929.311107][T31505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 929.311133][T31505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 929.311158][T31505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 929.311183][T31505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 929.311209][T31505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 929.826433][T31516] netlink: 'syz.0.5647': attribute type 4 has an invalid length. [ 930.004429][T31529] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5651'. [ 930.004771][T31529] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5651'. [ 930.005037][T31529] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5651'. [ 930.005300][T31529] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5651'. [ 930.005568][T31529] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5651'. [ 930.005844][T31529] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5651'. [ 930.069570][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 930.090748][T31529] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5651'. [ 930.133810][T31521] bond10: option all_slaves_active: invalid value (255) [ 930.246927][T31521] bond10 (unregistering): Released all slaves [ 930.717340][T31552] netlink: 'syz.3.5655': attribute type 1 has an invalid length. [ 930.796335][T31552] bond10: entered promiscuous mode [ 930.825373][T31552] 8021q: adding VLAN 0 to HW filter on device bond10 [ 930.893323][T31558] 8021q: adding VLAN 0 to HW filter on device bond10 [ 930.893735][T31558] bond10: (slave gre2): The slave device specified does not support setting the MAC address [ 930.893755][T31558] bond10: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 930.942893][T31558] bond10: (slave gre2): making interface the new active one [ 930.942919][T31558] gre2: entered promiscuous mode [ 930.945042][T31558] bond10: (slave gre2): Enslaving as an active interface with an up link [ 931.017906][T31558] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000 [ 931.109569][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 931.339278][T31552] bond10 (unregistering): (slave gre2): Releasing backup interface [ 931.339306][T31552] gre2: left promiscuous mode [ 931.375825][T31552] bond10 (unregistering): Released all slaves [ 931.459173][T31566] bridge12: entered allmulticast mode [ 931.979052][T31595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 932.149788][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 933.036771][T31616] tipc: Failed to remove unknown binding: 66,1,1/1999291323:335538136/335538138 [ 933.037553][T31613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.189488][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 933.363538][T31631] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 933.823356][T31650] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 933.839963][T31614] tipc: Failed to remove unknown binding: 66,1,1/1999291323:335538136/335538138 [ 933.840148][T31614] tipc: Failed to remove unknown binding: 66,1,1/1999291323:335538136/335538138 [ 934.229539][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 934.278301][T31665] __nla_validate_parse: 33 callbacks suppressed [ 934.278320][T31665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5681'. [ 934.415282][T31670] netlink: 'syz.0.5684': attribute type 6 has an invalid length. [ 934.533108][T31676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5687'. [ 934.754704][T31684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5689'. [ 935.233705][T31704] syzkaller1: entered promiscuous mode [ 935.233729][T31704] syzkaller1: entered allmulticast mode [ 935.269744][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 936.208192][T31717] ip_tables: iptables: counters copy to user failed while replacing table [ 936.309728][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 936.544268][T31733] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 936.544294][T31733] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 936.853919][T31744] netlink: 212 bytes leftover after parsing attributes in process `syz.3.5707'. [ 937.302321][T31761] bond0: invalid NS target ff00:0:0:f9:: specified