last executing test programs: 17.43633736s ago: executing program 2 (id=2830): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@rand_addr=0x64010100, 0x4e21, 0x7, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x5e}, {0x0, 0x1, 0x5, 0x0, 0x4, 0xffffffff, 0x8, 0x81}, {0x80000000000000, 0xf, 0xf6, 0x3}, 0x8, 0x6e6bbd, 0x1, 0x0, 0x1, 0x3}, {{@in=@empty, 0x4d2, 0x9d}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x4a, 0x4, 0x3, 0x2}}, 0xe8) 17.266614693s ago: executing program 2 (id=2833): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x2, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x9}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x3503, 0xa, 0xa}, {@in=@broadcast, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000401600002c0012800c0001006d6163766c616e001c00028008000900ffffffff08000100010000000800030000000000140035006d6163766c616e30"], 0x60}}, 0x8000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) (async) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) 16.676919038s ago: executing program 2 (id=2837): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00'}) (async) r1 = socket$kcm(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000001e4629320000040066080014080000004e2c00000000000000000000f8000000202078250000000000202020631af8ff0000b34abfa100000000000007010000f8ffffffb70200000000060000009500000001000000000000000000000000000000000000009dce48fba6f4046741f540b0"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x3a, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0) (async) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) 16.574381841s ago: executing program 2 (id=2838): socket(0x2a, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000880000002000000ffff000005"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r2}, &(0x7f0000000ac0), &(0x7f0000000fc0)}, 0x20) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r4 = socket(0x15, 0x5, 0x4) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0xff7f}}, 0x20}}, 0x0) r5 = socket(0x1f, 0x80801, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000100)=0xffff0000) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.295151901s ago: executing program 2 (id=2842): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000ffffff18010000202078250000000000202062db1af8ff00000000bfa100000000000007010000f8ffffffb706000008000000b703000000010000850000006200000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008f000000000000000020000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100000001ff95000000000000007d0afeff00000000bf91000000000000b702000002000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x11, &(0x7f0000000cc0)=""/4096, 0x41100, 0x5}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) unshare(0x20040600) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r7, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', r3, 0x40, 0x20, 0x1e0, 0x0, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x64, 0x0, 0x1, 0x4, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0xf, 0x9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100]}, @end]}}}}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000ffffff18010000202078250000000000202062db1af8ff00000000bfa100000000000007010000f8ffffffb706000008000000b703000000010000850000006200000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008f000000000000000020000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100000001ff95000000000000007d0afeff00000000bf91000000000000b702000002000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x11, &(0x7f0000000cc0)=""/4096, 0x41100, 0x5}, 0x94) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) (async) unshare(0x20040600) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r7, &(0x7f00000000c0), 0x0}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', r3, 0x40, 0x20, 0x1e0, 0x0, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x64, 0x0, 0x1, 0x4, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0xf, 