last executing test programs: 11.312182293s ago: executing program 1 (id=2786): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) r1 = socket(0x3f, 0xa, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x3261e) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f0004000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x50, r2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x8010) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r6, 0x8) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0xfffffffd) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0xfffffffd) (async) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x8) (async) r10 = socket$inet(0xa, 0x801, 0x84) listen(r10, 0x8) (async) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f00000002c0)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1d}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xb, 0x3}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x2805) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009180)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000009140)={&(0x7f000000c300)=ANY=[@ANYBLOB="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"], 0x5f10}, 0x1, 0x0, 0x0, 0x2000c884}, 0x8000) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) 11.044941475s ago: executing program 1 (id=2788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="53d42d630b000100fe91aceaf48e2e2303552e30", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b01f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000340)={0x81, 0x3}) epoll_create(0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x40, 0xf, 0x51, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x700, 0x8, 0x1}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r4, &(0x7f0000000380)="2e000000010002", 0x7) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002900)=r6, 0x4) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x40) sendmsg$NFT_BATCH(r9, 0x0, 0x40) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 10.69174706s ago: executing program 1 (id=2794): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/73, 0x49}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x30}, 0x4, 0x700000000000000, 0x0, 0x48001}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x208, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xac, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_DESC={0xfffffffffffffd18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ab1b75d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x802}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x343}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}]}], {0x14, 0x10}}, 0x230}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, 0x301}}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x884) r12 = socket$inet6(0xa, 0x1, 0x14786a46) getsockopt$IP_SET_OP_VERSION(r12, 0x1, 0x53, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 9.418750183s ago: executing program 1 (id=2808): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @private1, 0x2aa}}, 0x24) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x2a, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call, @generic={0xc, 0x3, 0xc, 0xfffb, 0x3ba}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf3f4}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5c}}], &(0x7f0000000480)='GPL\x00', 0x4, 0xd3, &(0x7f00000004c0)=""/211, 0x0, 0xcd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x9, 0x9, 0x7}, 0x10, 0x6e32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000700)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xf2c2, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3d, 0xb, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func, @ldst={0x1, 0x0, 0x0, 0x6, 0xb, 0xfffffffffffffffc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xef}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @alu={0x4, 0x0, 0x4, 0x4, 0xf, 0xfffffffffffffffe, 0xfffffffffffffffc}], &(0x7f00000001c0)='syzkaller\x00', 0x80000001, 0x31, &(0x7f0000000200)=""/49, 0x100, 0x28, '\x00', r3, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x1, 0x80000000}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000940)=[r5, r6, r7, r8], &(0x7f0000000980)=[{0x3, 0x1, 0x7, 0xc}], 0x10, 0x200}, 0x94) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000b00)={'nr0\x00', &(0x7f0000000a80)=@ethtool_dump={0x40, 0x3, 0x88b1, 0x31, "9786559f689a98fe8ad69c089e3789e023eade87230018d5bbff8816e3e05c613af8d7797c2d226aab7b24533a00fda670"}}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, r11, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80000001}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4d6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000010) (async, rerun: 32) r12 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) ioctl$NILFS_IOCTL_GET_SUSTAT(r12, 0x80306e85, &(0x7f0000000cc0)) (async) ioctl$OCFS2_IOC_UNRESVSP64(r7, 0x4030582b, &(0x7f0000000d00)={0x2, 0x0, 0x4fb, 0x7, 0x9, 0x74}) (async) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000d40)={0x5c, @empty, 0x4e20, 0x0, 'nq\x00', 0x38, 0xb1, 0xd}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f80)={r7, &(0x7f0000000d80)="574bb147eecad641b6da9e47d7ba0d76bff5249d0be432b98850245656806bd5045031db12450667f2e70a4f199ce7410b3881d309666ad504eceb95a5f5873092ab4971c5727ceed8c700731c7f7590e0c96b6241f708dd376d2f3e41b6006dc27d5ea668703a32c6d56ba079b1f82b4dbd61cb5e44a212d30de3f76a4a95da6ba78a8921c99b96ec38aa2f3be40d7a7ae6459e90ca10fc7a9815f85d324229c37b52ac62d1dc63eceb9fbde86977b6c85c0a6fcf11b77b412345a34b566e9c69f5f5d2395c0b9b47f09d01a1e9af321547fa315eddfa0655ae216fb7d62c794bc983dbf9", &(0x7f0000000e80)=""/196, 0x4}, 0x20) (async, rerun: 32) getsockopt$IP_VS_SO_GET_INFO(r12, 0x0, 0x481, &(0x7f0000000fc0), &(0x7f0000001000)=0xc) (async, rerun: 32) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000001240)={{r9, &(0x7f0000001040)='&\xf2B#.\x00', 0x20080, &(0x7f0000001080)={@align, {0x0, 0x5, 0xb, 0x6}}, 0x4, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0x5}, {[0x7fffffff, 0x6, 0x200, 0x5]}, 0x8, 0xd0, &(0x7f0000001140)=""/208}) (async) r14 = syz_genetlink_get_family_id$team(&(0x7f0000001300), r5) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000013c0)={'gre0\x00', &(0x7f0000001340)={'erspan0\x00', r3, 0x8, 0x80, 0x2, 0x6, {{0xe, 0x4, 0x3, 0x1b, 0x38, 0x66, 0x0, 0x77, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x24, 0x49, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0xb}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x5}, {@multicast1, 0x2}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001400)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r13, &(0x7f0000001640)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000001600)={&(0x7f0000001440)={0x1c0, r14, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r15}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r16}}}]}}]}, 0x1c0}}, 0x800) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xb4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r17}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x840) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001a80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x150, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd89}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x52}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) 9.281203813s ago: executing program 1 (id=2810): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x83, "d523be79b705bdc7ea828c5eafcdf3dcba57ca53bd44123a4a7670ce9ac6b20375d03fdf08748abab301a918dc13176290c893494063f4bae0dc801c3cc712669d4b9cbcb59790878b418211a5ae205d3782724fbeda97534b07a82707203bd6a6568db3cffcc7e0ee5b1d240a545c8880480d86c131aecf8dfc4058b60cdc67865e1d"}, &(0x7f0000000140)=0x8b) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x9, 0x47, 0x9, 0x2, 0xe31d}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r4, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 9.106901414s ago: executing program 1 (id=2814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r4], 0x20}}, 0x4000) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000000)={r0, 0x8c}) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="f5c45dd683b0b751054f16484712851a2a59a4d2ae8908bc9f798efe3761d3ea6217b720ac1a6a55b481a6c025805139bdccf37feedb5411e7823a766939026b84f7cb4041d070402e81d48a706ab239e387d8a2b2f8bc3c934b7f53b4b69ca1c074f40e37e479076af487ab9c5f14233fba11f86e9ac88bfa162b48596e4f1c3ca3c7bb69e71d118b4753856d12e5c36c2143dad2f08a3e52fd356192681fc2d36852686a88c3616e09ef348d2f741723df22", 0xb3) 7.472526621s ago: executing program 4 (id=2832): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000180)=ANY=[@ANYBLOB="1403", @ANYRES16=0xffffffffffffffff], 0x14}}, 0x4000040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x303}, "f4fc2aaecf9a3e83", "257652a2d66752817c4dfdfef66ca83236d3864a6a19677b9b0c32f7fea08567", "6fc3116c", "dbbfd37909afc8de"}, 0x38) r3 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000bc0)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)="73ee6cd1b7350ca23dc8023b185c11c83d0cc236d3cc4cd58c150eafe5f28c47f548505e3b93b0ee06eb43fe7beff0a005846a20c72db15fb3725acf6c78f4763546a73297f6b9c05d81c18d87f3fd7346fd842b82b41ae622a8faea3474c5bfcdd9ba051d4b586f59340eb2da621a1ae414241b60370eb89d5c4f24147973749a15a00a5f504c279242a9790ef5e9667d01906cede3c155791cd460e42642215ccc55c92749a38b3d8626619636f13fdb5d7d3238677c2372dc24413e93", 0xbe}, {&(0x7f00000005c0)="846be5deb90c2ffef3230c6849d0dbd14a504cd09987965438633c7b5afcd6e52f766fe5087adc6807d71227b70506411cb63cf2e7f359ddd8269b311c7af00e49769f6359a045ec09c268bd1819ab600108731e865ec1eafc97febd9b341580bc8f503f800ce8980698cbaf6ab3727ca9ea538a91b96cce88a91b5c1de3495d5d8d7b230525c2dbc4fb0319b3f1972fcb17167af1d6cbef92109237459a9ee5bbebae69", 0xa4}, {&(0x7f0000000680)="94f84db31613ed54dbd22744c713cf4142e98f6b6e2a7e4830b1eef239e8192387a0c7afa6084855c8e8e728a659e602baf513dd3a51e654c1efa0feb3e7d73d027db79ba57e", 0x46}, {&(0x7f0000000700)="e8652093957140d9c086423c5b10eabf01f9f7fc693544b8871e79efe1f4dcf6355af85251f1f1efe2c76e3e674e83a8ef72536c7368b08bb8a97a", 0x3b}, {&(0x7f0000000740)="d95f9caa453e518d7329cb36f66ab19bc9c8dab45320fd6662d0128eec6812bed3b7252fb20b1585565d1ad0ea85bfab8e07215b3c4fca5d6e0d8eaf78f3f299db03596fc48ff5a7af7a4cc38c48448c1ac6723c41f817b3fdb092e53c2fdc22fcec18eb616f2898dc757173ef56427165869b9ccf4b87941493f1ce29ef480dd8aba7f2be7ab5b9505ba2a732a5a35ae39d2b3062d77801d62c85e70b5b5fcb83cc9bd2b61fea48cd96e27033279a7e7e9b701a7e1f601943837b829ad137c52d52451a22b3cecef9e5", 0xca}, {&(0x7f0000000840)="0f6b3d2da7f5ed826ceb05ca74e77361a45675f5ffe31c592f0a22d2a108ab32f263568ef19740b9489f798433995cd66328cecb84395c5f362ec8e1cc5f188da0e5ab26a6b566d18ee2dccaf94f2dcd2d5bf17726460cedba9d20d93ff553cd7f9e956257220b0e6c1844834981263933559a7cd9586e2bd5d661b2a671cb2bd3f0c97f0a7ac955cc0ad10fb6515fea444d4bce377caf2f28eb7090d5d62d1759aacd314563b74ebb106d85e537d9300870eed1678f0ebb55aa497e102aef8cc5235e8d943af8313f869e5156f36d579d5816d78d887ebaf490e4d05ed6a144283ea829e05917f5bc44ad23", 0xec}, {&(0x7f0000000940)="89e71832ad4ab3869570f62b09d6940ebae06bd6aae83df38405761462f133b07efffdbf18ffcf3ab5953c2c47b40452e18b239ea6a7eed55642492daa7368b7523b3bb81f76d9bfe7132fa13379467797284a7d8fbb24380f470e6bcb5e84fbbe0c01b3e60f0bd5f967ff22b68b809269283d46b078203e0956f0e2d9605d6f43ae747a8c98b21b5e5f5d09346611ef65a082d8436b4babdb9f3d87ec6b50eb6eb59dc9281cb4bf07a65a7dfbdbed48c99ce01614a8ecd0d02c8e4e41a264c3952a177e85577515c3644166cb9fb5215fefb3fff5f3c2cb5d86b319560dc0a3e37f5fff62", 0xe5}, {&(0x7f0000000a40)="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", 0xff}], 0x8}, 0x48804) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf1, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 7.360886409s ago: executing program 4 (id=2835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0xa8, r1, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f24aebc57cd4a30f0e2b00586d3a576e282224dd1c0583ec969cfe8de046ceb"}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xa8}}, 0x40094) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x2d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x40, 0xb, 0x2, 0x9, @local}, 0x10) 7.160455498s ago: executing program 4 (id=2838): close(0x3) r0 = socket(0x2, 0xa, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000440)="5959d4534fe31c04fa146fdc651efd060dd62be607000000950ef604b7fd52a2d859f1e56b422407d8937e13697b9be3ef41b074878d79e79423a7b248ce157fd358284957d0fcb1be314f99f684f4b51823fa55cbf44ca7213573e8244d8046c9e9e453609afd739d3a3f5e0479fa9589dea1e9487ce3f38ffa1f090c40de3a8c8aedbe070315aec35d5ff08042a1b282d6c5db644181be23c1a87dccaed6cd", 0xa0, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}}}, &(0x7f0000000600)=0x84) 5.208024387s ago: executing program 2 (id=2851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x5}}, 0x1, 0xc, 0x1, 0x3, 0x46, 0xfffffffc, 0x5}, &(0x7f00000001c0)=0x9c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESOCT=r5, @ANYRES16], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000d00)=[{{&(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/13, 0xd}, 0xdc84}], 0x1, 0x100, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x1, 0x0, &(0x7f0000000000)) 4.994035293s ago: executing program 3 (id=2852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x20000808) r2 = socket(0x1e, 0x5, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x7, 0x6d3ecf67, 0x0, 0x1000}, 0x10) bind$tipc(r2, 0x0, 0x0) listen(r2, 0x0) r4 = socket(0x1e, 0x805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c095}, 0x24000800) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r9}) r10 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x33, r9}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.849522238s ago: executing program 2 (id=2853): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x53b, 0xfffffffe, 0x0, {}, [{0x6c, 0x1, [@m_simple={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x37, 0x3, '\\^]!${{%@:\x00\x1ac\xf9_\xcf\x9f<\n\x9b\xb8\xa4\x1c%\xdcA\xaf\x95\xabb\xf4\xdf\x9c\xe2\xc3\xec\x14\x91\xdd\x99\xd7c&\x9aTgc\xa5\xd7/\xb0'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0xff81) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0xff81) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x108, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0xe8, 0x12, 0x0, 0x1, @vti={{0x8}, {0xdc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}], @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x39}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}, @IFLA_VTI_OKEY={0x8, 0x3, 0xd}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x80000001}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_OKEY={0x8, 0x3, 0x62}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x80000000}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010102}, @IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x108, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0xe8, 0x12, 0x0, 0x1, @vti={{0x8}, {0xdc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}], @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x39}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}, @IFLA_VTI_OKEY={0x8, 0x3, 0xd}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x80000001}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_OKEY={0x8, 0x3, 0x62}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x80000000}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010102}, @IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="8995", 0x2, 0x4044840, 0x0, 0x0) 3.772034452s ago: executing program 3 (id=2855): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x5e23, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="78b875449d", 0x5}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="900100"], 0x190}}], 0x2, 0x42) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x83, &(0x7f0000000480)="1af3050013000000b0ddccaf95816c92b566f8a5d3b4cd314b572ee65b87a0c0ddb43b170ad33ba4a676ae591f8f3fe0beac89df8fceb9d0f3c8015c0d22403303003da68ef758e2102211951d14b4764b", 0x51) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x23b5, 0xec, 0x0, 0x1, 0x80}, &(0x7f0000000180)=0x98) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x4, 0x0}, 0x8) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0xf, 0x12) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', r9, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x402, 0x21, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x1000, 0x1f00f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000640)=[{0x6c}, {0x6, 0x9, 0x0, 0xfffffffc}, {0x7, 0x8, 0x1, 0x8000000}]}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={r3, 0x49, "a450fee2bf6f6fce6a085603a873c450f8d5a92cfe3523d171eda76380eb9c3cf781cd96e78d6b0cf727ab010155d766a59242226ce08d914cbef2a90e1fbc86486e27e4622157f50c"}, &(0x7f0000000240)=0x51) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) setsockopt$inet_buf(r13, 0x0, 0x4, &(0x7f00000002c0)="775092cf50296aa3d87cd0efa501d709bc08d3d7082f5964dfb1eb9762f8168922699103d4328fecaac391dcf19c145c6d34cd0caabe52b4f520ddae979c780231252865aa71a942c8ecf9651913023e992659c26499698675a2eb2f0dde986d83b7087d4cf4b8b3fb5a1a589fa9b043b3772292556337af28c2b8f8485c9ff54e870c17ec902399d56a28f55eed6e0c9f48b31a107dcabebaeea672ce139767825c6d7b838b9aa9d3194f0fc1798a78563f0995dd48e45d38307b2184f87c1dc5ca4699c155f4760cd8", 0xca) recvfrom$rxrpc(r13, &(0x7f0000000540)=""/45, 0x2d, 0x2021, &(0x7f0000000500)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000700)="000000000000000c2e30730d9841a3ce1ba465a0343ef84331a8b02428a389759921a6e18f53cea810808887394a32de718f594be7ec7801acc085363df7f89b64aeaaccb444c4689d83c229579603e799c65dce262f9bd18ed9b99ef6ddc6c33df23522db23c68abbe2a8ebcd882405ee9f4cc7d2dad571c2f9adcb1e442e96e456db87c031a64cc9f7b7af0e902c730e81b695d85bf1570fe36b4d506e163979479d9e6ab4f77725507309ecb09b68d7fdd72df0fcbe7be4eaa2cdc514d8e012fce84408defa6ebe373d0a6e0a81da3e8fe9855f833450af1e2b56f5e80e07f1d1606dae25a9c115c5482ab1de98f96cadbe3e76da28", 0xf7) 3.361483252s ago: executing program 2 (id=2857): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x57, &(0x7f0000000800)={@random="d100", @empty, @void, {@ipv4={0x800, @tipc={{0xa, 0x4, 0x0, 0x32, 0x49, 0x66, 0x0, 0x63, 0x6, 0x0, @local, @private=0xa010102, {[@lsrr={0x83, 0x3, 0x8a}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x8, "6018669e1d30"}, @noop]}}, @payload_conn={{{0x21, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0xec, 0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0xdf, 0x1, 0x4e22, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r12, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r10, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0xccd3aee3a6ce2855) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000040)={0x10000, 0x9, 0x4, 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x24, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x3, 0x0, 0x6, 0x9, 0x1, 0x8, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x3, 0xa4, &(0x7f0000000540)=""/164, 0x41000, 