for addition [ 937.302348][T31761] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 937.349696][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 937.734436][T31769] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5715'. [ 937.865638][T31773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5713'. [ 937.932675][T31773] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 937.961853][T31775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5712'. [ 938.389744][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 938.652194][T19914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.675580][T19914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.677463][T19914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.687398][T19914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.702721][T19914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 938.825383][T19586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.829712][T19586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.846273][T19586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.853719][T19586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.854975][T19586] Bluetooth: hci1: unexpected cc 0x0c38 len ** replaying previous printk message ** [ 938.854975][T19586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 938.867275][T19586] [ 938.880679][T19586] ====================================================== [ 938.887690][T19586] WARNING: possible circular locking dependency detected [ 938.894732][T19586] syzkaller #0 Not tainted [ 938.899151][T19586] ------------------------------------------------------ [ 938.906169][T19586] kworker/u9:0/19586 is trying to acquire lock: [ 938.912412][T19586] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 938.922872][T19586] [ 938.922872][T19586] but task is already holding lock: [ 938.930239][T19586] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 938.930369][T31800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5720'. [ 938.930385][T31800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5720'. [ 938.930769][T31800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5720'. [ 938.966090][T19586] [ 938.966090][T19586] which lock already depends on the new lock. [ 938.966090][T19586] [ 938.976486][T19586] [ 938.976486][T19586] the existing dependency chain (in reverse order) is: [ 938.985489][T19586] [ 938.985489][T19586] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 938.993467][T19586] down_write+0x96/0x200 [ 938.998226][T19586] kernfs_add_one+0x41/0x6f0 [ 939.003322][T19586] kernfs_create_dir_ns+0x1a1/0x230 [ 939.009027][T19586] internal_create_group+0x440/0x1180 [ 939.014904][T19586] cpuhp_invoke_callback+0x434/0x810 [ 939.020702][T19586] cpuhp_issue_call+0x3f0/0x750 [ 939.026065][T19586] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 939.032644][T19586] __cpuhp_setup_state+0x3f/0x60 [ 939.038088][T19586] do_one_initcall+0x250/0x870 [ 939.043365][T19586] do_initcall_level+0x10a/0x1a0 [ 939.048808][T19586] do_initcalls+0x59/0xa0 [ 939.053640][T19586] kernel_init_freeable+0x29d/0x3e0 [ 939.059342][T19586] kernel_init+0x22/0x1d0 [ 939.064175][T19586] ret_from_fork+0x514/0xb70 [ 939.069277][T19586] ret_from_fork_asm+0x1a/0x30 [ 939.074556][T19586] [ 939.074556][T19586] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 939.082363][T19586] [ 939.082363][T19586] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 939.090072][T19586] cpus_read_lock+0x42/0x160 [ 939.095176][T19586] static_key_slow_inc+0x12/0x30 [ 939.100621][T19586] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 939.106852][T19586] nbd_genl_foreach_sock+0x265/0x450 [ 939.112645][T19586] nbd_genl_reconfigure+0xbbb/0x1040 [ 939.118432][T19586] genl_family_rcv_msg_doit+0x233/0x340 [ 939.124489][T19586] genl_rcv_msg+0x614/0x7a0 [ 939.129505][T19586] netlink_rcv_skb+0x226/0x4a0 [ 939.134775][T19586] genl_rcv+0x28/0x40 [ 939.139264][T19586] netlink_unicast+0x7bd/0x940 [ 939.144540][T19586] netlink_sendmsg+0x813/0xb40 [ 939.149811][T19586] sock_sendmsg_nosec+0x13a/0x180 [ 939.155337][T19586] ____sys_sendmsg+0x54e/0x850 [ 939.160611][T19586] ___sys_sendmsg+0x2a5/0x360 [ 939.165797][T19586] __x64_sys_sendmsg+0x1b1/0x290 [ 939.171244][T19586] do_syscall_64+0x166/0x520 [ 939.176345][T19586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.182742][T19586] [ 939.182742][T19586] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 939.190370][T19586] __mutex_lock+0x19d/0x1550 [ 939.195470][T19586] nbd_queue_rq+0x373/0xff0 [ 939.200478][T19586] blk_mq_dispatch_rq_list+0x499/0x1990 [ 939.206532][T19586] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 939.213365][T19586] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 939.219861][T19586] blk_mq_run_work_fn+0x16c/0x300 [ 939.225413][T19586] process_scheduled_works+0xc3d/0x1630 [ 939.231474][T19586] worker_thread+0xa47/0xfb0 [ 939.236573][T19586] kthread+0x38b/0x480 [ 939.241146][T19586] ret_from_fork+0x514/0xb70 [ 939.246240][T19586] ret_from_fork_asm+0x1a/0x30 [ 939.251512][T19586] [ 939.251512][T19586] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 939.258709][T19586] __mutex_lock+0x19d/0x1550 [ 939.263808][T19586] nbd_queue_rq+0xc1/0xff0 [ 939.268731][T19586] blk_mq_dispatch_rq_list+0x499/0x1990 [ 939.274785][T19586] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 939.281621][T19586] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 939.288110][T19586] blk_mq_run_work_fn+0x16c/0x300 [ 939.293643][T19586] process_scheduled_works+0xc3d/0x1630 [ 939.299700][T19586] worker_thread+0xa47/0xfb0 [ 939.304797][T19586] kthread+0x38b/0x480 [ 939.309371][T19586] ret_from_fork+0x514/0xb70 [ 939.314470][T19586] ret_from_fork_asm+0x1a/0x30 [ 939.319751][T19586] [ 939.319751][T19586] -> #4 (set->srcu){.+.+}-{0:0}: [ 939.326875][T19586] __synchronize_srcu+0xc9/0x2f0 [ 939.332322][T19586] elevator_switch+0x1e8/0x7b0 [ 939.337590][T19586] elevator_change+0x2fa/0x480 [ 939.342860][T19586] elevator_set_default+0x375/0x440 [ 939.348562][T19586] blk_register_queue+0x3f3/0x4e0 [ 939.354101][T19586] __add_disk+0x6b8/0xdb0 [ 939.358936][T19586] add_disk_fwnode+0x100/0x3a0 [ 939.364204][T19586] nbd_dev_add+0x733/0xb60 [ 939.369123][T19586] nbd_init+0x168/0x1f0 [ 939.373790][T19586] do_one_initcall+0x250/0x870 [ 939.379065][T19586] do_initcall_level+0x10a/0x1a0 [ 939.384517][T19586] do_initcalls+0x59/0xa0 [ 939.389349][T19586] kernel_init_freeable+0x29d/0x3e0 [ 939.395051][T19586] kernel_init+0x22/0x1d0 [ 939.399886][T19586] ret_from_fork+0x514/0xb70 [ 939.404982][T19586] ret_from_fork_asm+0x1a/0x30 [ 939.410254][T19586] [ 939.410254][T19586] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 939.418056][T19586] __mutex_lock+0x19d/0x1550 [ 939.423164][T19586] elevator_change+0x1af/0x480 [ 939.428436][T19586] elevator_set_none+0xb5/0x140 [ 939.433791][T19586] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 939.440105][T19586] nbd_start_device+0x189/0xb30 [ 939.445459][T19586] nbd_genl_connect+0x167d/0x1cd0 [ 939.450985][T19586] genl_family_rcv_msg_doit+0x233/0x340 [ 939.457037][T19586] genl_rcv_msg+0x614/0x7a0 [ 939.462048][T19586] netlink_rcv_skb+0x226/0x4a0 [ 939.467316][T19586] genl_rcv+0x28/0x40 [ 939.471808][T19586] netlink_unicast+0x7bd/0x940 [ 939.477087][T19586] netlink_sendmsg+0x813/0xb40 [ 939.482355][T19586] sock_sendmsg_nosec+0x13a/0x180 [ 939.487886][T19586] ____sys_sendmsg+0x54e/0x850 [ 939.493157][T19586] ___sys_sendmsg+0x2a5/0x360 [ 939.498350][T19586] __x64_sys_sendmsg+0x1b1/0x290 [ 939.503797][T19586] do_syscall_64+0x166/0x520 [ 939.508895][T19586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.515291][T19586] [ 939.515291][T19586] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 939.523880][T19586] blk_alloc_queue+0x544/0x690 [ 939.529155][T19586] __blk_mq_alloc_disk+0x194/0x390 [ 939.534774][T19586] nbd_dev_add+0x494/0xb60 [ 939.539702][T19586] nbd_init+0x168/0x1f0 [ 939.544367][T19586] do_one_initcall+0x250/0x870 [ 939.549647][T19586] do_initcall_level+0x10a/0x1a0 [ 939.555088][T19586] do_initcalls+0x59/0xa0 [ 939.559919][T19586] kernel_init_freeable+0x29d/0x3e0 [ 939.565622][T19586] kernel_init+0x22/0x1d0 [ 939.570455][T19586] ret_from_fork+0x514/0xb70 [ 939.575550][T19586] ret_from_fork_asm+0x1a/0x30 [ 939.580825][T19586] [ 