0x9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100]}, @end]}}}}}) (async) 15.9315655s ago: executing program 2 (id=2845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r3, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) pwritev(r5, 0x0, 0x0, 0x5, 0x1) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000001700)={{0xa, 0x4e21, 0x2, @remote, 0xfffffff9}, {0xa, 0x4e24, 0xb3b, @private2, 0x7fff}, 0x1, {[0x7ff, 0x3, 0x8, 0x80, 0x1f, 0x7, 0x80, 0x1]}}, 0x5c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r6 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff80000000fe03000100000000", 0x1c) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x3, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'erspan0\x00', @local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003000941f6367867e991eb7be07e04868000007001114875d294"], 0xe) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1_macvtap\x00', @random="d749a359018b"}) 5.474006388s ago: executing program 1 (id=2924): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000900000072116f0000000000000000007e55a9774f86b8a2d3143e1bf0016f026bcc637c23128c87a4d4d7663495c373eb8098e8940a7b227dc7b84cc14224e92ed2957f073aa6f0387fc5e8cd4ffadb3819245d29bd27a0ac0fae7780a7982ecf47345e48f069a895c4699435fa78adfe98c9cd89f629cd453013a4f721b453da9ae7bf7d1650c503b1c8756de5a8b6ee99ae3b5360e39acbbaa8c99d0734707d6c1fdcb47850da4c77e4a1e389a307a47e1f3976fb893c926ebc25833b3169c2f6fe66f72670d66139681e6403d9ffea2f079d3b1a14efbf819e1a24cbf5d5b337ae0756d8799544c9f0fd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.171908179s ago: executing program 1 (id=2928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000005000000010000030900010073797a30000000002c000000030a01010000000000000000010000050900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000208000b4000000000400004803c0001800b00010065787468647200002c000280080001400000000508000340000000020800044000000022050002000900000008000640000000020900010073797a30"], 0xdc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400081, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000002c0)=0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x93, 0xf, 0xc3], [0x84c, 0x0, 0x3ffffffd, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206010200000000000000000700000805000100070000000900020073797a30000000000c0007800800120000000000050005000a0000000500040001001c0011000300686173683a69702c706f727400000000e62e53d894d2082074e21296d71e91a1d74dc08c2605c8e405e0276594e56bdade5235a9aad0cb739adcc305403fbef0c9a2ff1608e33a75a73c08f7f0b3e8614c58df754e33ebff1188ab5a49def463b490caec2cdda931c280c9507195a267c4dd830d52185290fd143cd13661a3cc95203da1a5bd6e32e97483aaeb164a77e5b71f0d1d5ffb61286cf90ef228"], 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x13, &(0x7f0000000080)=""/18, &(0x7f0000000040)=0x12) 5.170901272s ago: executing program 4 (id=2929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002380)=@raw={'raw\x00', 0x701, 0x3, 0x270, 0x0, 0xb, 0x108, 0x108, 0x0, 0x1d8, 0x1c8, 0x1c8, 0x1d8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0xd2857df73be921dd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x4, 0x1, [0x23, 0x9, 0x31, 0x1a, 0x36, 0x4, 0x31, 0x6, 0xd, 0x2f, 0x2a, 0x1f, 0x3b, 0x37, 0x2b, 0x20], 0x2, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.012366307s ago: executing program 4 (id=2931): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x8000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="8361"], 0x2) socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000140)={0x0, 0x10, 0x4, 0x0, 0x4, 0x3, 0x0, &(0x7f0000000100)=[{0x6, 0xfe, 0x1}, {0x19, 0xfe, 0x6}, {0x1, 0x1ff}]}) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000040)=0xf65, 0x4) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 4.912136955s ago: executing program 1 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000580)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000240)={{r0, &(0x7f0000000000)=']{.