0x14, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x5, 0x80000001, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000006c0)=[{0x3, 0x4, 0x0, 0x9}, {0x5, 0x5, 0x6, 0x7}, {0x4, 0x2, 0x6, 0x5}, {0x3, 0x1, 0x2, 0xc}, {0x3, 0x2, 0x7, 0x5}], 0x10, 0x8}, 0x94) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a300000000005000400000000000500050002000000140007800800134040000000080012400080"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xfff2, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.205910746s ago: executing program 3 (id=2859): r0 = socket(0xa, 0x2400000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8000, 0x10, 0xffffffff, 0xfffffffc, {{0x17, 0x4, 0x0, 0x5, 0x5c, 0x64, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x65, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @rr={0x7, 0x17, 0x9b, [@local, @empty, @remote, @loopback, @empty]}, @timestamp_prespec={0x44, 0x24, 0xa3, 0x3, 0x2, [{@loopback, 0x8}, {@rand_addr=0x64010101, 0x5}, {@multicast2, 0x1}, {@local, 0x7fffffff}]}, @end]}}}}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYRES16=r1, @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 2.601440073s ago: executing program 3 (id=2860): ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)={0x6a, 0x6, 0xb, 0x5, 0x1ff}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="d5a8831d2294e66ae37468d71b2b2d96ed2add223cacb0073e44ef090d0cb29db3aa02cec3671a927be9e7ee26fd29f2cdfe005b8e0a1045878c1db0d18a7f7e60fca15f52e417f955863d03cb74fa0c1e0cf0cbbc91baef039d3217dc3e"], 0xaf) (async) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@random="a29d", 0x2, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x4}, [@NFT_MSG_DELRULE={0x104, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_USERDATA={0xe, 0x7, 0x1, 0x0, "ce5ebc25349198811343"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x1, 0x3, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1ea99517006604cd}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6ac, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x680, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}, {0x634, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x124, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x81}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, '+\\$]-\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x401}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x27}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xd6, 0x6, 0x1, 0x0, "84d2e7969c73f2d264f2504368701db841ba324bb0b46d403c33f0e4e05c282cb5c63876f40dd274390006db210a5b070d40dc0b974bb8d5532cbebe60a7e157b60ac8a5c88e12e195ea288e9a2672afba8109a3998a92df0ac2ad53072e8dea3a62c8b56dd6b339be8570f7ee5bb1b5569f8519fcbf256734dc2b727a0acc007c3ad0a399f2f7ab5f57e1d9eca07cf5b40ef4b45b84f848dcc0cff289d25c21239eb8e3e9af5c097c67220ed48c0ee095bb41e918dd68399491d175af8c61eed2d3d2dc0e83d512d75a1447dbbd4ceb3952"}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xd3, 0x6, 0x1, 0x0, "34e15c8062d126f90a1c57d73ab165d8eb51ce76bb3151547112da4cd80599fd5fb745118e592befbf04091ccc36574756dbeadb7f76b490b42108f055172755fa8e1ab8572789d272c39cc2b613c05cd0bc3aaeaae2d55979932a2d32c4a6b36a846d7e99de50434a6ebc795dafd0dab89e7dc13f25781d680a9cb247dee8656666e4974f3cb3065f5d62bde3d7ee61ad52ae7e266a808ff30a2e21b840e4d6228d8bfe5f62edaeb328abfaff126e83be1128cce48323bd4edccf15758b69c8a610fd096c2030eebf65a9be0f89bc"}, @NFTA_SET_ELEM_KEY_END={0x12c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "b893e298bbbd125775fae18beec87a9ada9a0eacffea7f790f7a1e19ad3762b6631ca7c13dddd2dbdb87de4c8d266f25b4eb079a5bbfae7a21c2861c80282660068012d6792661e78eeb84807a2ac26ec4e47310cee8e867495811ca5860a8505d138ab9fa2f0064352ed8710d559e1f0380f17eedd5223d8ae78964411f8a932d0297d69734e3515d205929a7152fb4bdef15071c0097b6f6f6d3f58a37db99838ffb2329ba99e2c1be99fba6eef5ecb1935d176f2780dfef418770409e5d7d9011f6a91b923603ad1f0df9"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x7, 0x1, "f176cf"}]}, @NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x814}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast2}}) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10004090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x4c}}, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) close(r3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.600561783s ago: executing program 4 (id=2861): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x201}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.475224134s ago: executing program 0 (id=2862): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001840), 0x3b, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x1, 0xb, 0x38, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @remote, {[@generic={0x44, 0x4, "dcb2"}, @ssrr={0x89, 0x7, 0x8b, [@broadcast]}, @timestamp={0x44, 0x4, 0x3e, 0x0, 0x5}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0xf, 0xa, 0x47becf7a, 0x4}}}}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x28c0aa9df6c5754f}, 0x10) 2.127671392s ago: executing program 4 (id=2863): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum={0xb, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x8000}, {0x4, 0x5}, {0xf, 0x3}]}]}, {0x0, [0x2e, 0xf2ad9666f600f42b, 0x2364109418f227cf, 0x0, 0x61, 0x6f]}}, &(0x7f0000000b40)=""/234, 0x44, 0xea, 0x0, 0x2}, 0x28) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000200000000000000000004d0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c000000020603000000000000800000000000000500010007000000090002", @ANYRES64=r7, @ANYBLOB="cc875c7a60a11dc8e63143ebe027ea5d274f6f745e95efab928b67a28f7579cc5e17796bc83069dd0b27a5a9e159457fa286e5ba3784a662f921e64e83381ace49653f0bd06622be733a14ad9811e12976eaeaddec75ef141efad16d210ea6858a53d078aa719e3801dce4d539dd247add9a4dc28a108afe1c74c5e74a2ee2da4066895fcda548d3b3129b2ebfa2c9d21af8db85bb2686c836e47d60045d73d5da2086b4d61955bc102b54fad4dcd8b3c88a14d086164a54e94ef83ef258b63aee7f8d856a9ddf93728363197fe753cb9c17a581dadeb17ae2c40f28bb"], 0x5c}, 0x1, 0x0, 0x0, 0x4088850}, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27, 0x0, 0x3}, 0x6) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r10, 0x0, 0x80, 0x4) r11 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r11, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0xfff, 0x3, 0x800, 0x3}}], 0x18, 0x4855}, 0x24000052) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000010001000200000000000000", @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x1a, &(0x7f0000000740)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @generic={0x5, 0x9, 0x0, 0xbf, 0x6a}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb48}], &(0x7f00000009c0)='GPL\x00', 0x9, 0x6a, &(0x7f0000000a00)=""/106, 0x1e00, 0x20, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000c80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0xc, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000e00)=[r3, r12, r13, 0x1, r14], &(0x7f0000000e40)=[{0x0, 0x4, 0xd, 0x9}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x1, 0xf, 0x9}, {0x3, 0x5, 0x7, 0xb}, {0x1, 0x5, 0x14, 0x2}, {0x1, 0x5, 0x2, 0x1}, {0x4, 0x3, 0x1, 0x7}]}, 0x94) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8d1}, 0x1001) 1.448850964s ago: executing program 3 (id=2864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e2a, 0x3, @private0, 0x407}, 0x1c) listen(r0, 0x39c) 1.443567661s ago: executing program 2 (id=2865): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/88, 0xffffff45}, {&(0x7f0000000780)=""/83, 0x53}], 0x2, 0x0, 0xf00}, 0x0) 1.240526808s ago: executing program 2 (id=2866): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000003c0)={0x0, 0x62, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 1.193756109s ago: executing program 3 (id=2867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x25, &(0x7f0000000000)={0x200, 0x0, 0x4bb8, 0x965f, 0x8}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="89ecfee5ee0d67daed6ab1fe041a8042ca", 0x11}, {&(0x7f0000000100)="f4", 0x1}], 0x2) 1.163648955s ago: executing program 4 (id=2868): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0xa, 0x10}}, 0x18}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x58}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000240)={0x1f, @any, 0x5}, 0xa) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c00018014000300fc"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7901}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x1, 0xb}, {0x9, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x0, 0x3, 0x6, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.014444068s ago: executing program 0 (id=2869): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x348, 0x206, 0x240, 0x348, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @rand_addr=0x64010102, 0x0, 0x0, 'bridge_slave_1\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1c0, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0xd, 0x3, 0x2d, 0x1f, 0x4, 0x4a0c, 0x9, 0x18, 0x78}, {0xfedb}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x3ff, 0xe, [0xe, 0x36, 0x2e, 0x2e, 0xe, 0x24, 0x28, 0x6, 0x6, 0x22, 0x40, 0x200, 0x26, 0x16, 0x0, 0x22], 0x2, 0x9}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x5, 0x7, 0xf5600000, 'pptp\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000180018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f0ffffffb702000008000000b70300000000000085000000ca00"], 0x0, 0x1}, 0x94) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000004c0)={0x3, 'macvtap0\x00', {0x227}}) (async) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000400)={r0}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18e7ffffffffffff7f000000fbd55fe1c8ead9c5", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 953.529461ms ago: executing program 2 (id=2870): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0x43, 0xa0, 0x1c0, 0x98, 0x278, 0x178, 0x178, 0x278, 0x178, 0x49, 0x0, {[{{@ip={@local, @multicast2, 0xff000000, 0xffffff00, 'syz_tun\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x3d}, 0x12a, 0x198, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x10, 0x2, 0x6, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x3, 0x0) setsockopt(r5, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r7, 0xa}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000480)="000302000b00000000002d39", 0xc}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59cdd8a174caf38d7adc18f6b256e8be00", 0x23}, {&(0x7f0000000540)="f861eab0bb", 0x5}], 0x3}, 0x40011) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@bloom_filter={0x1e, 0x952e, 0x7fff, 0xd16, 0x10, r3, 0x6, '\x00', r7, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x3}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="581800004400010029bc7000040000000300000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) splice(r0, 0x0, r3, 0x0, 0x80, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xff, 0x3, 0x0, 0x7, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "f57de0eb74757e1d"}, 0x3}}]}, 0x14c}}, 0x404c004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006117d00000000000a6070000000013009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000300)={@loopback, r11}, 0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r10, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r10, @ANYBLOB="14000600ff8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) socket$unix(0x1, 0x5, 0x0) 889.105695ms ago: executing program 0 (id=2871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, &(0x7f0000000300)=""/31, 0x1f}, 0x58a}, {{&(0x7f0000000380)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/52, 0x34}, {&(0x7f00000006c0)=""/193, 0xc1}], 0x3, &(0x7f0000000800)=""/18, 0x12}, 0x4}], 0x2, 0x2, &(0x7f00000008c0)={0x0, 0x989680}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x1}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x24048060) 159.741354ms ago: executing program 0 (id=2872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, 0x1}, 0xc) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000080)={0x6, 0x2}) 41.030349ms ago: executing program 0 (id=2873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe94}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='{&[\x00', 0xc0c0, &(0x7f00000000c0)={@_ha_fsid={[0x3, 0x9]}, {0xcd90, 0x5, 0x9, 0x5}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x80000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=2874): unshare(0x400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xb8, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'dh\x00', 0x0, 0x10000004, 0x30}, 0x2c) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x20000000}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc5, &(0x7f0000000080)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000040)={r7, 0x7fff, 0xc}) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f00000002c0)=0xce7, 0x4) kernel console output (not intermixed with test programs): 00 RDI: 0000000000000003 [ 263.745655][T10281] RBP: 00007fc261650090 R08: 0000000000000000 R09: 0000000000000000 [ 263.745667][T10281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.745677][T10281] R13: 00007fc260a26218 R14: 00007fc260a26180 R15: 00007ffe7f8928f8 [ 263.745704][T10281] [ 263.756784][T10282] bond8: entered promiscuous mode [ 264.138034][T10295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'. [ 264.163706][T10295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1069'. [ 264.243393][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 264.587270][T10323] netlink: 'syz.4.1074': attribute type 9 has an invalid length. [ 264.608023][T10323] netlink: 'syz.4.1074': attribute type 6 has an invalid length. [ 264.608671][T10325] netlink: 'syz.2.1077': attribute type 4 has an invalid length. [ 264.624014][T10323] netlink: 'syz.4.1074': attribute type 7 has an invalid length. [ 264.632628][T10323] netlink: 'syz.4.1074': attribute type 8 has an invalid length. [ 264.670752][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1077'. [ 264.694162][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 264.801889][T10332] gretap0: left promiscuous mode [ 264.834411][T10332] ip6gretap0: left allmulticast mode [ 264.929792][T10343] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1081'. [ 264.965966][T10347] netlink: 'syz.2.1082': attribute type 6 has an invalid length. [ 265.093679][T10352] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.1083'. [ 265.108391][T10354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1084'. [ 265.471264][T10374] team0 (unregistering): Port device team_slave_0 removed [ 265.492699][T10374] team0 (unregistering): Port device team_slave_1 removed [ 265.534722][T10379] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 265.583651][T10377] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.942510][T10400] digital: digital_start_poll: Unknown protocol [ 266.005876][T10398] lo speed is unknown, defaulting to 1000 [ 266.294006][T10415] can: request_module (can-proto-0) failed. [ 266.643595][T10398] openvswitch: netlink: Tunnel attr 324 out of range max 16 [ 266.775915][T10439] x_tables: duplicate underflow at hook 1 [ 266.785194][T10437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.847626][T10404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.004843][T10442] netlink: 'syz.3.1105': attribute type 11 has an invalid length. [ 267.137807][T10442] lo speed is unknown, defaulting to 1000 [ 267.380845][T10449] nft_compat: unsupported protocol 0 [ 267.736582][T10464] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 267.757776][T10464] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 268.060033][T10482] netlink: 'syz.0.1118': attribute type 7 has an invalid length. [ 268.076814][T10482] netlink: 'syz.0.1118': attribute type 8 has an invalid length. [ 268.149218][T10485] siw: device registration error -23 [ 268.155034][T10485] __nla_validate_parse: 6 callbacks suppressed [ 268.155048][T10485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1119'. [ 268.196652][T10486] veth1_macvtap: left promiscuous mode [ 268.226403][T10488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1120'. [ 268.814361][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 268.831357][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 268.864106][T10501] syzkaller0: entered promiscuous mode [ 268.875148][T10501] syzkaller0: entered allmulticast mode [ 269.209640][T10516] veth1_to_hsr: entered promiscuous mode [ 269.215606][T10516] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1124'. [ 269.225278][T10516] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 269.242017][T10522] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1124'. [ 269.255302][T10516] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 269.255932][T10514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.256227][T10522] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 270.697658][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1131'. [ 271.180487][ T5281] veth1_macvtap: entered promiscuous mode [ 271.286163][T10568] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 271.616518][T10581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1136'. [ 271.729370][T10588] validate_nla: 1 callbacks suppressed [ 271.729387][T10588] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 272.447743][T10617] geneve1: entered promiscuous mode [ 272.609798][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1144'. [ 272.766899][T10634] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 272.790661][T10636] netlink: 'syz.0.1147': attribute type 3 has an invalid length. [ 272.803432][T10634] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 272.805721][T10632] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1145'. [ 272.818773][T10636] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 272.844476][T10636] NCSI netlink: No device for ifindex 2147483648 [ 272.858810][T10639] netlink: 'syz.3.1148': attribute type 13 has an invalid length. [ 272.985125][T10646] openvswitch: netlink: nsh attr 4 is out of range max 3 [ 273.169661][T10656] __nla_validate_parse: 5 callbacks suppressed [ 273.169688][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'. [ 273.511309][T10670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1154'. [ 273.655485][T10676] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 273.709247][T10683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1156'. [ 273.723855][T10682] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1157'. [ 273.736177][T10682] netlink: 'syz.2.1157': attribute type 9 has an invalid length. [ 273.744579][T10682] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1157'. [ 273.755598][T10682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1157'. [ 273.756033][T10684] veth9: entered allmulticast mode [ 273.775589][T10684] bond3: (slave veth9): Enslaving as an active interface with a down link [ 273.785245][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1156'. [ 273.796877][T10676] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 273.816694][T10676] macvlan0: entered promiscuous