939.580825][T19586] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 939.588015][T19586] fs_reclaim_acquire+0x71/0x100 [ 939.593455][T19586] kmem_cache_alloc_noprof+0x5f/0x600 [ 939.599335][T19586] __kernfs_iattrs+0xdd/0x380 [ 939.604516][T19586] kernfs_iop_setattr+0xe6/0x3f0 [ 939.609962][T19586] notify_change+0xbba/0xea0 [ 939.615063][T19586] do_truncate+0x1c2/0x250 [ 939.619990][T19586] path_openat+0x15b5/0x1d60 [ 939.625091][T19586] do_file_open+0x23e/0x4a0 [ 939.630095][T19586] do_sys_openat2+0x115/0x200 [ 939.635276][T19586] __x64_sys_openat+0x138/0x170 [ 939.640633][T19586] do_syscall_64+0x166/0x520 [ 939.645732][T19586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.652129][T19586] [ 939.652129][T19586] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 939.660626][T19586] __lock_acquire+0x164c/0x2de0 [ 939.665982][T19586] lock_acquire+0x115/0x350 [ 939.670986][T19586] down_write+0x96/0x200 [ 939.675738][T19586] kernfs_link_sibling+0x4c7/0x5a0 [ 939.681353][T19586] kernfs_add_one+0x2db/0x6f0 [ 939.686532][T19586] kernfs_create_dir_ns+0x1a1/0x230 [ 939.692233][T19586] sysfs_create_dir_ns+0x12f/0x2a0 [ 939.697852][T19586] kobject_add_internal+0x622/0xcd0 [ 939.703551][T19586] kobject_add+0x163/0x240 [ 939.708479][T19586] device_add+0x3fa/0xb80 [ 939.713313][T19586] hci_conn_add_sysfs+0xd5/0x210 [ 939.718755][T19586] hci_conn_complete_evt+0x8a8/0x1350 [ 939.724634][T19586] hci_event_packet+0x6cd/0xf10 [ 939.729990][T19586] hci_rx_work+0x3ee/0x1020 [ 939.735000][T19586] process_scheduled_works+0xc3d/0x1630 [ 939.741058][T19586] worker_thread+0xa47/0xfb0 [ 939.746157][T19586] kthread+0x38b/0x480 [ 939.750727][T19586] ret_from_fork+0x514/0xb70 [ 939.755818][T19586] ret_from_fork_asm+0x1a/0x30 [ 939.761096][T19586] [ 939.761096][T19586] other info that might help us debug this: [ 939.761096][T19586] [ 939.771304][T19586] Chain exists of: [ 939.771304][T19586] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 939.771304][T19586] [ 939.785710][T19586] Possible unsafe locking scenario: [ 939.785710][T19586] [ 939.793140][T19586] CPU0 CPU1 [ 939.798483][T19586] ---- ---- [ 939.803825][T19586] lock(&root->kernfs_rwsem); [ 939.808569][T19586] lock(cpuhp_state_mutex); [ 939.815664][T19586] lock(&root->kernfs_rwsem); [ 939.822927][T19586] lock(&root->kernfs_iattr_rwsem); [ 939.828194][T19586] [ 939.828194][T19586] *** DEADLOCK *** [ 939.828194][T19586] [ 939.836315][T19586] locks held by kworker/u9:0/19586: 4, last CPU#0: [ 939.842794][T19586] #0: ffff88807c9a9940 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.853747][T19586] #1: ffffc90004c47c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.865735][T19586] #2: ffff88804aaec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 939.875555][T19586] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 939.885378][T19586] [ 939.885378][T19586] stack backtrace: [ 939.891248][T19586] CPU: 0 UID: 0 PID: 19586 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 939.900770][T19586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.910807][T19586] Workqueue: hci1 hci_rx_work [ 939.915479][T19586] Call Trace: [ 939.918743][T19586] [ 939.921660][T19586] dump_stack_lvl+0xe8/0x150 [ 939.926247][T19586] print_circular_bug+0x2e2/0x300 [ 939.931262][T19586] check_noncircular+0x12f/0x150 [ 939.936187][T19586] __lock_acquire+0x164c/0x2de0 [ 939.941024][T19586] ? __lock_acquire+0x747/0x2de0 [ 939.945954][T19586] lock_acquire+0x115/0x350 [ 939.950440][T19586] ? kernfs_link_sibling+0x4c7/0x5a0 [ 939.955715][T19586] down_write+0x96/0x200 [ 939.959947][T19586] ? kernfs_link_sibling+0x4c7/0x5a0 [ 939.965217][T19586] ? __pfx_down_write+0x10/0x10 [ 939.970057][T19586] ? kernfs_root+0x1c/0x230 [ 939.974541][T19586] ? kernfs_root+0x1c/0x230 [ 939.979033][T19586] ? kernfs_root+0x1c/0x230 [ 939.983519][T19586] ? kernfs_root+0x1ea/0x230 [ 939.988092][T19586] kernfs_link_sibling+0x4c7/0x5a0 [ 939.993193][T19586] kernfs_add_one+0x2db/0x6f0 [ 939.997856][T19586] kernfs_create_dir_ns+0x1a1/0x230 [ 940.003039][T19586] sysfs_create_dir_ns+0x12f/0x2a0 [ 940.008143][T19586] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 940.013766][T19586] ? do_raw_spin_unlock+0xf5/0x200 [ 940.018866][T19586] kobject_add_internal+0x622/0xcd0 [ 940.024051][T19586] kobject_add+0x163/0x240 [ 940.028465][T19586] ? __pfx_kobject_add+0x10/0x10 [ 940.033394][T19586] ? get_device_parent+0x366/0x3a0 [ 940.038490][T19586] device_add+0x3fa/0xb80 [ 940.042805][T19586] hci_conn_add_sysfs+0xd5/0x210 [ 940.047731][T19586] hci_conn_complete_evt+0x8a8/0x1350 [ 940.053097][T19586] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 940.059066][T19586] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 940.064856][T19586] ? skb_pull_data+0xf0/0x200 [ 940.069526][T19586] hci_event_packet+0x6cd/0xf10 [ 940.074376][T19586] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 940.080171][T19586] ? __pfx_hci_event_packet+0x10/0x10 [ 940.085529][T19586] ? audit_filter_rules+0x45f0/0x5d10 [ 940.090890][T19586] ? hci_send_to_monitor+0xe2/0x590 [ 940.096078][T19586] hci_rx_work+0x3ee/0x1020 [ 940.100572][T19586] ? process_scheduled_works+0x97a/0x1630 [ 940.106280][T19586] process_scheduled_works+0xc3d/0x1630 [ 940.111821][T19586] ? __pfx_process_scheduled_works+0x10/0x10 [ 940.117788][T19586] ? assign_work+0x3cf/0x5d0 [ 940.122367][T19586] worker_thread+0xa47/0xfb0 [ 940.126961][T19586] kthread+0x38b/0x480 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 940.131019][T19586] ? __pfx_worker_thread+0x10/0x10 [ 940.136116][T19586] ? __pfx_kthread+0x10/0x10 [ 940.140688][T19586] ret_from_fork+0x514/0xb70 [ 940.145262][T19586] ? __pfx_ret_from_fork+0x10/0x10 [ 940.150353][T19586] ? __switch_to+0xc89/0x1420 [ 940.155025][T19586] ? __pfx_kthread+0x10/0x10 [ 940.159598][T19586] ret_from_fork_asm+0x1a/0x30 [ 940.164357][T19586] [ 940.168327][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 940.211218][T31800] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 940.869659][T19914] Bluetooth: hci1: command tx timeout [ 940.909635][T19121] bond2: (slave syz_tun): Removing an active aggregator [ 940.909949][T19121] bond2: (slave syz_tun): Releasing backup interface [ 941.189841][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 941.516773][T11668] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.575832][T11668] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.687468][T11668] bond0: (slave netdevsim1): Releasing backup interface [ 941.705613][T11668] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.821821][T11668] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.955069][T11668] veth0: left allmulticast mode [ 941.955091][T11668] veth0: left promiscuous mode [ 941.955235][T11668] bridge0: port 1(veth0) entered disabled state [ 942.022648][T11668] bridge0: left allmulticast mode [ 942.147389][T11668] bond9 (unregistering): (slave ip6gre2): Releasing backup interface [ 942.229461][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 942.576873][T11668] batman_adv: batadv0: Removing interface: gretap2 [ 942.600724][T11668] batman_adv: batadv0: Removing interface: gretap1 [ 942.746899][T11668] bond0 (unregistering): Released all slaves [ 942.758176][T11668] bond1 (unregistering): Released all slaves [ 942.759322][T15060] smbdirect: ib_dev[syz1] removed [ 942.787776][T11668] bond2 (unregistering): Released all slaves [ 942.804624][T11668] bond3 (unregistering): Released all slaves [ 942.815967][T11668] bond4 (unregistering): Released all slaves [ 942.835413][T11668] bond5 (unregistering): Released all slaves [ 942.846878][T11668] bond6 (unregistering): Released all slaves [ 942.858516][T11668] bond7 (unregistering): Released all slaves [ 942.875277][T11668] bond8 (unregistering): Released all slaves [ 942.894495][T11668] bond9 (unregistering): Released all slaves [ 942.981344][T11668] : left promiscuous mode [ 943.041747][T11668] ovs-s: left promiscuous mode [ 943.153647][T11668] tipc: Disabling bearer [ 943.154018][T11668] tipc: Left network mode [ 943.269825][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.376546][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 943.663828][T11668] batman_adv: batadv0: Removing interface: macvtap1 [ 943.766077][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 943.839011][T11668] hsr_slave_0: left promiscuous mode [ 943.847303][T11668] hsr_slave_1: left promiscuous mode [ 943.848372][T11668] batman_adv: batadv0: Removing interface: macsec0 [ 944.309561][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.395150][T11668] IPVS: stop unused estimator thread 0... [ 944.446523][T11668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.446559][T11668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.497941][T11668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.497976][T11668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.570353][T11668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.570388][T11668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.666933][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 944.697049][T11668] netdevsim netdevsim2 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.697084][T11668] netdevsim netdevsim2 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.813514][T11668] vlan2: left allmulticast mode [ 944.813534][T11668] geneve0: left allmulticast mode [ 944.813835][T11668] vlan2: left promiscuous mode [ 944.813843][T11668] geneve0: left promiscuous mode [ 944.814592][T11668] bridge0: port 3(vlan2) entered disabled state [ 944.816448][T11668] bridge_slave_1: left allmulticast mode [ 944.816606][T11668] bridge_slave_1: left promiscuous mode [ 944.816998][T11668] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.845193][T11668] bridge_slave_0: left allmulticast mode [ 944.845447][T11668] bridge_slave_0: left promiscuous mode [ 944.846047][T11668] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.259300][T11668] bond2 (unregistering): (slave erspan2): Releasing active interface [ 945.259326][T11668] erspan2 (unregistering): left promiscuous mode [ 945.314076][T11668] bond5 (unregistering): (slave gretap2): Releasing backup interface [ 945.349766][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 945.455571][T11668] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 945.455596][T11668] bridge5 (unregistering): left promiscuous mode [ 945.455612][T11668] bridge5 (unregistering): left allmulticast mode [ 945.498634][T11668] bond0 (unregistering): left promiscuous mode [ 945.498659][T11668] bond_slave_0: left promiscuous mode [ 945.498750][T11668] bond_slave_1: left promiscuous mode [ 945.524538][T11668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.525987][T11668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.526895][T11668] bond0 (unregistering): Released all slaves [ 945.553786][T11668] bond1 (unregistering): Released all slaves [ 945.559100][T11668] bond2 (unregistering): Released all slaves [ 945.576383][T11668] bond3 (unregistering): left promiscuous mode [ 945.577485][T11668] team0: Port device bond3 removed [ 945.620522][T11668] bond3 (unregistering): Released all slaves [ 945.651841][T11668] bond4 (unregistering): Released all slaves [ 945.657088][T11668] bond5 (unregistering): Released all slaves [ 945.681022][T11668] bond6 (unregistering): (slave veth5): Releasing active interface [ 945.682192][T11668] bond6 (unregistering): Released all slaves [ 945.688139][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 945.807489][T11668] : left promiscuous mode [ 946.265377][T11668] team0: left promiscuous mode [ 946.265398][T11668] team_slave_0: left promiscuous mode [ 946.265537][T11668] team_slave_1: left promiscuous mode [ 946.309664][T11668] veth1_vlan: left promiscuous mode [ 946.309730][T11668] veth0_vlan: left promiscuous mode [ 946.389649][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 946.475961][T11668] team0 (unregistering): Port device team_slave_1 removed [ 946.488845][T11668] team0 (unregistering): Port device team_slave_0 removed [ 946.601630][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 946.848010][T11668] IPVS: stop unused estimator thread 0... [ 946.993491][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 947.205268][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 947.396104][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 947.430007][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 948.469659][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available