+^\x00', 0x482, &(0x7f0000000040)={@align=0x4, {0x2, 0x1ff, 0xffffffff, 0x3}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7}, 0x2, &(0x7f0000000200)=[{0x1, 0x5, &(0x7f0000000100)='\'[%\x00', &(0x7f0000000140)="532c54eaf80ff96e8429b07d951854ae767df8fa07b62ed1cf3c7775ed63c5a2c88f3763f06df694c3a31a7b844f", 0x2e, 0x2a}, {0x1, 0xc02, &(0x7f0000000180)='&-\xee\x00', &(0x7f00000001c0)="146acaa6c7473f3ffc51b2f6571366ede6f7e6fcd357340051a912bf6a86033dc0346f4f38ea6bd7f14059991003ec5ac89db92604e6455d5bbd", 0x3a, 0x18}]}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) (async) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000100)) unshare(0x22020400) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000003c0)=""/192}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) (async) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7800, 0xff182d30315c1c61, 0x80, 0xf, {{0x13, 0x4, 0x2, 0x9, 0x4c, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote, {[@end, @generic={0x82, 0xd, "0ff54138880402ad6e057e"}, @end, @timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x8, [{@private=0xa010102, 0x8}]}, @ssrr={0x89, 0x1b, 0x35, [@remote, @loopback, @multicast2, @remote, @private=0xa010101, @remote]}]}}}}}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r7}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="03000000fc0100004e070000a73e0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0300002001000000040000a00b030000ca4e52fac7696bb77de666594ea81425f4ca1f918894fddeee1878029f2d4bbad238e008a2ec776f9cb5e7943b862885b15590318d706d30c726c2cdfe30e159"], 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x2000090) (async) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r7}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="03000000fc0100004e070000a73e0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0300002001000000040000a00b030000ca4e52fac7696bb77de666594ea81425f4ca1f918894fddeee1878029f2d4bbad238e008a2ec776f9cb5e7943b862885b15590318d706d30c726c2cdfe30e159"], 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x2000090) socket$kcm(0x2, 0x1, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async) shutdown(r8, 0x0) close(0x3) 1.588830557s ago: executing program 3 (id=2934): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24b, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000200)="1643554b93027352bdd23f695b7df26fdc01c510f3271e3beebd11deb6d3cdd7eec6da1b35f54ef695094937e2b054b94c8daa7622775164c1002705eba6fdb947e2c006d2995214ae80a5a388", 0x4d}], 0x1, &(0x7f0000000440)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x3c, 0x8, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x81, 0x8, [0x5, 0xc, 0x2]}}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x3}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}}}], 0x58}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000580)="a97b4c8c46b6c619b28430803ce5002aa571404e5bbd20ea0d3428275ecff7ecfce32b0350b75058d2085128e6ac7f1baed7a69a56b2a4016633588819f211eaa9bbde88e1361faa9537ef1234b0adbe4aa80335fb4129b8a987812b4208d217099950cfbb364d1d245f7effcad18a09b873d1986266bbd26ca8dc16bc25e5e4b95a2014a1a458b6d0cdfb1d8d6ee403e983a3e29f63721d69ea4b84bafa1585547b4132577af5aa48b37604a23bccd37c0edf79e14a63236609503a3859f44e15b7768b165fcf0676253cb8ecb575f9a59b3f35d4e43c06e8bf325be1", 0xdd}, {&(0x7f0000000780)="7e5c15194243e745c3937cd56605cf6c5482887c34dbfe6e822b8dff110adb9c5c1b9a429c646f28d355eef6981f645ec10e97e9617e483c", 0x38}], 0x2}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x9, @private0, 0x10000}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000840)="a723c36e0465a0", 0x7}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="19b35d3ba5401ba78c2e8212458bcffc7580bf0063ef16e30c75dbf79209e80b340af6dc823ee251f4", 