mode [ 273.822080][T10676] macvlan0: entered allmulticast mode [ 273.829655][T10676] bond3: entered promiscuous mode [ 273.836219][T10676] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 273.844700][T10676] bond3: left promiscuous mode [ 273.915193][T10691] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1158'. [ 274.136414][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1161'. [ 274.252207][T10710] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1161'. [ 274.646826][T10729] veth9: entered promiscuous mode [ 274.677667][T10729] bond4: (slave veth9): Enslaving as an active interface with an up link [ 274.687041][T10739] batadv_slave_1: entered promiscuous mode [ 274.695464][T10741] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.840373][T10738] batadv_slave_1: left promiscuous mode [ 275.091241][T10760] syzkaller0: entered promiscuous mode [ 275.104514][T10760] syzkaller0: entered allmulticast mode [ 275.265722][T10764] netlink: 'syz.3.1178': attribute type 1 has an invalid length. [ 275.773421][T10805] netlink: 'syz.4.1189': attribute type 32 has an invalid length. [ 275.842356][T10802] tipc: Enabled bearer , priority 0 [ 275.877498][T10815] FAULT_INJECTION: forcing a failure. [ 275.877498][T10815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.927733][T10815] CPU: 0 UID: 0 PID: 10815 Comm: syz.3.1190 Not tainted syzkaller #0 PREEMPT(full) [ 275.927761][T10815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.927771][T10815] Call Trace: [ 275.927779][T10815] [ 275.927786][T10815] dump_stack_lvl+0xe8/0x150 [ 275.927818][T10815] should_fail_ex+0x40c/0x560 [ 275.927845][T10815] _copy_to_user+0x31/0xb0 [ 275.927872][T10815] simple_read_from_buffer+0xe1/0x170 [ 275.927899][T10815] proc_fail_nth_read+0x1bb/0x230 [ 275.927924][T10815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.927959][T10815] ? rw_verify_area+0x24a/0x4c0 [ 275.927986][T10815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.928007][T10815] vfs_read+0x213/0xa80 [ 275.928037][T10815] ? __pfx___mutex_lock+0x10/0x10 [ 275.928063][T10815] ? __pfx_vfs_read+0x10/0x10 [ 275.928090][T10815] ? __fget_files+0x2a/0x420 [ 275.928117][T10815] ? __fget_files+0x3a2/0x420 [ 275.928138][T10815] ? __fget_files+0x2a/0x420 [ 275.928169][T10815] ksys_read+0x150/0x270 [ 275.928196][T10815] ? __pfx_ksys_read+0x10/0x10 [ 275.928230][T10815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.928250][T10815] do_syscall_64+0x174/0x580 [ 275.928273][T10815] ? trace_irq_disable+0x3b/0x140 [ 275.928296][T10815] ? clear_bhb_loop+0x40/0x90 [ 275.928317][T10815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.928336][T10815] RIP: 0033:0x7fc26075e68e [ 275.928353][T10815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 275.928368][T10815] RSP: 002b:00007fc26164ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.928388][T10815] RAX: ffffffffffffffda RBX: 00007fc2616506c0 RCX: 00007fc26075e68e [ 275.928401][T10815] RDX: 000000000000000f RSI: 00007fc2616500a0 RDI: 0000000000000004 [ 275.928413][T10815] RBP: 00007fc261650090 R08: 0000000000000000 R09: 0000000000000000 [ 275.928424][T10815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.928434][T10815] R13: 00007fc260a26218 R14: 00007fc260a26180 R15: 00007ffe7f8928f8 [ 275.928464][T10815] [ 276.265182][T10819] xt_policy: output policy not valid in PREROUTING and INPUT [ 276.344496][T10802] syzkaller0: entered promiscuous mode [ 276.364632][T10802] syzkaller0: entered allmulticast mode [ 276.392094][T10802] tipc: Resetting bearer [ 276.496694][ T12] tipc: Resetting bearer [ 276.570143][T10795] tipc: Resetting bearer [ 276.671896][T10837] netlink: 'syz.4.1197': attribute type 13 has an invalid length. [ 276.699768][T10837] netlink: 'syz.4.1197': attribute type 17 has an invalid length. [ 278.242188][T10795] tipc: Disabling bearer [ 278.929625][T10837] syz_tun: left promiscuous mode [ 278.935699][T10837] ip6gretap0: left promiscuous mode [ 278.946013][T10837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.954089][T10837] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.023406][T10837] veth1_to_hsr: left promiscuous mode [ 279.034122][T10837] veth1_vlan: left promiscuous mode [ 279.040197][T10837] veth0_vlan: left promiscuous mode [ 279.046662][T10837] veth0_vlan: entered promiscuous mode [ 279.055011][T10837] veth1_vlan: entered promiscuous mode [ 279.067847][T10837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.083659][T10837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.093851][T10837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.103065][T10837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.140437][T10837] syz_tun: entered promiscuous mode [ 279.147006][T10837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.160450][T10837] ip6gretap0: entered promiscuous mode [ 279.193226][ T5719] lo speed is unknown, defaulting to 1000 [ 279.220530][ T7402] lo speed is unknown, defaulting to 1000 [ 279.229020][T10873] sit0: entered promiscuous mode [ 279.244574][T10873] netlink: 'syz.1.1203': attribute type 1 has an invalid length. [ 279.253173][T10873] __nla_validate_parse: 6 callbacks suppressed [ 279.253188][T10873] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1203'. [ 279.482201][T10882] macvlan0: entered promiscuous mode [ 279.517294][T10882] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 279.557978][T10882] netlink: 'syz.0.1205': attribute type 2 has an invalid length. [ 279.580091][T10892] batadv_slave_1: entered promiscuous mode [ 279.628566][T10892] block nbd0: not configured, cannot reconfigure [ 279.662117][T10888] lo speed is unknown, defaulting to 1000 [ 280.003320][ T7511] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 280.078369][T10905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.183292][T10892] batadv_slave_1: left promiscuous mode [ 280.747264][T10945] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 280.906376][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 280.924119][T10952] hsr_slave_0: left promiscuous mode [ 280.933771][T10952] hsr_slave_1: left promiscuous mode [ 281.633271][T10985] netlink: 'syz.4.1230': attribute type 1 has an invalid length. [ 281.645207][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 281.676152][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 281.764685][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 281.765219][T10985] bond2: entered promiscuous mode [ 281.790638][T10985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.831806][T10998] bond2 (unregistering): Released all slaves [ 281.838348][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.867929][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 282.126593][T11012] sch_tbf: burst 0 is lower than device lo mtu (80) ! [ 282.435595][T11036] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 282.505988][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 282.555541][T11035] bond9: Unable to set up delay as MII monitoring is disabled [ 282.575360][T11035] bond9 (unregistering): Released all slaves [ 282.592070][T11051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1248'. [ 282.661011][T11054] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1248'. [ 282.697672][T11054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.735360][T11056] netlink: 'syz.3.1248': attribute type 29 has an invalid length. [ 282.756824][T11054] bond0 (unregistering): Released all slaves [ 282.785346][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 283.000500][T11061] openvswitch: netlink: IP tunnel dst address not specified [ 283.216381][T11081] netlink: 'syz.1.1257': attribute type 23 has an invalid length. [ 283.222372][T11073] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.227124][T11081] netlink: 'syz.1.1257': attribute type 21 has an invalid length. [ 283.387557][T11092] syzkaller0: entered promiscuous mode [ 283.405454][T11092] syzkaller0: entered allmulticast mode [ 283.633650][T11098] bond5: option packets_per_slave: invalid value (1048582) [ 283.650456][T11098] bond5: option packets_per_slave: allowed values 0 - 65535 [ 283.740618][T11098] bond5 (unregistering): Released all slaves [ 284.696115][T11175] __nla_validate_parse: 4 callbacks suppressed [ 284.696134][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1269'. [ 285.101128][T11126] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.108864][T11126] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.471944][T11126] veth1_to_hsr: left promiscuous mode [ 285.596381][T11126] geneve1: left promiscuous mode [ 285.678784][T11126] geneve2: left promiscuous mode [ 285.690190][T11126] geneve2: left allmulticast mode [ 285.710446][T11126] bond0: left promiscuous mode [ 285.719763][T11126] bond0: left allmulticast mode [ 285.765054][T11126] vlan2: left allmulticast mode [ 285.770568][T11126] bond1: left allmulticast mode [ 285.775543][T11126] geneve3: left allmulticast mode [ 285.793352][T11126] bond2: left promiscuous mode [ 285.801262][T11126] ip6gre2: left promiscuous mode [ 285.806251][T11126] ip6gre2: left allmulticast mode [ 285.815810][T11126] geneve4: left promiscuous mode [ 285.824660][T11126] gretap1: left allmulticast mode [ 285.833562][T11126] bridge1: left promiscuous mode [ 285.839294][T11126] bridge1: left allmulticast mode [ 285.854719][T11126] bond5: left promiscuous mode [ 285.862399][T11126] bond6: left promiscuous mode [ 285.879721][T11126] bond8: left promiscuous mode [ 285.933533][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1270'. [ 285.969221][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.006805][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.028653][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.046594][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.075409][T11194] netlink: 'syz.4.1272': attribute type 1 has an invalid length. [ 286.088817][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.103907][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'. [ 286.116780][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.161253][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.181935][T11202] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1273'. [ 286.186206][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.251835][T11194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.298512][T11198] bond2: (slave veth5): Enslaving as an active interface with a down link [ 286.308649][T11210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1271'. [ 286.448018][T11203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.502873][T11203] bond2: (slave batadv0): making interface the new active one [ 286.573760][T11203] batadv0: entered promiscuous mode [ 286.593994][T11203] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 286.612029][T11200] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 286.703483][T11207] : option downdelay: invalid value (18446744073709547007) [ 286.721517][T11207] : option downdelay: allowed values 0 - 2147483647 [ 286.744620][T11207]  (unregistering): Released all slaves [ 286.868124][T11232] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 287.175181][T11254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1281'. [ 287.437562][T11271] syzkaller0: entered promiscuous mode [ 287.452695][T11271] syzkaller0: entered allmulticast mode [ 287.661116][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 288.261910][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 288.314759][T11318] netlink: 'syz.4.1302': attribute type 3 has an invalid length. [ 288.329829][T11319] pimreg: entered allmulticast mode [ 288.479474][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 288.776675][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1307'. [ 289.064604][T11352] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 290.815772][T11380] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1317'. [ 290.826458][T11379] syzkaller0: entered promiscuous mode [ 290.843873][T11379] syzkaller0: entered allmulticast mode [ 290.845346][T11382] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1319'. [ 290.895757][T11379] syzkaller1: entered promiscuous mode [ 290.908635][T11379] syzkaller1: entered allmulticast mode [ 290.930317][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'. [ 290.966301][T11384] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1320'. [ 291.017616][T11392] syzkaller0: entered promiscuous mode [ 291.030111][T11392] syzkaller0: entered allmulticast mode [ 291.248717][T11403] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 291.268457][T11403] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1326'. [ 291.290536][T11403] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 291.376131][T11399] netlink: 'syz.0.1323': attribute type 15 has an invalid length. [ 291.616758][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 291.662728][T11421] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 291.718779][T11421] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 291.935989][T11434] lo speed is unknown, defaulting to 1000 [ 292.207337][T11460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1342'. [ 292.251583][T11464] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1339'. [ 292.300365][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'. [ 292.317526][T11467] pim6reg1: entered promiscuous mode [ 292.324023][T11467] pim6reg1: entered allmulticast mode [ 292.616949][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 292.898919][T11487] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 295.089311][T11453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.296548][T11501] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 295.382045][T11500] bond9: option primary_reselect: invalid value (6) [ 295.397148][T11500] bond9 (unregistering): Released all slaves [ 295.427184][T11512] netlink: 'syz.1.1354': attribute type 15 has an invalid length. [ 295.494487][T11501] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 295.627370][ T63] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 295.646162][T11512] netlink: 'syz.1.1354': attribute type 15 has an invalid length. [ 295.661933][ T63] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 295.684668][ T63] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 295.703489][ T63] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 295.835781][T11535] ip6t_srh: unknown srh invflags 4000 [ 295.912503][T11542] __nla_validate_parse: 6 callbacks suppressed [ 295.912521][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 295.934882][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 295.961397][T11543] netlink: 'syz.3.1364': attribute type 11 has an invalid length. [ 296.307956][T11563] netlink: 'syz.1.1367': attribute type 1 has an invalid length. [ 296.445929][T11573] netlink: 'syz.0.1371': attribute type 32 has an invalid length. [ 296.471256][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 296.834661][T11576] lo speed is unknown, defaulting to 1000 [ 296.870031][T11572] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.884165][T11599] unsupported nla_type 46433 [ 296.892245][T11572] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 297.107136][T11610] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1376'. [ 297.126329][T11610] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1376'. [ 297.142698][T11610] netlink: 'syz.2.1376': attribute type 5 has an invalid length. [ 297.173358][T11610] netlink: 'syz.2.1376': attribute type 6 has an invalid length. [ 297.186275][T11610] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1376'. [ 297.437659][T11620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1380'. [ 297.528937][T11621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1376'. [ 297.633110][T11625] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 297.701991][T11626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1381'. [ 298.125706][T11572] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.130680][T11625] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 298.137587][T11572] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 298.211975][T11572] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.266112][T11572] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 298.308805][ T5922] batadv0: left promiscuous mode [ 298.352495][T11572] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.374255][T11572] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 298.525994][T11572] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.558948][T11572] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 298.901826][T11652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'. [ 299.566755][T11661] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 299.641362][T11661] bond3 (unregistering): Released all slaves [ 300.202966][T11688] syzkaller0: entered promiscuous mode [ 300.251104][T11688] syzkaller0: entered allmulticast mode [ 300.266263][T11693] batadv_slave_1: entered promiscuous mode [ 300.317521][T11693] batadv_slave_1: left promiscuous mode [ 303.384993][T11731] syzkaller0: entered promiscuous mode [ 303.393869][T11731] syzkaller0: entered allmulticast mode [ 303.407323][T11765] __nla_validate_parse: 3 callbacks suppressed [ 303.407340][T11765] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1403'. [ 303.452028][T11765] tipc: Invalid UDP bearer configuration [ 303.452089][T11765] tipc: Enabling of bearer rejected, failed to enable media [ 303.683026][T11775] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1405'. [ 304.418950][T11793] syzkaller1: entered promiscuous mode [ 304.441964][T11793] syzkaller1: entered allmulticast mode [ 304.470858][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'. [ 304.511919][T11810] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 304.765645][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1414'. [ 304.872579][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'. [ 304.893988][T11836] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1416'. [ 305.366533][T11846] netlink: 'syz.1.1422': attribute type 1 has an invalid length. [ 305.406538][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 305.442943][T11851] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1423'. [ 305.624526][T11849] macvtap3: entered promiscuous mode [ 305.640749][T11849] bridge0: entered promiscuous mode [ 305.700939][T11854] gretap3: entered allmulticast mode [ 305.730965][T11854] bond9: (slave gretap3): making interface the new active one [ 305.763098][T11854] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 307.235451][T11929] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1437'. [ 307.333059][T11931] netlink: 'syz.2.1437': attribute type 4 has an invalid length. [ 307.392416][T11926] lo speed is unknown, defaulting to 1000 [ 308.095255][T11955] netlink: 'syz.2.1443': attribute type 2 has an invalid length. [ 308.116184][T11955] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 308.133400][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 