0x29}, {&(0x7f0000000900)="eb73ffc1a96d5d8c3a9af437d98fbcde67a5c89ad3cee8a649c2bf1afd8cfbeb25125bebff2256218f2dba0cff7dacfc77eb57924a92683762c70f46a888c7cdff0596e351273a235206674bc0fb9b49ce36f2281af634e13f011375294363ae0c946096b1b6cbde8946962b9770f7ff0036fcea28ade5787a3da1afe9d2d070c399e7e670fb6d6adba18e446ff758577fb28ad1932dc9cbca7d228c76d1a034204b956b6f6a98ee8bba59595fcabda144e471c9ec38f98f50d82ff0a02d73f83b37474839438b2a8ab9fb209f23f16b276fd9a519682a8b75093e308c58d9a34f4e70cfd88327671e3a26f950077b0f58fc52e9aef9b03f3c49ef4089", 0xfd}, {&(0x7f0000000a00)="525029d31969331d3b5235ce4dd7a5bb4ea3c35894b1be8672e6190fe5b13657341a49ca01062771c0", 0x29}, {&(0x7f0000000b80)="c3b96b84cd5c3206803711695540db7856a780e2f8b814103bd113947a6a9a265042d996893552b408b1a63aee2390710434cc34ac35f2c494c3d34b9d64e7f72e8363784fb0ed16677eb1e96cf82a99151b14da9f64a8195312f86a3275522703651302c73d8f912e2371710d166e62c17ed7d139c916ae389c7d0403237170a22d472b4b7f1a9be294a651da403053fefb09f375292178b1ab6a5570f8ef686efc438c3a7e1e8c0c", 0xa9}, {&(0x7f0000000c40)="908f88677522ac6da0026d472745f52a9c7fe5da8ca7f21b3fb3be98a32d711dff3e9f84ba5f9f6471d6458e5c03a530a0a3472f6cc456930aa60b84ca3ace71bbb380d62940baaa130d6434859b59e149e0eb7fb0cf55a7c33b44627d5f41cdb1", 0x61}], 0x7, &(0x7f0000000d40)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xd83}]}}}, @tclass={{0x14, 0x29, 0x43, 0x63}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x32, 0x5, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0xa, [0x2]}}, @jumbo={0xc2, 0x4, 0xfffffff8}, @ra={0x5, 0x2, 0x64}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0xd0}, @pad1]}}}, @rthdrdstopts={{0x160, 0x29, 0x37, {0x33, 0x28, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x8001, [0x1, 0x1, 0xaad, 0xe, 0xc000000000, 0xdcb5, 0x3, 0xffffffffffffffff, 0x4]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @generic={0xb, 0xd6, "1366d41f2d023c1bfcd85997ff4f7801e349e39f31c65693f508d094e75cdfbd91ca51ef44c75664592ab6d320fa1bace219edb37e9daf27ceeb881077d78972a5f6340a1ce5a4c66007d8d53568525624ad74bf48acad66a45bf26315b4ddb14e4fe9e8082a0a6646c38d67cce18baddfebafc8edf2411b3618474f233ed1d4baee2a59e106429defae3de5bdb11b244a27f581f29e5bd198a31043da0632c3bf51c4c5cc680c3d8960bd485a1229915fa335e808e66762299074dbfbef86f478b81c21ec0ec71f177d2c04adc17e4a0397e028c20a"}, @pad1, @ra]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x230}}], 0x5, 0x0) 1.480313737s ago: executing program 1 (id=2935): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fa3f000000000000080000008500000007000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@'], 0x40}}, 0x8084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x11, r5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000580)=""/165, &(0x7f00000000c0)=0xa5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001880)=""/4096, 0x1000, 0x6000, &(0x7f0000002880)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc5}, 0x1c) 1.443297709s ago: executing program 4 (id=2936): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x3885aea988841b52, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x2012, r0, 0x80000000) 1.36416695s ago: executing program 0 (id=2937): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (rerun: 64) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4) (async) socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async, rerun: 64) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (rerun: 64) sendmmsg(r3, &(0x7f0000007fc0), 0x0, 0x4000000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="5935945ddb11f12408001b0000000000089a1d1689000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40880) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0x70bd2a, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0x3a}, {@in6=@mcast2, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x60000000) (async, rerun: 64) r7 = socket(0x2b, 0x1, 