308.159995][T11955] nbd: illegal input index -120127480 [ 308.480438][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'. [ 308.517925][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'. [ 308.822101][T11981] sctp: [Deprecated]: syz.4.1449 (pid 11981) Use of int in max_burst socket option. [ 308.822101][T11981] Use struct sctp_assoc_value instead [ 308.911486][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 308.951355][T11982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.255346][T11981] lo speed is unknown, defaulting to 1000 [ 309.574628][T11982] lo speed is unknown, defaulting to 1000 [ 309.696719][T12029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1458'. [ 310.101711][T12042] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1461'. [ 310.155799][T12043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1461'. [ 310.364948][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 310.644993][T12061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1464'. [ 310.694078][T12062] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1464'. [ 310.766864][T12066] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 310.898479][T12066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.949023][T12075] bond0: (slave veth11): Enslaving as an active interface with a down link [ 310.987847][T12080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.097604][T12080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.123723][T12080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 311.141537][T12080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.166316][T12080] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 311.261273][T12066] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 311.277965][T12066] bond0: (slave batadv1): making interface the new active one [ 311.295042][T12066] batadv1: entered promiscuous mode [ 311.302008][T12066] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 311.312757][T12070] lo speed is unknown, defaulting to 1000 [ 311.330378][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.337600][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.352591][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.359835][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.162324][T12114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1473'. [ 313.102220][T12134] bond10 (unregistering): Released all slaves [ 313.362907][T12153] netlink: 'syz.3.1485': attribute type 4 has an invalid length. [ 313.381890][T12153] netlink: 'syz.3.1485': attribute type 4 has an invalid length. [ 313.569013][T12160] netlink: 'syz.4.1487': attribute type 1 has an invalid length. [ 313.705845][T12160] bond3: entered promiscuous mode [ 313.713415][T12160] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.760692][T12168] xt_NFQUEUE: number of total queues is 0 [ 313.795117][T12160] __nla_validate_parse: 4 callbacks suppressed [ 313.795133][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 313.823975][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 313.826747][T12165] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1488'. [ 313.875135][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 313.906755][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 313.970831][T12181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1487'. [ 314.108851][T12187] netlink: 'syz.1.1492': attribute type 5 has an invalid length. [ 314.699064][T12203] syzkaller0: entered promiscuous mode [ 314.720032][T12203] syzkaller0: entered allmulticast mode [ 314.876378][T12208] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.1499'. [ 314.904198][T12208] openvswitch: netlink: Message has 16 unknown bytes. [ 315.164764][T12200] No such timeout policy "syz1" [ 315.191115][T12200] netlink: zone id is out of range [ 315.203403][T12200] netlink: zone id is out of range [ 315.218927][T12200] netlink: zone id is out of range [ 315.236029][T12200] netlink: zone id is out of range [ 315.261466][T12200] netlink: zone id is out of range [ 315.274674][T12200] netlink: zone id is out of range [ 315.286455][T12200] netlink: zone id is out of range [ 315.292896][T12200] netlink: zone id is out of range [ 315.299175][T12200] netlink: zone id is out of range [ 315.836983][T12241] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1507'. [ 315.873885][ T7394] IPVS: starting estimator thread 0... [ 315.989187][T12243] IPVS: using max 31 ests per chain, 74400 per kthread [ 316.221797][T12266] netlink: 'syz.1.1513': attribute type 21 has an invalid length. [ 316.277466][T12266] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1513'. [ 316.776761][T12291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1521'. [ 317.043959][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.053113][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.432132][T12310] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 317.482622][T12310] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 317.803410][T12324] syzkaller0: entered promiscuous mode [ 317.812126][T12324] syzkaller0: entered allmulticast mode [ 320.441097][T12365] __nla_validate_parse: 6 callbacks suppressed [ 320.441115][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 320.478772][T12366] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.026367][T12390] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 321.036653][T12390] netlink: 'syz.1.1550': attribute type 8 has an invalid length. [ 321.166965][T12395] netlink: 'syz.2.1552': attribute type 3 has an invalid length. [ 321.195438][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 321.316563][T12401] x_tables: unsorted entry at hook 3 [ 321.401953][T12401] vlan0: entered allmulticast mode [ 321.419834][T12401] bond0: entered allmulticast mode [ 321.441923][T12408] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1553'. [ 321.469682][T12401] batadv1: entered allmulticast mode [ 322.071905][T12433] netlink: 'syz.3.1561': attribute type 1 has an invalid length. [ 322.096191][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 322.119750][T12435] netlink: 'syz.3.1561': attribute type 1 has an invalid length. [ 322.143338][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 322.421657][T12442] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 322.745537][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 322.785784][T12446] syzkaller0: entered promiscuous mode [ 322.808757][T12446] syzkaller0: entered allmulticast mode [ 322.889193][ T12] batadv1: left promiscuous mode [ 323.236740][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1570'. [ 323.260532][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 323.261545][T12469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1570'. [ 323.326171][T12475] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1569'. [ 325.354932][T12467] netlink: 'syz.0.1569': attribute type 4 has an invalid length. [ 325.401634][T12475] macvlan3: entered promiscuous mode [ 325.461460][T12484] syzkaller0: entered promiscuous mode [ 325.471578][T12484] syzkaller0: entered allmulticast mode [ 325.540914][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 325.576390][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 325.647229][T12500] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1574'. [ 325.840883][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 325.861066][T12505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1576'. [ 325.910536][T12512] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1575'. [ 325.994068][T12509] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1575'. [ 326.675290][T12552] sctp: [Deprecated]: syz.1.1583 (pid 12552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.675290][T12552] Use struct sctp_sack_info instead [ 326.683244][T12527] syzkaller0: entered promiscuous mode [ 326.737364][T12527] syzkaller0: entered allmulticast mode [ 326.936542][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 326.978634][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 327.004467][T12566] nbd: couldn't find a device at index 0 [ 327.074342][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'. [ 327.123973][T12571] netlink: 'syz.0.1587': attribute type 1 has an invalid length. [ 329.363426][T12588] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 329.374588][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.385696][ T5934] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.420886][ T5934] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.703679][T12588] 8021q: adding VLAN 0 to HW filter on device bond9 [ 329.729785][ T5934] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.773465][ T5934] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.827583][T12595] macvlan1: entered promiscuous mode [ 329.843207][T12595] macvlan1: entered allmulticast mode [ 329.858664][T12595] batadv_slave_1: entered allmulticast mode [ 329.870591][T12595] batadv_slave_1: entered promiscuous mode [ 329.885046][T12595] team0: Port device macvlan1 added [ 330.357119][T12627] net_ratelimit: 14 callbacks suppressed [ 330.357149][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.416839][T12625] netlink: 'syz.0.1603': attribute type 14 has an invalid length. [ 330.657327][T12637] netlink: 'syz.1.1607': attribute type 4 has an invalid length. [ 330.678094][T12639] lo speed is unknown, defaulting to 1000 [ 330.767368][T12651] __nla_validate_parse: 8 callbacks suppressed [ 330.767386][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1611'. [ 330.869373][T12654] netlink: 'syz.0.1612': attribute type 6 has an invalid length. [ 330.989656][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 331.155555][T12661] xt_CT: No such helper "syz0" [ 331.455236][T12676] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1619'. [ 331.479950][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 331.579921][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1620'. [ 331.602743][T12681] netlink: 'syz.1.1620': attribute type 7 has an invalid length. [ 331.628567][T12681] netlink: 'syz.1.1620': attribute type 8 has an invalid length. [ 331.652347][T12684] netlink: 'syz.1.1620': attribute type 1 has an invalid length. [ 331.652866][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 331.701726][T12684] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1620'. [ 331.852119][T12688] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 331.885897][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 332.752175][T12702] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 332.803518][T12702] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 333.083347][T12713] tun0: tun_chr_ioctl cmd 1074025680 [ 333.199216][T12724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1635'. [ 333.263065][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 333.434861][T12728] team0: Port device team_slave_0 removed [ 333.765691][T12744] IPv6: addrconf: prefix option has invalid lifetime [ 334.578203][T12779] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.587899][T12779] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.722675][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.729958][T12781] bridge0: port 2(bridge_slave_1) entered listening state [ 334.737362][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.744570][T12781] bridge0: port 1(bridge_slave_0) entered listening state [ 334.797400][T12781] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.804209][T12787] x_tables: duplicate underflow at hook 1 [ 334.804699][T12781] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.954350][T12787] vlan0: entered promiscuous mode [ 334.980559][T12787] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 335.025958][T12787] vlan0: entered allmulticast mode [ 335.038783][T12787] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 335.276934][T12809] syzkaller0: entered promiscuous mode [ 335.297695][T12809] syzkaller0: entered allmulticast mode [ 335.320296][T12811] tipc: Enabled bearer , priority 0 [ 335.475826][T12810] tipc: Disabling bearer [ 335.769153][T12838] netlink: 'syz.0.1667': attribute type 1 has an invalid length. [ 335.792269][T12839] __nla_validate_parse: 14 callbacks suppressed [ 335.792288][T12839] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1668'. [ 335.811227][T12840] x_tables: duplicate entry at hook 2 [ 335.882328][T12845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1667'. [ 335.974318][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1667'. [ 336.015514][T12838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1667'. [ 336.022626][T12849] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 336.037020][T12838] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.067013][T12849] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1669'. [ 336.377118][T12859] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 336.460200][T12857] netlink: zone id is out of range [ 336.501835][T12857] netlink: zone id is out of range [ 336.512230][T12857] netlink: zone id is out of range [ 336.539316][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1672'. [ 336.560646][T12857] netlink: zone id is out of range [ 336.763194][T12857] netlink: zone id is out of range [ 336.861814][T12886] netlink: 'syz.0.1673': attribute type 11 has an invalid length. [ 336.923713][T12857] netlink: zone id is out of range [ 336.985867][T12857] netlink: zone id is out of range [ 336.996384][T12857] netlink: zone id is out of range [ 337.037489][T12857] netlink: zone id is out of range [ 337.065746][T12878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.123134][T12892] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1673'. [ 337.152434][T12884] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 338.120114][T10867] bridge0: entered promiscuous mode [ 338.211678][T12942] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1686'. [ 338.243437][T12941] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1686'. [ 338.295017][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 339.057877][T12980] netlink: 'syz.4.1697': attribute type 5 has an invalid length. [ 339.143806][T12980] geneve2: entered promiscuous mode [ 339.919486][T13019] netlink: 'syz.3.1711': attribute type 1 has an invalid length. [ 340.200049][T13019] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.319919][T13022] bond5: (slave veth15): Enslaving as an active interface with a down link [ 340.378446][T13023] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 340.386569][T13023] bond5: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 340.680037][T13034] lo speed is unknown, defaulting to 1000 [ 340.680401][T13044] sch_tbf: burst 4 is lower than device lo mtu (1294) ! [ 341.011456][T13053] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 341.090819][T13059] __nla_validate_parse: 6 callbacks suppressed [ 341.090862][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'. [ 341.191114][T13053] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 341.223231][T13053] bond6 (unregistering): Released all slaves [ 341.388994][T13075] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1722'. [ 341.493938][T13075] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 341.575034][T13059] team_slave_0: left promiscuous mode [ 341.583981][T13059] team_slave_1: left promiscuous mode [ 341.709311][T13059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.739447][T13059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.831124][T13083] netlink: 'syz.2.1722': attribute type 3 has an invalid length. [ 341.858986][T13083] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1722'. [ 341.901060][T13059] bond1: left allmulticast mode [ 341.906148][T13059] bridge1: left allmulticast mode [ 341.913425][T13059] bridge1: left promiscuous mode [ 342.093044][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.115959][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.147487][T13085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1724'. [ 342.203056][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.231869][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.245628][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1725'. [ 342.266921][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.301848][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.344260][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.371207][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.555121][T13105] netlink: 'syz.0.1729': attribute type 1 has an invalid length. [ 343.026207][T13133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1735'. [ 343.082779][T13136] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 343.099436][T13136] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 343.520383][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 343.873567][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1741'. [ 343.880365][T13167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'. [ 343.889915][T13170] xt_ipcomp: unknown flags 1D [ 343.926548][T13170] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1743'. [ 344.066138][T13168] Unsupported ieee802154 address type: 0 [ 344.074647][T13168] bridge_slave_1: left allmulticast mode [ 344.081509][T13168] bridge_slave_1: left promiscuous mode [ 344.090395][T13168] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.103012][T13168] bridge_slave_0: left allmulticast mode [ 344.109193][T13168] bridge_slave_0: left promiscuous mode [ 344.128769][T13168] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.232816][T13186] net_ratelimit: 21 callbacks suppressed [ 344.232834][T13186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.267828][T13190] xt_limit: Overflow, try lower: 2/2147483648 [ 344.437212][T13196] netlink: 'syz.2.1749': attribute type 62 has an invalid length. [ 344.494109][T13196] tipc: Enabled bearer , priority 0 [ 344.519696][T13196] syzkaller0: entered promiscuous mode [ 344.534317][T13196] syzkaller0: entered allmulticast mode [ 344.629866][T13196] tipc: Resetting bearer [ 344.655218][T13195] tipc: Resetting bearer [ 344.728082][T13195] tipc: Disabling bearer [ 345.206733][T13244] sctp: [Deprecated]: syz.3.1763 (pid 13244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.206733][T13244] Use struct sctp_sack_info instead [ 345.372944][T13253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.397691][T13253] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.420021][T13248] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 345.466544][ T7394] IPVS: starting estimator thread 0... [ 345.568710][T13269] IPVS: using max 30 ests per chain, 72000 per kthread [ 345.642120][T13274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.825577][T13287] netlink: 'syz.0.1775': attribute type 3 has an invalid length. [ 345.850545][T13290] tipc: Enabled bearer , priority 0 [ 345.914894][T13290] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 346.003818][T13286] tipc: Disabling bearer [ 346.090485][T13309] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.097720][T13309] bridge0: port 2(bridge_slave_1) entered listening state [ 346.105182][T13309] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.112383][T13309] bridge0: port 1(bridge_slave_0) entered listening state [ 346.159286][T13309] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 346.219125][T13318] __nla_validate_parse: 14 callbacks suppressed [ 346.219142][T13318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1783'. [ 346.249661][T13318] netlink: 'syz.1.1783': attribute type 7 has an invalid length. [ 346.258700][T13318] netlink: 'syz.1.1783': attribute type 8 has an invalid length. [ 346.273009][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1783'. [ 346.294116][T13321] netlink: 'syz.1.1783': attribute type 1 has an invalid length. [ 346.310448][T13321] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1783'. [ 346.516590][T13327] syzkaller0: entered promiscuous mode [ 346.537755][T13327] syzkaller0: entered allmulticast mode [ 346.550782][T13326] tipc: Enabled bearer , priority 0 [ 346.652106][T13336] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1790'. [ 346.923568][T13353] macsec1: entered promiscuous mode [ 346.977503][T13325] tipc: Resetting bearer [ 347.034556][T13356] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1791'. [ 347.075907][T13325] tipc: Disabling bearer [ 347.296176][T13370] netlink: 'syz.4.1795': attribute type 5 has an invalid length. [ 347.541544][T13379] sctp: [Deprecated]: syz.3.1799 (pid 13379) Use of int in max_burst socket option deprecated. [ 347.541544][T13379] Use struct sctp_assoc_value instead [ 347.604456][T13379] macsec0: entered promiscuous mode [ 347.628788][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 347.673951][T13379] macsec0 (unregistering): left promiscuous mode [ 347.849516][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 347.851197][T13387] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 347.882684][T13389] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 347.895952][T13391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1802'. [ 347.898851][T13389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1801'. [ 348.181480][T13401] lo speed is unknown, defaulting to 1000 [ 348.184506][T13402] sit0: left promiscuous mode [ 348.257155][T13402] veth1_to_hsr: left promiscuous mode [ 348.293029][T13410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1807'. [ 348.302356][T13402] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 348.333226][T13402] gretap3: left allmulticast mode [ 348.396647][ T35] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 348.424656][ T35] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 348.491370][ T35] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 348.658950][T13417] IPv6: 8: Disabled Multicast RS [ 348.832462][T13419] bridge0: left promiscuous mode [ 348.855090][T13419] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.895256][T13419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.054911][T13419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.081993][T13419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.129767][T13419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.153163][T13419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.192331][T13419] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 349.298876][T13433] netlink: 'syz.2.1812': attribute type 4 has an invalid length. [ 349.599212][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.607423][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.627015][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.634191][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.765830][T13439] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 350.196467][T13461] bond10: Invalid ad_actor_system MAC address. [ 350.203363][T13461] bond10: option ad_actor_system: invalid value (7) [ 350.219516][T13461] bond10 (unregistering): Released all slaves [ 351.104815][T13500] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 351.234046][T13505] __nla_validate_parse: 13 callbacks suppressed [ 351.234066][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 351.262692][T13505] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1832'. [ 351.416954][T13516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1835'. [ 351.533855][T13522] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1838'. [ 351.590349][T13522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1838'. [ 351.671354][T13532] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1838'. [ 351.746340][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 351.757133][T13535] netlink: 'syz.2.1841': attribute type 1 has an invalid length. [ 351.951444][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'. [ 351.961440][T13540] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1843'. [ 352.033773][T13542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1842'. [ 352.391504][T13558] geneve3: entered promiscuous mode [ 352.839085][T13569] netlink: 'syz.0.1851': attribute type 22 has an invalid length. [ 353.212109][T13579] syz_tun: entered allmulticast mode [ 353.427713][T13576] syz_tun: left allmulticast mode [ 353.598334][ T29] audit: type=1800 audit(1783664994.840:7): pid=13584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1855" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1713 res=0 errno=0 [ 354.206298][T13599] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.667876][T13614] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 355.486791][T13630] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.516899][T13630] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 356.889659][T13667] atomic_op ffff888022b5d198 conn xmit_atomic 0000000000000000 [ 356.977563][T13663] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 357.773752][T13685] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 357.801079][T13685] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 357.813732][T13685] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 358.336146][T13709] Cannot find add_set index 2 as target [ 358.512220][T13716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.751569][T13720] netlink: 'syz.3.1890': attribute type 14 has an invalid length. [ 358.760469][T13720] __nla_validate_parse: 12 callbacks suppressed [ 358.760485][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1890'. [ 358.786882][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.797308][T13720] netlink: 'syz.3.1890': attribute type 14 has an invalid length. [ 358.807291][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.819181][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1890'. [ 358.828906][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.837996][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.074869][T13723] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 359.953207][T13744] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 360.215493][T13750] veth1_to_hsr: entered promiscuous mode [ 360.234846][T13750] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1899'. [ 360.256452][T13750] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 360.758733][T13761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1901'. [ 361.095418][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 361.200551][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 361.209044][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 361.812313][T13784] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 361.913618][T13792] bond0: (slave ip6tnl0): refused to change device type [ 362.014165][T13792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1906'. [ 362.068038][T13792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1906'. [ 362.505652][T13808] syzkaller0: entered promiscuous mode [ 362.522121][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 362.545908][T13808] syzkaller0: entered allmulticast mode [ 362.697145][T13813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.072364][T13824] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1919'. [ 363.095994][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 363.473165][T13831] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 363.709534][T13833] bond7 (unregistering): Released all slaves [ 364.411346][T13840] vlan0: entered promiscuous mode [ 364.420464][T13840] bridge0: entered promiscuous mode [ 364.765551][T13848] __nla_validate_parse: 2 callbacks suppressed [ 364.765568][T13848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1927'. [ 364.781760][T13848] netlink: 'syz.3.1927': attribute type 4 has an invalid length. [ 365.372652][T13853] gtp0: entered promiscuous mode [ 365.377779][T13853] gtp0: entered allmulticast mode [ 365.531479][T13858] netlink: 'syz.4.1930': attribute type 7 has an invalid length. [ 365.560019][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 365.597456][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 365.710876][T13862] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.877934][T13864] lo speed is unknown, defaulting to 1000 [ 366.118655][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 366.137763][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'. [ 366.222510][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 366.241953][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'. [ 366.476407][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1935'. [ 367.014049][T13878] infiniband syz0: set down [ 367.020089][T13878] infiniband syz0: added ipvlan0 [ 367.049859][T13878] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 367.065225][T13878] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 367.083383][T13878] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 367.147995][T13878] RDS/IB: syz0: added [ 367.153322][T13878] smc: adding ib device syz0 with port count 1 [ 367.160271][T13878] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 367.637157][T13885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1938'. [ 368.483966][T13908] tipc: New replicast peer: 255.255.255.255 [ 368.502192][T13908] tipc: Enabled bearer , priority 10 [ 368.534223][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1944'. [ 368.567777][T13908] netlink: 'syz.3.1944': attribute type 1 has an invalid length. [ 368.763689][T13908] bond7: entered promiscuous mode [ 368.776756][T13908] 8021q: adding VLAN 0 to HW filter on device bond7 [ 368.792793][T13913] bond7: entered allmulticast mode [ 368.930683][T13908] bond7: (slave bridge6): making interface the new active one [ 368.951138][T13908] bridge6: entered promiscuous mode [ 368.956952][T13908] bridge6: entered allmulticast mode [ 368.967327][T13908] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 369.621259][ T7394] tipc: Node number set to 2274342243 [ 370.243859][T13974] xt_hashlimit: size too large, truncated to 1048576 [ 370.814735][T13916] lo speed is unknown, defaulting to 1000 [ 371.770787][T14007] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 371.778682][T14013] netlink: 'syz.3.1970': attribute type 3 has an invalid length. [ 371.794936][T14013] __nla_validate_parse: 6 callbacks suppressed [ 371.794952][T14013] netlink: 646 bytes leftover after parsing attributes in process `syz.3.1970'. [ 371.942802][T14023] netlink: 'syz.3.1972': attribute type 3 has an invalid length. [ 372.182378][T14032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1974'. [ 372.219659][T14032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1974'. [ 372.488060][T14054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1980'. [ 372.509367][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 372.753888][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 372.777308][T14074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1984'. [ 373.012931][T14086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1985'. [ 373.224939][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1987'. [ 373.272214][T14097] block nbd1: Unsupported socket: should be TCP or UNIX. [ 373.735554][T14124] raw_sendmsg: syz.3.1992 forgot to set AF_INET. Fix it! [ 373.846159][T14124] pimreg9: entered allmulticast mode [ 373.908872][T14137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 374.270474][T14154] syzkaller0: entered promiscuous mode [ 374.286852][T14154] syzkaller0: entered allmulticast mode [ 375.001583][T14193] syzkaller0: entered promiscuous mode [ 375.027173][T14193] syzkaller0: entered allmulticast mode [ 375.474843][T14205] syzkaller1: entered promiscuous mode [ 375.489642][T14205] syzkaller1: entered allmulticast mode [ 376.558346][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.565638][ C0] bridge0: topology change detected, propagating [ 376.572442][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.579720][ C0] bridge0: topology change detected, propagating [ 376.659328][T14284] sctp: [Deprecated]: syz.0.2026 (pid 14284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.659328][T14284] Use struct sctp_sack_info instead [ 376.977861][T14294] bond7: entered promiscuous mode [ 377.003183][T14294] bond7: entered allmulticast mode [ 377.023190][T14294] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.096764][T14303] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.308871][T14312] netlink: 'syz.1.2034': attribute type 1 has an invalid length. [ 377.315158][T14314] __nla_validate_parse: 11 callbacks suppressed [ 377.315176][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2035'. [ 377.520828][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2034'. [ 377.548952][T14316] bond10: (slave bridge5): Enslaving as a backup interface with an up link [ 377.564902][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2034'. [ 377.607127][T14321] macvlan2: entered promiscuous mode [ 377.622293][T14321] macvlan2: entered allmulticast mode [ 377.636888][T14321] bond10: entered promiscuous mode [ 377.649460][T14321] bridge5: entered promiscuous mode [ 377.662700][T14321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 377.692713][T14321] bond10: left promiscuous mode [ 377.700853][T14321] bridge5: left promiscuous mode [ 377.908108][T14337] Bluetooth: MGMT ver 1.23 [ 377.953582][T14337] netlink: 'syz.2.2040': attribute type 30 has an invalid length. [ 377.971993][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 377.986476][T14339] Cannot find set identified by id 65534 to match [ 378.066859][T14343] netlink: 'syz.4.2043': attribute type 2 has an invalid length. [ 378.110708][T14343] netlink: 'syz.4.2043': attribute type 1 has an invalid length. [ 378.121174][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 378.129637][T14343] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2043'. [ 378.335661][T14342] bond11 (unregistering): Released all slaves [ 378.391072][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2047'. [ 378.393571][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2047'. [ 378.439807][T14362] netlink: 'syz.0.2048': attribute type 1 has an invalid length. [ 378.447919][T14356] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 378.473134][T14356] tipc: Enabled bearer , priority 10 [ 378.483146][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.498339][T14357] tipc: Enabling of bearer rejected, already enabled [ 378.507645][T14359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2047'. [ 378.517923][T14360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2047'. [ 378.875099][T14373] lo speed is unknown, defaulting to 1000 [ 379.384998][T14403] netlink: 'syz.4.2059': attribute type 1 has an invalid length. [ 379.663106][T14405] 8021q: adding VLAN 0 to HW filter on device bond8 [ 380.035990][T14424] netlink: 'syz.1.2063': attribute type 1 has an invalid length. [ 380.590044][T14451] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 380.673460][T14451] syzkaller0: entered promiscuous mode [ 380.685149][T14451] syzkaller0: entered allmulticast mode [ 380.700735][T14456] netlink: 'syz.3.2071': attribute type 1 has an invalid length. [ 381.371086][T14485] netlink: 'syz.0.2082': attribute type 1 has an invalid length. [ 381.498852][T14485] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.562028][T14496] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.570185][T14496] bond9: (slave ipip0): The slave device specified does not support setting the MAC address [ 381.603679][T14496] bond9: (slave ipip0): Error -95 calling set_mac_address [ 381.911127][T14489] syzkaller0: entered promiscuous mode [ 381.932477][T14489] syzkaller0: entered allmulticast mode [ 382.020962][T14518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.685831][T14543] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 384.059988][T14520] tipc: Enabling of bearer rejected, failed to enable media [ 384.400418][T14562] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 384.478255][T14567] IPVS: Unknown mcast interface: macsec0 [ 384.495438][T14567] __nla_validate_parse: 12 callbacks suppressed [ 384.496463][T14567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2104'. [ 384.646091][T14575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2106'. [ 384.656146][T14575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2106'. [ 384.840172][T14575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2106'. [ 384.865362][T14575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2106'. [ 384.906972][T14575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2106'. [ 384.946561][T14575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2106'. [ 384.981138][T14575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2106'. [ 385.024406][T14575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2106'. [ 385.180177][T14575] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2106'. [ 386.121410][T14611] ip6gre1: entered promiscuous mode [ 386.150505][T14611] ip6gre1: entered allmulticast mode [ 386.691422][T14624] syzkaller0: entered promiscuous mode [ 386.705805][T14624] syzkaller0: entered allmulticast mode [ 388.326088][T14665] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 388.743845][T14670] set match dimension is over the limit! [ 389.581676][T14687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.832852][T14695] __nla_validate_parse: 66 callbacks suppressed [ 389.832871][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 389.916873][T14695] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2138'. [ 389.968385][T14696] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2138'. [ 390.273672][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 390.293181][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 390.311286][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 390.321835][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 390.333876][T14698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.367434][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 390.377498][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 390.508037][T14691] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 