0x1) (rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000b80)=ANY=[@ANYBLOB="06000000000000000a004e21ffffffdaff020000000000000000000000000001720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000040000000a004e23000000ff20010000000000000000000000000000fe0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000008000fc02000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000001fffc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe880000000000000000000000000101d6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d1a80befac5a998c550c30b58e145a45f8cbc7d9725ebe75c8935f6bc051ee75a0c4328431a"], 0x290) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 1.260223545s ago: executing program 4 (id=2938): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10) (async, rerun: 32) socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 1.254896235s ago: executing program 3 (id=2939): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="b7bc94a992ccadf60b4e60d9ff9b0c2c39651911a7c90e740bf18b74d5541432b3bc0e598124b0b8e5f2bd39803b0b29e431f2b6d27c114ea6d68e15642d369ae00af2ac9f76e41bcc598f156b02aea66457830ebbd9e1a588939263a638113e50d9e07779154c3c316d41ea6baa"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94) 1.219880432s ago: executing program 0 (id=2940): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') (async) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20044001) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000200)={0x9b, 0x9, 0x3, 0xff, 0x80000001}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x22}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) close(r1) accept4$packet(r2, 0x0, &(0x7f0000000440), 0x800) (async) r6 = accept4$packet(r2, 0x0, &(0x7f0000000440), 0x800) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000480)={0x1a, 0x4, {0x9, @struct={0xaf, 0xfffffffb}, 0x0, 0x6, 0x1ff, 0xf5c3, 0x4, 0x8000000000000000, 0x23, @usage=0x5, 0x5, 0x2, [0x2b1, 0x0, 0x37, 0x8000000000000001, 0x9e0e, 0xfffffffffffffff8]}, {0x6, @usage=0xffffffffffff1b34, 0x0, 0x0, 0x2, 0x4, 0x7, 0x6, 0x1, @usage=0x4, 0x1, 0x9, [0x5, 0x8000000000000001, 0x9, 0xffffffffffffffff, 0x8]}, {0x3d, @struct={0x61, 0xcf}, 0x0, 0xd, 0x80000000, 0x1, 0x3, 0x9ff, 0x38, @struct={0x1, 0x81}, 0x9, 0x2, [0x2, 0x5, 0x1000, 0x3, 0x73, 0x2ed]}, {0x7, 0x6, 0xd}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000480)={0x1a, 0x4, {0x9, @struct={0xaf, 0xfffffffb}, 0x0, 0x6, 0x1ff, 0xf5c3, 0x4, 0x8000000000000000, 0x23, @usage=0x5, 0x5, 0x2, [0x2b1, 0x0, 0x37, 0x8000000000000001, 0x9e0e, 0xfffffffffffffff8]}, {0x6, @usage=0xffffffffffff1b34, 0x0, 0x0, 0x2, 0x4, 0x7, 0x6, 0x1, @usage=0x4, 0x1, 0x9, [0x5, 0x8000000000000001, 0x9, 0xffffffffffffffff, 0x8]}, {0x3d, @struct={0x61, 0xcf}, 0x0, 0xd, 0x80000000, 0x1, 0x3, 0x9ff, 0x38, @struct={0x1, 0x81}, 0x9, 0x2, [0x2, 0x5, 0x1000, 0x3, 0x73, 0x2ed]}, {0x7, 0x6, 0xd}}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000880)={0x0, 0xfffffffffffffff8, @start={r7, 0x0, "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", "90cbd7fb2f069c69e5953758e085f577fc1e812d27d2beabfcaa4b7c40255ba863933d5b0c1ad8b3a7d25843a51b4249c0440cd9cd18056149bf0b7b9cc80d82912d6ec12f5a4ecae1ec20e3bf8c36f11919b75c17f623c547e11acf26c9f0ebf2e74d2064fe60628f69cf9f4a048bae266374039fc405be86abfe526024b418ce821c312f8d4de486385aa1f746bd8bc464491ee3a7d4530116f8e622bdf3ee24bb8a11aff39620956e62192f3da6d88f487935847f47035a3d44b5474832239f0b872745c3dab1b2cf58bdd9f67df68c9e45ee1806c5a4a030fdf319919efde13604a6f8134b89c7409ff2b2dca2e26576387875dd038b1b3db81fa4bac7832d23e96299f397ac7eac4ff4b710993fd9051b547f5cea6d1954952fb75f090396741e3754be15e94000a81b7ac5948caed35b9667cd402ce15a35d56025eb1aecd3f687ca432e0047910944fe9675beebca69a77830e624ca545fa958ae4911b8cbd179c6c9afa51a3a8b70ca9ebeae0a6eb4007cf79e0a86c5c08fa517fcb1e8609cadd05d4d3bcdc52009789c4818c5731ac2eb3c432d26449c4f21a2189116b2ef87457af073c03ecaa8e78710d6d05724a3ac89d76223d5c32ff42eb06409251c53d5e91268c2dd3eb1f1c46a7d9469562ec31c1251e7d9a581b8360244f5bb89ad46140404e1f866cccea679bc6e407007ce8e2d33634cdb151bd2db27c67944bcaa2ddddf5f5dee69614db0b0da594372129a98d00de68e596d9a3b69f9736177fd5e3f317dd3aea3fedf08f46e01ebe5b9c48cd42fd11256c79f3162dac55880384effd6d22e7ec2f7d49058b4d4ae3110da58