390.731262][T14706] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2141'. [ 391.431396][T14711] bond10: Unable to set down delay as MII monitoring is disabled [ 391.452084][T14711] bond10 (unregistering): Released all slaves [ 391.666398][T14716] veth1_vlan: left promiscuous mode [ 391.710785][T14716] veth1_vlan: entered promiscuous mode [ 391.750149][T14716] veth0_macvtap: left promiscuous mode [ 391.774542][T14716] veth0_macvtap: entered promiscuous mode [ 391.829926][T14716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.858970][T14716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.909865][T14716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.926755][T14716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.959672][T14716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.975825][T14716] bond1: entered allmulticast mode [ 391.988413][T14716] bridge1: entered allmulticast mode [ 392.000866][T14716] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 392.019003][T14716] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 392.038110][T14716] bridge1: entered promiscuous mode [ 392.070927][T14716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.112083][T14716] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 392.136368][T14716] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 392.158640][T14716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.202337][T14716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.300637][T14716] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.427423][T14716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.542136][T14716] bridge0: entered promiscuous mode [ 392.665306][T14716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 392.714279][T14716] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 392.861808][ T7397] team_slave_0: entered promiscuous mode [ 392.867583][ T7397] team_slave_1: entered promiscuous mode [ 393.033492][T14248] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.066583][T14248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.148880][T14248] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.197198][T14248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.246685][T14248] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.309504][T14248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.382503][T14248] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.415651][T14248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.466985][T14739] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.604263][T14739] bridge_slave_1 (unregistering): left allmulticast mode [ 393.625090][T14739] bridge_slave_1 (unregistering): left promiscuous mode [ 393.643917][T14739] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.706969][T14732] syzkaller1: entered promiscuous mode [ 393.715641][T14732] syzkaller1: entered allmulticast mode [ 396.290240][T14753] bond_slave_0: entered promiscuous mode [ 396.311508][T14753] bond_slave_0: entered allmulticast mode [ 396.988721][T14783] __nla_validate_parse: 4 callbacks suppressed [ 396.988739][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 397.263406][T14783] bond10 (unregistering): Released all slaves [ 397.743820][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 397.978139][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 398.413587][T14818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2164'. [ 398.674158][T14834] netlink: 'syz.0.2167': attribute type 1 has an invalid length. [ 398.920963][T14834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 398.976717][T14842] bond10: (slave veth0_to_bond): making interface the new active one [ 398.989653][T14842] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 399.234965][T14856] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.2171'. [ 399.355082][T14863] netlink: 'syz.3.2173': attribute type 9 has an invalid length. [ 399.607096][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2177'. [ 399.799635][T14884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2179'. [ 399.842336][T14891] netlink: 'syz.4.2181': attribute type 7 has an invalid length. [ 400.288499][T14908] syzkaller0: entered promiscuous mode [ 400.317583][T14908] syzkaller0: entered allmulticast mode [ 400.843098][T14926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2186'. [ 400.860357][T14926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2186'. [ 401.131230][T14947] netlink: 'syz.3.2195': attribute type 18 has an invalid length. [ 401.280211][T14947] veth17: entered allmulticast mode [ 401.759406][T14976] vlan2: entered allmulticast mode [ 401.774941][T14976] bond0: entered allmulticast mode [ 401.787181][T14976] gretap2: entered allmulticast mode [ 401.945462][T14985] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 401.981923][T14987] xt_hashlimit: size too large, truncated to 1048576 [ 402.095575][T14985] bond11: entered promiscuous mode [ 402.114687][T14985] 8021q: adding VLAN 0 to HW filter on device bond11 [ 402.313716][T15008] netlink: 'syz.3.2210': attribute type 8 has an invalid length. [ 402.348061][T15006] tipc: Enabled bearer , priority 0 [ 402.383210][T15006] syzkaller0: entered promiscuous mode [ 402.404563][T15006] syzkaller0: entered allmulticast mode [ 402.474573][T15006] tipc: Resetting bearer [ 402.479791][T15012] __nla_validate_parse: 15 callbacks suppressed [ 402.479810][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2212'. [ 402.791167][T15006] nbd0: detected capacity change from 0 to 63 [ 402.807185][T15015] block nbd0: NBD_DISCONNECT [ 402.820057][T15015] block nbd0: Disconnected due to user request. [ 402.831310][T15015] block nbd0: shutting down sockets [ 402.846450][ C0] blk_print_req_error: 101 callbacks suppressed [ 402.846489][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.862044][ C0] buffer_io_error: 138 callbacks suppressed [ 402.862061][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 402.877284][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.886436][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 402.897826][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.900576][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.906997][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 402.916068][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 402.931946][ T1695] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 402.938577][T15029] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 402.941130][ T1695] Buffer I/O error on dev nbd0, logical block 0, async page read [ 402.956532][ T1695] Buffer I/O error on dev nbd0, logical block 1, async page read [ 402.965511][ T1695] Buffer I/O error on dev nbd0, logical block 2, async page read [ 402.973874][ T1695] Buffer I/O error on dev nbd0, logical block 3, async page read [ 402.986840][ T1695] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 402.996484][ T1695] Buffer I/O error on dev nbd0, logical block 0, async page read [ 402.996938][T15003] tipc: Resetting bearer [ 403.005540][ T1695] Buffer I/O error on dev nbd0, logical block 1, async page read [ 403.019826][ T1695] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 403.030047][ T1695] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 403.039843][ T1695] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 403.049921][ T1695] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 403.062197][ T6876] ldm_validate_partition_table(): Disk read failed. [ 403.080938][ T6876] Dev nbd0: unable to read RDB block 0 [ 403.106735][ T6876] nbd0: unable to read partition table [ 403.133500][ T6876] ldm_validate_partition_table(): Disk read failed. [ 403.143780][T15003] tipc: Disabling bearer [ 403.150083][ T6876] Dev nbd0: unable to read RDB block 0 [ 403.161251][ T6876] nbd0: unable to read partition table [ 403.608891][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2223'. [ 403.636601][T15066] sctp: [Deprecated]: syz.1.2224 (pid 15066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.636601][T15066] Use struct sctp_sack_info instead [ 403.724021][T15066] ip6gre0: entered allmulticast mode [ 403.905922][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 403.939832][T15075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2225'. [ 404.126213][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2228'. [ 404.146706][T15090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2228'. [ 404.615924][T15105] ip6tnl2: entered allmulticast mode [ 404.704812][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2233'. [ 404.725499][T15114] macsec0: entered promiscuous mode [ 404.751252][ T14] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 404.797001][ T14] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 404.804867][T10867] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 404.829028][T15108] batadv_slave_0: entered promiscuous mode [ 404.843928][T15113] tipc: New replicast peer: 172.20.20.187 [ 404.867773][T15113] tipc: Enabled bearer , priority 10 [ 405.019801][T10867] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 405.068877][T10867] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 405.345182][T15146] syzkaller0: entered promiscuous mode [ 405.359226][T15146] syzkaller0: entered allmulticast mode [ 405.441827][T15108] batadv_slave_0: left promiscuous mode [ 405.581626][T15150] veth11: entered allmulticast mode [ 405.603351][T15159] block nbd0: not configured, cannot reconfigure [ 405.699098][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'. [ 405.827898][T15171] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2248'. [ 405.864140][T15171] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2248'. [ 405.897546][T15173] netlink: 'syz.3.2249': attribute type 3 has an invalid length. [ 406.016420][ T5618] tipc: Node number set to 609494106 [ 406.214090][T15188] gretap2: entered allmulticast mode [ 406.293259][T15194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 406.772375][T15233] netlink: 'syz.2.2265': attribute type 1 has an invalid length. [ 406.776884][T15227] bridge0: port 2(macvlan0) entered blocking state [ 406.797931][T15227] bridge0: port 2(macvlan0) entered disabled state [ 406.808615][T15227] macvlan0: entered allmulticast mode [ 406.814401][T15227] veth1_vlan: entered allmulticast mode [ 406.827784][T15227] bridge0: port 2(macvlan0) entered blocking state [ 406.834438][T15227] bridge0: port 2(macvlan0) entered forwarding state [ 406.843601][T15228] syzkaller0: entered promiscuous mode [ 406.849869][T15228] syzkaller0: entered allmulticast mode [ 406.905193][T15226] syzkaller0: entered promiscuous mode [ 406.916050][T15226] syzkaller0: entered allmulticast mode [ 406.944096][T15237] 8021q: adding VLAN 0 to HW filter on device bond11 [ 406.953546][T15237] bond10: (slave bond11): making interface the new active one [ 406.962512][T15237] bond10: (slave bond11): Enslaving as an active interface with an up link [ 406.990098][T15201] netlink: 'syz.3.2259': attribute type 11 has an invalid length. [ 407.002150][T15240] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 407.020415][T15233] 8021q: adding VLAN 0 to HW filter on device bond10 [ 407.712647][T15276] netlink: 'syz.3.2276': attribute type 1 has an invalid length. [ 407.772085][T15283] __nla_validate_parse: 7 callbacks suppressed [ 407.772103][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'. [ 407.782300][T15276] bond8: entered promiscuous mode [ 407.793329][T15276] 8021q: adding VLAN 0 to HW filter on device bond8 [ 407.809558][T15282] ipt_rpfilter: unknown options [ 407.884796][T15286] netlink: 'syz.2.2279': attribute type 12 has an invalid length. [ 407.946117][T15276] bond8: (slave veth19): making interface the new active one [ 407.980295][T15276] veth19: entered promiscuous mode [ 408.011211][T15276] bond8: (slave veth19): Enslaving as an active interface with an up link [ 408.020278][T15301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2278'. [ 408.056383][T15282] syzkaller1: entered promiscuous mode [ 408.096413][T15282] syzkaller1: entered allmulticast mode [ 408.133085][T15290] tipc: New replicast peer: 255.255.255.255 [ 408.156688][T15290] tipc: Enabled bearer , priority 10 [ 408.554391][T15327] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2289'. [ 408.634662][T15328] bond9: option ad_user_port_key: invalid value (65535) [ 408.642006][T15328] bond9: option ad_user_port_key: allowed values 0 - 1023 [ 408.653514][T15328] bond9 (unregistering): Released all slaves [ 408.721073][T15342] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 408.970563][T15344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2293'. [ 408.971517][T15348] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 409.036387][T15348] netlink: 'syz.4.2294': attribute type 8 has an invalid length. [ 409.048381][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 409.211501][T15354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2296'. [ 409.268331][ T5618] tipc: Node number set to 864924010 [ 409.536934][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 409.559267][T15376] openvswitch: netlink: Flow actions attr not present in new flow. [ 409.580396][T15377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2303'. [ 409.710516][T15380] siw: device registration error -23 [ 409.881028][T15394] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 409.977280][T15396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2309'. [ 410.011398][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2311'. [ 410.026790][T15402] x_tables: duplicate underflow at hook 1 [ 410.214558][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'. [ 410.422939][T15422] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 410.582680][T15422] lo speed is unknown, defaulting to 1000 [ 412.277310][T15485] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0 [ 412.453176][T15488] netlink: 'syz.3.2333': attribute type 1 has an invalid length. [ 413.730089][T15497] bond3: (slave veth0_to_bond): Releasing active interface [ 413.752760][T15497] bond10: (slave veth0_to_bond): making interface the new active one [ 413.767126][T15497] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 413.962802][T15523] netlink: 'syz.3.2338': attribute type 12 has an invalid length. [ 414.603531][T15537] xt_hashlimit: size too large, truncated to 1048576 [ 415.195063][T15558] __nla_validate_parse: 2 callbacks suppressed [ 415.195082][T15558] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2344'. [ 415.802694][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 416.186811][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2349'. [ 416.719328][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2353'. [ 417.472208][T15605] veth7: entered promiscuous mode [ 417.518431][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 417.816148][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2360'. [ 417.960162][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 418.170859][T15627] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 418.210796][T15627] bond11 (unregistering): Released all slaves [ 418.673483][T15648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2365'. [ 418.841151][T15650] bond12 (unregistering): Released all slaves [ 419.311891][T15661] 8021q: adding VLAN 0 to HW filter on device bond12 [ 419.504606][T15677] netlink: 'syz.2.2373': attribute type 32 has an invalid length. [ 420.097694][T15693] syzkaller0: entered promiscuous mode [ 420.125332][T15693] syzkaller0: entered allmulticast mode [ 421.275051][T15721] 8021q: adding VLAN 0 to HW filter on device bond12 [ 421.420427][T15729] bond12: (slave syz_tun): Enslaving as an active interface with an up link [ 421.463940][T15739] netlink: 'syz.1.2388': attribute type 3 has an invalid length. [ 421.486593][T15739] netlink: 'syz.1.2388': attribute type 3 has an invalid length. [ 421.848832][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2391'. [ 421.907688][T15747] sctp: [Deprecated]: syz.4.2389 (pid 15747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.907688][T15747] Use struct sctp_sack_info instead [ 422.216600][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'. [ 422.363264][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'. [ 422.779429][T15771] openvswitch: netlink: EtherType 50a is less than min 600 [ 423.396554][T15778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2399'. [ 423.470990][T15778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2399'. [ 423.491651][T15780] SET target dimension over the limit! [ 423.786138][T15771] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2396'. [ 424.858921][T15820] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 425.251153][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2412'. [ 425.317816][T15825] ip6gre0: left allmulticast mode [ 425.354725][T15830] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2414'. [ 425.569927][T15825] vlan2: left allmulticast mode [ 425.596958][T15825] bond0: left allmulticast mode [ 425.620298][T15825] gretap2: left allmulticast mode [ 425.764641][T15843] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2418'. [ 426.249473][T15853] netlink: 'syz.1.2421': attribute type 39 has an invalid length. [ 426.442107][T15853] ipvlan4: entered promiscuous mode [ 426.490761][T15853] bridge0: port 3(ipvlan4) entered blocking state [ 426.533879][T15853] bridge0: port 3(ipvlan4) entered disabled state [ 426.566387][T15853] ipvlan4: entered allmulticast mode [ 426.616801][T15853] bridge0: entered allmulticast mode [ 426.750543][T15871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2427'. [ 426.795702][T15853] ipvlan4: left allmulticast mode [ 426.812099][T15853] bridge0: left allmulticast mode [ 426.985188][T15883] __nla_validate_parse: 1 callbacks suppressed [ 426.985208][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2425'. [ 427.075835][T15887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2428'. [ 427.820644][T15909] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 427.927704][T15914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2433'. [ 427.972359][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2433'. [ 428.116706][T15918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2436'. [ 428.732875][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'. [ 428.800581][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 428.872134][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 428.933232][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 428.999550][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 429.507082][T15956] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 429.712706][T15956] 8021q: adding VLAN 0 to HW filter on device bond13 [ 430.100142][T15972] tc_dump_action: action bad kind [ 431.104999][T15992] veth0_macvtap: left promiscuous mode [ 431.143715][T15992] veth0_macvtap: entered promiscuous mode [ 431.273897][T15992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.297214][T15992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.452424][T15992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.548970][T15992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.624548][T15992] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 431.699700][T15992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.741823][T15992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.772727][T15992] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 432.022921][T15988] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 432.122720][T16009] netlink: 'syz.1.2455': attribute type 2 has an invalid length. [ 432.152373][T16009] __nla_validate_parse: 4 callbacks suppressed [ 432.152393][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 432.252068][T14246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.627372][T14246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.652832][T16034] ip_vti0: entered promiscuous mode [ 432.688922][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2462'. [ 432.709888][T14246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.785677][T14246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.902531][T16038] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2463'. [ 432.968884][T16038] sctp: [Deprecated]: syz.1.2463 (pid 16038) Use of int in maxseg socket option. [ 432.968884][T16038] Use struct sctp_assoc_value instead [ 433.180154][T16041] netlink: 'syz.4.2467': attribute type 3 has an invalid length. [ 433.202332][T16045] netlink: 'syz.3.2466': attribute type 3 has an invalid length. [ 433.223748][T16041] netlink: 'syz.4.2467': attribute type 3 has an invalid length. [ 433.260279][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2467'. [ 433.369608][T16050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2469'. [ 433.673869][T16057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2471'. [ 433.950805][T16060] netlink: 'syz.4.2472': attribute type 21 has an invalid length. [ 434.021362][T16060] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2472'. [ 434.800137][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 434.837862][T16096] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 435.025531][T16093] lo speed is unknown, defaulting to 1000 [ 435.141871][T16105] netlink: 'syz.3.2482': attribute type 5 has an invalid length. [ 435.160943][T16105] xt_TPROXY: Can be used only with -p tcp or -p udp [ 435.529621][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'. [ 435.731503][T16123] syzkaller0: entered promiscuous mode [ 435.755451][T16123] syzkaller0: entered allmulticast mode [ 436.850714][T16144] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2484'. [ 437.357956][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2493'. [ 438.644432][T16180] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 438.843038][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 438.940677][T16187] netdevsim netdevsim1 : renamed from netdevsim0 [ 439.580891][T16204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2506'. [ 439.856616][T16215] veth0: entered promiscuous mode [ 439.925124][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.026400][T16215] veth0: left promiscuous mode [ 440.717185][T16242] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2515'. [ 440.768645][T16242] syzkaller1: entered promiscuous mode [ 440.782781][T16242] syzkaller1: entered allmulticast mode [ 440.862615][T16245] netlink: zone id is out of range [ 440.876716][T16245] netlink: zone id is out of range [ 440.888599][T16245] netlink: zone id is out of range [ 440.894097][T16245] netlink: zone id is out of range [ 440.899890][T16245] netlink: zone id is out of range [ 440.905420][T16245] netlink: zone id is out of range [ 440.912378][T16245] netlink: zone id is out of range [ 440.917881][T16245] netlink: zone id is out of range [ 440.932809][T16245] netlink: zone id is out of range [ 440.948047][T16245] netlink: zone id is out of range [ 441.172577][T16252] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 441.174164][T16246] syzkaller1: left promiscuous mode [ 441.214086][T16246] syzkaller1: left allmulticast mode [ 441.261647][T16242] netlink: 'syz.4.2515': attribute type 4 has an invalid length. [ 441.587079][T16264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2518'. [ 441.633535][T16252] 8021q: adding VLAN 0 to HW filter on device bond13 [ 441.685145][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2518'. [ 441.786324][T16253] bond13: (slave veth9): Enslaving as an active interface with a down link [ 441.918077][T16254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.997598][T16254] bond13: (slave batadv0): making interface the new active one [ 442.042920][T16254] batadv0: entered promiscuous mode [ 442.069541][T16254] bond13: (slave batadv0): Enslaving as an active interface with an up link [ 442.119876][T16264] bond_slave_0: entered promiscuous mode [ 442.178401][T16264] bond_slave_0: entered allmulticast mode [ 442.450716][T16280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2521'. [ 442.476509][T16267] syzkaller0: entered promiscuous mode [ 442.484393][T16267] syzkaller0: entered allmulticast mode [ 446.416710][T16280] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 446.464504][T16261] lo speed is unknown, defaulting to 1000 [ 447.673872][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'. [ 447.978563][T16316] block nbd0: server does not support multiple connections per device. [ 448.000534][T16316] block nbd0: shutting down sockets [ 448.485162][T16330] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2530'. [ 448.510003][T16330] net_ratelimit: 12 callbacks suppressed [ 448.510021][T16330] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 448.583072][T16329] bond6: entered promiscuous mode [ 448.715881][T16335] bond12: (slave syz_tun): Releasing backup interface [ 449.571074][T16361] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.756268][T16361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 449.806059][T16361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.853360][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2541'. [ 449.875938][T16361] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 449.902477][T16371] netlink: 'syz.1.2541': attribute type 1 has an invalid length. [ 449.916269][T16371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'. [ 449.977481][T16374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2541'. [ 450.574589][T16390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2547'. [ 451.154335][T16407] netlink: zone id is out of range [ 451.213507][T16407] netlink: zone id is out of range [ 451.252303][T16407] netlink: zone id is out of range [ 451.351759][T16407] netlink: zone id is out of range [ 451.444511][T16407] netlink: zone id is out of range [ 451.501227][T16407] netlink: zone id is out of range [ 451.536038][T16407] netlink: zone id is out of range [ 451.544160][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2553'. [ 451.564160][T16407] netlink: zone id is out of range [ 451.866356][T16425] netlink: 'syz.0.2555': attribute type 1 has an invalid length. [ 452.090398][T16425] 8021q: adding VLAN 0 to HW filter on device bond14 [ 452.194995][T16426] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 452.254623][T16426] team0: Port device macvlan4 added [ 452.784274][T16454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2561'. [ 453.614603][T14255] batadv0: left promiscuous mode [ 453.846099][T16477] net_ratelimit: 32 callbacks suppressed [ 453.846118][T16477] openvswitch: netlink: IP tunnel TTL not specified. [ 453.863361][T16477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.200414][T16412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.398906][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 454.671952][T16501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2572'. [ 454.875935][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 455.019296][T16509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2575'. [ 455.074864][T16509] nbd: must specify a size in bytes for the device [ 455.135770][T16511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2575'. [ 455.300570][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 455.673659][T16529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2577'. [ 456.202709][T16550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2585'. [ 456.223658][T16547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2586'. [ 456.594526][T16571] bridge0: entered allmulticast mode [ 456.912894][T16589] netlink: 'syz.0.2597': attribute type 1 has an invalid length. [ 456.924576][T16589] netlink: 'syz.0.2597': attribute type 7 has an invalid length. [ 456.933930][T16589] netlink: 'syz.0.2597': attribute type 8 has an invalid length. [ 456.943474][T16589] NCSI netlink: No device for ifindex 1073545264 [ 456.953048][T16590] nbd: couldn't find device at index 1694498816 [ 458.326020][T16631] __nla_validate_parse: 3 callbacks suppressed [ 458.326039][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2611'. [ 459.044547][T16646] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2616'. [ 459.712073][T16664] netlink: 'syz.2.2619': attribute type 21 has an invalid length. [ 459.783130][T16664] netlink: 'syz.2.2619': attribute type 21 has an invalid length. [ 460.240863][T16677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2621'. [ 460.607312][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2620'. [ 460.651201][T16693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2622'. [ 460.672306][T16675] gretap0: entered promiscuous mode [ 460.919329][T16684] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 460.972727][T16693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.816805][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2626'. [ 461.961520][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2627'. [ 462.025561][T16722] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2628'. [ 462.053206][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2627'. [ 462.076192][T16718] netlink: 'syz.3.2627': attribute type 1 has an invalid length. [ 462.296451][T16722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.674794][T16743] tipc: Enabling of bearer rejected, failed to enable media [ 462.752530][T16743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2632'. [ 462.878497][T16748] netlink: 'syz.1.2632': attribute type 1 has an invalid length. [ 463.280493][T16748] 8021q: adding VLAN 0 to HW filter on device bond11 [ 463.379846][T16746] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 463.495112][T16743] macvlan2: entered promiscuous mode [ 463.546326][T16743] macvlan2: entered allmulticast mode [ 463.582811][T16743] bond11: entered promiscuous mode [ 463.618818][T16743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 463.695388][T16743] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 463.753968][T16777] netlink: 'syz.2.2636': attribute type 5 has an invalid length. [ 463.822078][T16743] bond11: left promiscuous mode [ 464.290039][T16788] netlink: 'syz.1.2640': attribute type 15 has an invalid length. [ 464.548867][T16797] SET target dimension over the limit! [ 464.601562][T16797] netlink: 'syz.2.2642': attribute type 1 has an invalid length. [ 466.516300][T16806] vlan0: entered allmulticast mode [ 466.521725][T16806] bond14: entered allmulticast mode [ 467.290328][T16834] __nla_validate_parse: 2 callbacks suppressed [ 467.290368][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'. [ 467.756938][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2651'. [ 467.805961][T16853] IPv6: NLM_F_CREATE should be specified when creating new route [ 468.083889][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2654'. [ 468.181648][T16839] veth0_macvtap: left promiscuous mode [ 468.201109][T16839] veth0_macvtap: entered promiscuous mode [ 468.238021][T16839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.272076][T16839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.313254][T16839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.354084][T16839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.392968][T16839] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 468.513207][T16840] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 468.567701][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.601812][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.621678][ T153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.641030][ T153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.648911][T10870] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.715843][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.750532][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.760773][T16882] xt_hashlimit: size too large, truncated to 1048576 [ 468.821507][T16883] Bluetooth: MGMT ver 1.23 [ 468.888152][T14259] bond0: (slave gretap2): link status definitely down, disabling slave [ 468.938242][T14259] bond0: now running without any active interface! [ 469.019785][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 469.030972][T10870] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.156991][T16899] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2663'. [ 469.206522][T16897] tipc: Enabling of bearer rejected, failed to enable media [ 469.221089][T16899] bridge_slave_0: left allmulticast mode [ 469.245397][T16899] bridge_slave_0: left promiscuous mode [ 469.270137][T16899] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.315234][T16899] bridge_slave_1: left allmulticast mode [ 469.338375][T16899] bridge_slave_1: left promiscuous mode [ 469.358439][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 469.379882][T16899] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.426750][T16912] x_tables: duplicate underflow at hook 1 [ 469.447414][T16899] bond11: (slave veth0_to_bond): Releasing active interface [ 469.471529][T16899] team0: Port device team_slave_0 removed [ 469.509106][T16899] team0: Port device team_slave_1 removed [ 469.540194][T16899] bond6: (slave gretap1): Releasing active interface [ 469.563697][T16899] bond0: (slave gretap2): Releasing active interface [ 469.585285][T16899] bond9: (slave gretap3): Releasing active interface [ 469.604827][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.630111][T16899] bond10: (slave bridge5): Releasing backup interface [ 469.799918][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'. [ 469.914824][T16934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2672'. [ 469.981081][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2673'. [ 470.024663][T16938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2674'. [ 470.224797][T16942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2676'. [ 470.624780][T16961] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 470.681265][T16959] syzkaller0: entered promiscuous mode [ 470.700374][T16959] syzkaller0: entered allmulticast mode [ 470.742430][T16969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.751525][T16969] IPv6: NLM_F_CREATE should be set when creating new route [ 470.758842][T16969] IPv6: NLM_F_CREATE should be set when creating new route [ 470.766091][T16969] IPv6: NLM_F_CREATE should be set when creating new route [ 470.777646][T16973] netlink: 'syz.4.2689': attribute type 1 has an invalid length. [ 470.929555][T16969] netlink: 'syz.2.2688': attribute type 4 has an invalid length. [ 470.996328][T16962] tipc: Enabling of bearer rejected, failed to enable media [ 471.013407][T16973] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 471.294131][T16998] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 471.704057][T17018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.809316][T17022] netlink: 'syz.4.2701': attribute type 1 has an invalid length. [ 471.923178][T17029] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 472.042085][T17022] 8021q: adding VLAN 0 to HW filter on device bond7 [ 472.096417][T17029] bond15: entered promiscuous mode [ 472.103252][T17029] 8021q: adding VLAN 0 to HW filter on device bond15 [ 472.473106][T17063] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 472.638409][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 472.652416][T17075] netlink: 'syz.0.2714': attribute type 1 has an invalid length. [ 472.744517][T17075] 8021q: adding VLAN 0 to HW filter on device bond15 [ 472.780759][T17082] netlink: 'syz.1.2713': attribute type 12 has an invalid length. [ 472.819018][T17082] __nla_validate_parse: 16 callbacks suppressed [ 472.819036][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'. [ 472.987470][T17091] bridge0: port 1(vlan2) entered blocking state [ 472.994180][T17091] bridge0: port 1(vlan2) entered disabled state [ 473.009394][T17091] vlan2: entered allmulticast mode [ 473.035291][T17091] geneve0: entered allmulticast mode [ 473.071873][T17091] vlan2: entered promiscuous mode [ 473.091522][T17091] geneve0: entered promiscuous mode [ 473.121649][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 474.300859][T17136] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 474.390672][T17142] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2733'. [ 474.465096][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2734'. [ 474.474329][T17147] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2734'. [ 474.750034][T17169] openvswitch: netlink: Missing valid actions attribute. [ 474.765469][T17169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.796778][T17171] syzkaller1: entered promiscuous mode [ 474.808839][T17171] syzkaller1: entered allmulticast mode [ 475.053868][T17181] syzkaller1: entered promiscuous mode [ 475.061403][T17181] syzkaller1: entered allmulticast mode [ 475.131537][T17186] netlink: 'syz.3.2744': attribute type 26 has an invalid length. [ 475.332135][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'. [ 475.342410][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 475.352940][T17196] netlink: 'syz.1.2747': attribute type 18 has an invalid length. [ 475.378400][T14259] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 4352 - 0 [ 475.380450][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'. [ 475.396065][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 475.406382][T17196] netlink: 'syz.1.2747': attribute type 18 has an invalid length. [ 475.418351][T14259] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 475.427409][T14259] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 475.874141][T17213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2752'. [ 476.116643][T17214] vlan3: entered promiscuous mode [ 476.206036][T17222] netlink: 'syz.1.2754': attribute type 1 has an invalid length. [ 476.626301][T17226] openvswitch: netlink: IP tunnel dst address not specified [ 476.662465][T17226] netlink: 'syz.4.2755': attribute type 4 has an invalid length. [ 476.744314][T17234] netlink: 'syz.4.2758': attribute type 1 has an invalid length. [ 476.760657][T17234] netlink: 'syz.4.2758': attribute type 5 has an invalid length. [ 477.038005][T17249] netlink: 'syz.1.2762': attribute type 1 has an invalid length. [ 477.146707][T17249] 8021q: adding VLAN 0 to HW filter on device bond12 [ 477.215861][T17254] netlink: 'syz.4.2763': attribute type 1 has an invalid length. [ 477.240529][T17258] nbd: must specify at least one socket [ 477.257339][T17251] syzkaller0: entered promiscuous mode [ 477.263093][T17251] syzkaller0: entered allmulticast mode [ 479.183313][T17194] Set syz1 is full, maxelem 65536 reached [ 480.242815][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 480.895942][T17314] netlink: 'syz.3.2769': attribute type 2 has an invalid length. [ 481.064324][T17327] __nla_validate_parse: 3 callbacks suppressed [ 481.064343][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2771'. [ 481.094871][T17330] netlink: 'syz.2.2772': attribute type 1 has an invalid length. [ 481.203708][T17330] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 481.253495][T17323] lo speed is unknown, defaulting to 1000 [ 481.373346][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'. [ 481.609468][T17350] netlink: 524 bytes leftover after parsing attributes in process `syz.3.2779'. [ 481.691686][T17354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2781'. [ 481.744594][T17354] ip6gre4: entered promiscuous mode [ 481.768613][T17354] ip6gre4: entered allmulticast mode [ 481.983115][T17368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2784'. [ 481.991048][T17367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2785'. [ 482.035283][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 482.074118][T17367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2785'. [ 482.114834][T17367] openvswitch: netlink: Missing key (keys=40, expected=80) [ 482.224060][T17379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.253486][T14259] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 482.285791][ T54] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 482.300509][T14259] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 482.461943][T17396] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 482.480544][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2793'. [ 482.545982][ T54] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 482.946414][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2795'. [ 482.956406][T17418] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 482.980399][T17418] netlink: 'syz.2.2796': attribute type 1 has an invalid length. [ 483.280455][ T54] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 483.797584][T17458] netlink: 'syz.4.2807': attribute type 10 has an invalid length. [ 484.057048][T17478] batadv_slave_0: entered promiscuous mode [ 484.156210][T17477] batadv_slave_0: left promiscuous mode [ 484.725551][T17513] netlink: 'syz.2.2821': attribute type 12 has an invalid length. [ 485.132130][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.146653][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.160073][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.172655][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.190324][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.252809][T17536] tipc: Enabled bearer , priority 0 [ 485.355110][T17536] syzkaller0: entered promiscuous mode [ 485.366103][T17536] syzkaller0: entered allmulticast mode [ 485.430034][T17537] tipc: Resetting bearer [ 485.565835][T17535] tipc: Resetting bearer [ 485.685817][T17535] tipc: Disabling bearer [ 486.094767][T17567] __nla_validate_parse: 12 callbacks suppressed [ 486.094784][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 486.318391][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 486.494643][T17567] ip6tnl3: entered allmulticast mode [ 486.526590][T17573] tun0: tun_chr_ioctl cmd 1074025675 [ 486.538749][T17573] tun0: persist enabled [ 486.551458][T17577] tun0: tun_chr_ioctl cmd 1074025675 [ 486.570601][T17577] tun0: persist disabled [ 486.692028][T14247] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 486.863893][T17531] lo speed is unknown, defaulting to 1000 [ 486.962236][T14247] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 487.133665][T14247] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 487.278446][ T5624] Bluetooth: hci5: command tx timeout [ 487.678335][ T54] page_pool_release_retry() stalled pool shutdown: id 124, 1 inflight 60 sec [ 488.575248][T17645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2852'. [ 488.781395][T14247] bond1 (unregistering): Released all slaves [ 488.830423][T14247] bond2 (unregistering): Released all slaves [ 488.871409][T14247] bond3 (unregistering): Released all slaves [ 488.913276][T14247] bond4 (unregistering): Released all slaves [ 488.959911][T14247] bond5 (unregistering): Released all slaves [ 488.983424][T14247] bond6 (unregistering): Released all slaves [ 489.012910][T14247] bond7 (unregistering): Released all slaves [ 489.072154][T14247] bond0 (unregistering): Released all slaves [ 489.096668][T14247] bond8 (unregistering): Released all slaves [ 489.124090][T14247] bond9 (unregistering): Released all slaves [ 489.153532][T14247] bond10 (unregistering): Released all slaves [ 489.180465][T14247] bond11 (unregistering): Released all slaves [ 489.216442][T14247] bond12 (unregistering): Released all slaves [ 489.236083][T14247] bond13 (unregistering): Released all slaves [ 489.296234][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 489.358315][ T5624] Bluetooth: hci5: command tx timeout [ 489.523188][T14247] tipc: Disabling bearer [ 489.552872][T14247] tipc: Left network mode [ 489.683174][T17664] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2853'. [ 489.789446][T14247] IPVS: stopping backup sync thread 16998 ... [ 490.056682][T17683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2857'. [ 490.273390][T17695] netlink: 'syz.0.2858': attribute type 2 has an invalid length. [ 490.323492][T17685] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 490.607369][T17695] : entered promiscuous mode [ 490.737825][T17709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2861'. [ 490.794876][T17709] netlink: 'syz.4.2861': attribute type 7 has an invalid length. [ 490.805332][T17709] netlink: 'syz.4.2861': attribute type 8 has an invalid length. [ 490.813414][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2861'. [ 490.929500][T17709] erspan0: entered promiscuous mode [ 490.968383][T17709] erspan0: left promiscuous mode [ 491.157745][T17714] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 491.265723][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 491.375196][T17531] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.386648][T17531] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.394635][T17531] bridge_slave_0: entered allmulticast mode [ 491.403073][T17531] bridge_slave_0: entered promiscuous mode [ 491.415328][T17714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.417374][T17531] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.432888][T17531] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.443357][ T5624] Bluetooth: hci5: command tx timeout [ 491.449169][T17531] bridge_slave_1: entered allmulticast mode [ 491.457212][T17531] bridge_slave_1: entered promiscuous mode [ 491.511414][T17531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.525665][T17531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.643313][T17531] team0: Port device team_slave_0 added [ 491.663298][T17531] team0: Port device team_slave_1 added [ 491.796001][T17531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.815998][T17531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.866506][T17531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.903049][T17531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.926546][T17531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.985972][T17531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.118109][T17738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2866'. [ 492.183085][T17737] TCP: TCP_TX_DELAY enabled [ 492.190396][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'. [ 492.235854][T17742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2868'. [ 492.289827][T17750] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 492.405937][T17760] netlink: zone id is out of range [ 492.423583][T17760] netlink: zone id is out of range [ 492.436931][T17760] netlink: zone id is out of range [ 492.463704][T17760] netlink: zone id is out of range [ 492.486987][T17760] netlink: zone id is out of range [ 492.509447][T17760] netlink: zone id is out of range [ 492.522442][T17760] netlink: zone id is out of range [ 492.535453][T17760] netlink: zone id is out of range [ 492.564330][T17760] netlink: zone id is out of range [ 492.573533][T17769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2870'. [ 492.692582][T14253] smc: removing ib device syz0 [ 493.000783][T17737] syzkaller0: entered promiscuous mode [ 493.006308][T17737] syzkaller0: entered allmulticast mode [ 493.038045][T17769] ip6gre5: entered promiscuous mode [ 493.050703][T17769] ip6gre5: entered allmulticast mode [ 493.191636][ T5618] ================================================================== [ 493.199747][ T5618] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 493.208718][ T5618] Read of size 1 at addr ffff888076f00e09 by task kworker/0:3/5618 [ 493.216627][ T5618] [ 493.218966][ T5618] CPU: 0 UID: 0 PID: 5618 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 493.219013][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.219040][ T5618] Workqueue: events smc_ib_port_event_work [ 493.219156][ T5618] Call Trace: [ 493.219163][ T5618] [ 493.219171][ T5618] dump_stack_lvl+0xe8/0x150 [ 493.219200][ T5618] print_address_description+0x55/0x1e0 [ 493.219226][ T5618] ? __ethtool_get_link_ksettings+0x230/0x250 [ 493.219247][ T5618] print_report+0x58/0x70 [ 493.219269][ T5618] kasan_report+0x117/0x150 [ 493.219296][ T5618] ? __ethtool_get_link_ksettings+0x230/0x250 [ 493.219322][ T5618] __ethtool_get_link_ksettings+0x230/0x250 [ 493.219346][ T5618] __ethtool_get_link_ksettings+0x11f/0x250 [ 493.219369][ T5618] ib_get_eth_speed+0x180/0x7f0 [ 493.219431][ T5618] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 493.219462][ T5618] ? do_raw_spin_unlock+0xf5/0x210 [ 493.219483][ T5618] ? rxe_query_port+0x6b/0x3d0 [ 493.219577][ T5618] rxe_query_port+0x93/0x3d0 [ 493.219605][ T5618] ib_query_port+0x16e/0x830 [ 493.219650][ T5618] smc_ib_port_event_work+0x147/0x920 [ 493.219676][ T5618] ? rcu_is_watching+0x15/0xb0 [ 493.219704][ T5618] ? process_scheduled_works+0xa20/0x14e0 [ 493.219726][ T5618] process_scheduled_works+0xa8e/0x14e0 [ 493.219766][ T5618] ? __pfx_process_scheduled_works+0x10/0x10 [ 493.219790][ T5618] ? assign_work+0x3cf/0x5d0 [ 493.219812][ T5618] worker_thread+0xa47/0xfb0 [ 493.219846][ T5618] kthread+0x388/0x470 [ 493.219870][ T5618] ? __pfx_worker_thread+0x10/0x10 [ 493.219890][ T5618] ? __pfx_kthread+0x10/0x10 [ 493.219914][ T5618] ret_from_fork+0x514/0xb70 [ 493.219941][ T5618] ? __pfx_ret_from_fork+0x10/0x10 [ 493.219966][ T5618] ? __switch_to+0xc89/0x1420 [ 493.219989][ T5618] ? __pfx_kthread+0x10/0x10 [ 493.220013][ T5618] ret_from_fork_asm+0x1a/0x30 [ 493.220039][ T5618] [ 493.220046][ T5618] [ 493.402032][ T5618] Allocated by task 5626: [ 493.406342][ T5618] kasan_save_track+0x3e/0x80 [ 493.411011][ T5618] __kasan_kmalloc+0x93/0xb0 [ 493.415588][ T5618] __kvmalloc_node_noprof+0x53f/0x860 [ 493.420947][ T5618] alloc_netdev_mqs+0xa9/0x12b0 [ 493.425867][ T5618] rtnl_create_link+0x321/0xd70 [ 493.430752][ T5618] rtnl_newlink_create+0x258/0x7b0 [ 493.435896][ T5618] rtnl_newlink+0x167f/0x1bd0 [ 493.440562][ T5618] rtnetlink_rcv_msg+0x802/0xc00 [ 493.445489][ T5618] netlink_rcv_skb+0x226/0x4a0 [ 493.450316][ T5618] netlink_unicast+0x7bb/0x940 [ 493.455069][ T5618] netlink_sendmsg+0x813/0xb40 [ 493.459827][ T5618] sock_sendmsg_nosec+0x13a/0x180 [ 493.464889][ T5618] __sys_sendto+0x408/0x5a0 [ 493.469411][ T5618] __x64_sys_sendto+0xde/0x100 [ 493.474165][ T5618] do_syscall_64+0x174/0x580 [ 493.478810][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.484698][ T5618] [ 493.487008][ T5618] Freed by task 14247: [ 493.491059][ T5618] kasan_save_track+0x3e/0x80 [ 493.495726][ T5618] kasan_save_free_info+0x40/0x50 [ 493.500752][ T5618] __kasan_slab_free+0x5c/0x80 [ 493.505519][ T5618] kfree+0x1c5/0x640 [ 493.509410][ T5618] device_release+0xc4/0x1f0 [ 493.514165][ T5618] kobject_put+0x222/0x550 [ 493.518610][ T5618] netdev_run_todo+0xf56/0x10d0 [ 493.523449][ T5618] default_device_exit_batch+0x966/0x9e0 [ 493.529071][ T5618] ops_undo_list+0x4b4/0x8d0 [ 493.533707][ T5618] cleanup_net+0x572/0x810 [ 493.538116][ T5618] process_scheduled_works+0xa8e/0x14e0 [ 493.543646][ T5618] worker_thread+0xa47/0xfb0 [ 493.548227][ T5618] kthread+0x388/0x470 [ 493.552290][ T5618] ret_from_fork+0x514/0xb70 [ 493.556876][ T5618] ret_from_fork_asm+0x1a/0x30 [ 493.561624][ T5618] [ 493.563937][ T5618] The buggy address belongs to the object at ffff888076f00000 [ 493.563937][ T5618] which belongs to the cache kmalloc-cg-4k of size 4096 [ 493.578239][ T5618] The buggy address is located 3593 bytes inside of [ 493.578239][ T5618] freed 4096-byte region [ffff888076f00000, ffff888076f01000) [ 493.592199][ T5618] [ 493.594510][ T5618] The buggy address belongs to the physical page: [ 493.600925][ T5618] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76f00 [ 493.609670][ T5618] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 493.618157][ T5618] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 493.625698][ T5618] page_type: f5(slab) [ 493.629672][ T5618] raw: 00fff00000000040 ffff88801b01a500 dead000000000100 dead000000000122 [ 493.638242][ T5618] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 493.646810][ T5618] head: 00fff00000000040 ffff88801b01a500 dead000000000100 dead000000000122 [ 493.655465][ T5618] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 493.664136][ T5618] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 493.672802][ T5618] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 493.681459][ T5618] page dumped because: kasan: bad access detected [ 493.687868][ T5618] page_owner tracks the page as allocated [ 493.693563][ T5618] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5626, tgid 5626 (syz-executor), ts 82449806625, free_ts 49958426680 [ 493.716655][ T5618] post_alloc_hook+0x1f9/0x250 [ 493.721430][ T5618] get_page_from_freelist+0x21fa/0x2270 [ 493.727064][ T5618] __alloc_frozen_pages_noprof+0x18d/0x380 [ 493.732867][ T5618] allocate_slab+0x79/0x5e0 [ 493.737359][ T5618] refill_objects+0x2d5/0x350 [ 493.742022][ T5618] __pcs_replace_empty_main+0x2bf/0x6b0 [ 493.747569][ T5618] __kvmalloc_node_noprof+0x66b/0x860 [ 493.752929][ T5618] alloc_netdev_mqs+0xa9/0x12b0 [ 493.757768][ T5618] rtnl_create_link+0x321/0xd70 [ 493.762611][ T5618] rtnl_newlink_create+0x258/0x7b0 [ 493.767714][ T5618] rtnl_newlink+0x167f/0x1bd0 [ 493.772389][ T5618] rtnetlink_rcv_msg+0x802/0xc00 [ 493.777315][ T5618] netlink_rcv_skb+0x226/0x4a0 [ 493.782067][ T5618] netlink_unicast+0x7bb/0x940 [ 493.786821][ T5618] netlink_sendmsg+0x813/0xb40 [ 493.791577][ T5618] sock_sendmsg_nosec+0x13a/0x180 [ 493.796588][ T5618] page last free pid 5390 tgid 5390 stack trace: [ 493.802892][ T5618] __free_frozen_pages+0xc1e/0xd10 [ 493.807991][ T5618] __slab_free+0x274/0x2c0 [ 493.812393][ T5618] qlist_free_all+0x99/0x100 [ 493.816968][ T5618] kasan_quarantine_reduce+0x148/0x160 [ 493.822413][ T5618] __kasan_slab_alloc+0x22/0x80 [ 493.827253][ T5618] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 493.832697][ T5618] vm_area_alloc+0x24/0x140 [ 493.837185][ T5618] mmap_region+0x1221/0x2310 [ 493.841770][ T5618] do_mmap+0xc3b/0x10c0 [ 493.845910][ T5618] vm_mmap_pgoff+0x272/0x4e0 [ 493.850491][ T5618] ksys_mmap_pgoff+0x4dc/0x760 [ 493.855239][ T5618] do_syscall_64+0x174/0x580 [ 493.859820][ T5618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.865701][ T5618] [ 493.868010][ T5618] Memory state around the buggy address: [ 493.873620][ T5618] ffff888076f00d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 493.881667][ T5618] ffff888076f00d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.889711][ T5618] >ffff888076f00e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 493.897765][ T5618] ^ [ 493.902090][ T5618] ffff888076f00e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 493.910138][ T5618] ffff888076f00f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 493.918183][ T5618] ================================================================== [ 493.933131][ T5624] Bluetooth: hci5: command tx timeout [ 493.947894][ T5618] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 493.955129][ T5618] CPU: 0 UID: 0 PID: 5618 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 493.964506][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.974557][ T5618] Workqueue: events smc_ib_port_event_work [ 493.980374][ T5618] Call Trace: [ 493.983645][ T5618] [ 493.986569][ T5618] vpanic+0x56c/0xa60 [ 493.990554][ T5618] ? __pfx_vpanic+0x10/0x10 [ 493.995055][ T5618] panic+0xc5/0xd0 [ 493.998773][ T5618] ? __pfx_panic+0x10/0x10 [ 494.003189][ T5618] ? preempt_schedule_thunk+0x16/0x40 [ 494.008558][ T5618] ? __ethtool_get_link_ksettings+0x230/0x250 [ 494.014646][ T5618] ? preempt_schedule_thunk+0x16/0x40 [ 494.020023][ T5618] ? __ethtool_get_link_ksettings+0x230/0x250 [ 494.026077][ T5618] check_panic_on_warn+0x89/0xb0 [ 494.031009][ T5618] ? __ethtool_get_link_ksettings+0x230/0x250 [ 494.037072][ T5618] end_report+0x73/0x170 [ 494.041330][ T5618] ? __ethtool_get_link_ksettings+0x230/0x250 [ 494.047402][ T5618] kasan_report+0x128/0x150 [ 494.051908][ T5618] ? __ethtool_get_link_ksettings+0x230/0x250 [ 494.057977][ T5618] __ethtool_get_link_ksettings+0x230/0x250 [ 494.063865][ T5618] __ethtool_get_link_ksettings+0x11f/0x250 [ 494.069747][ T5618] ib_get_eth_speed+0x180/0x7f0 [ 494.074594][ T5618] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 494.079962][ T5618] ? do_raw_spin_unlock+0xf5/0x210 [ 494.085063][ T5618] ? rxe_query_port+0x6b/0x3d0 [ 494.089859][ T5618] rxe_query_port+0x93/0x3d0 [ 494.094450][ T5618] ib_query_port+0x16e/0x830 [ 494.099030][ T5618] smc_ib_port_event_work+0x147/0x920 [ 494.104401][ T5618] ? rcu_is_watching+0x15/0xb0 [ 494.109162][ T5618] ? process_scheduled_works+0xa20/0x14e0 [ 494.114868][ T5618] process_scheduled_works+0xa8e/0x14e0 [ 494.120423][ T5618] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.126392][ T5618] ? assign_work+0x3cf/0x5d0 [ 494.130985][ T5618] worker_thread+0xa47/0xfb0 [ 494.135575][ T5618] kthread+0x388/0x470 [ 494.139638][ T5618] ? __pfx_worker_thread+0x10/0x10 [ 494.144736][ T5618] ? __pfx_kthread+0x10/0x10 [ 494.149318][ T5618] ret_from_fork+0x514/0xb70 [ 494.153903][ T5618] ? __pfx_ret_from_fork+0x10/0x10 [ 494.159003][ T5618] ? __switch_to+0xc89/0x1420 [ 494.163668][ T5618] ? __pfx_kthread+0x10/0x10 [ 494.168251][ T5618] ret_from_fork_asm+0x1a/0x30 [ 494.173018][ T5618] [ 494.176341][ T5618] Kernel Offset: disabled [ 494.180647][ T5618] Rebooting in 86400 seconds..