da4ac4d07aff04f6058ac2c599ae149acbb902ac402e4d26462f39f8f84b8574ac5065b7cb952647214147c9c11b54ab46dcdf0965aae761bcf5f43a69c6d5bf97fad841bdd1851fda453435491d3906251946275cdc579331abce0e077e68403854da0ef171d77302be1d7788a10cec66cbf3740e337fdcd7c87e28bb18daa79813c12f9ed6a5dc38ffb09b86bb1100988a427a9dc876c2c7a93eda6c541a68061bd9de888ac2949e78f95220fa65aec3a2c5660a53c2ab6a7040aec93cf230371da41335b294704fbb61818835ed4c4b9f66a4684fea90c7073e617a7dc202e0617bc6c7359dddea2a73a8e3f8044e5414cec4c5326a8297d9123ece5d3cd91b138a4e237dbe57be7b9d364724a786d6869ab9878b9844d00aa61744f59881b41f4e3163a03751bcba4e714db6606fb4acf980319029b2f5f49dde318f5b818ca012b4698b96024d8feb7b04adf5d60628041d3f5346440aa4afdbad7a035dd17979ef7f0a25684bfd7c48d5d02d0d5a72df4ad98f2f857d71721ef37f4017732b8c821a252f30c537642bf8196516755e33caa73b1fbea2ac1a7386c2ff3e26dd26919b3fe007d979"}, [0x4, 0x401, 0x37ec, 0x6, 0x0, 0x0, 0x3, 0x9, 0xf58e, 0x4, 0x9, 0x6, 0x8000, 0x8, 0x7, 0x2, 0x2, 0x3, 0x6, 0x1, 0x9, 0x1, 0x7, 0x1, 0xfffffffffffffffe, 0x4, 0xe3, 0x7, 0x10001, 0xb2, 0x0, 0x10000, 0x3, 0x1, 0x45c, 0x9, 0xffff, 0xe02c, 0xe00, 0x4, 0xbe0f, 0xdbc6, 0x2, 0x400, 0x7, 0xe541, 0x3, 0x9, 0x3cd3, 0x2, 0x0, 0x9, 0x8, 0x2, 0x7, 0x6, 0x7, 0x6, 0x0, 0xa, 0x9, 0x5, 0x100000001]}) bind$can_raw(r3, &(0x7f00000012c0), 0x10) (async) bind$can_raw(r3, &(0x7f00000012c0), 0x10) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000001300)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000001340)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001380)={0x2c, 0x2, r8, 0x23}, 0x10, &(0x7f0000001540)=[{&(0x7f00000013c0)="17f9617d4312b28d09", 0x9}, {&(0x7f0000001400)="9bd7a5162b7b4e9527cd2093563366892b2f61984a6d4a8481b2535966a0f91b7b5359a946de0842526b95da6a545886413364dd55bc848009b5881b5775e5ae3f2144c8ef64058a5a551eed26e6f7432cf4caf98657405b3b0ab2cc4565a26cc394c9b72706079e7ec404d47c1135767be6a5df25146bde44e271659db4b28fdd951d9b9ed15b858e935c1e0f30f05d6f739581efc14e2c662222000ec9a061a47e2209631f482799580adb13535eb1611274d045a27eeb354b6979022b29d95c4a95cbbff0073a2190da3a92718b7ce4854f20cdc73e7d606cf168436de27b6546a3f38240", 0xe6}, {&(0x7f0000001500)="3cc9f7088e1d429b5a361f8794339131c455e6353e24dfec8e75622e5be1be1c954138109a674c751d9e88eff3c3e303d6276dbd", 0x34}], 0x3, 0x0, 0x0, 0x24000080}, 0x400c800) (async) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001380)={0x2c, 0x2, r8, 0x23}, 0x10, &(0x7f0000001540)=[{&(0x7f00000013c0)="17f9617d4312b28d09", 0x9}, {&(0x7f0000001400)="9bd7a5162b7b4e9527cd2093563366892b2f61984a6d4a8481b2535966a0f91b7b5359a946de0842526b95da6a545886413364dd55bc848009b5881b5775e5ae3f2144c8ef64058a5a551eed26e6f7432cf4caf98657405b3b0ab2cc4565a26cc394c9b72706079e7ec404d47c1135767be6a5df25146bde44e271659db4b28fdd951d9b9ed15b858e935c1e0f30f05d6f739581efc14e2c662222000ec9a061a47e2209631f482799580adb13535eb1611274d045a27eeb354b6979022b29d95c4a95cbbff0073a2190da3a92718b7ce4854f20cdc73e7d606cf168436de27b6546a3f38240", 0xe6}, {&(0x7f0000001500)="3cc9f7088e1d429b5a361f8794339131c455e6353e24dfec8e75622e5be1be1c954138109a674c751d9e88eff3c3e303d6276dbd", 0x34}], 0x3, 0x0, 0x0, 0x24000080}, 0x400c800) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000015c0), &(0x7f0000001600)) r9 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000001680), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001680), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000016c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000001780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000017c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20001020}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x4c, r10, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x94}, 0x24000080) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001ac0)={0x4d94, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x7, 0x9, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb12a, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000001980)='GPL\x00', 0xe36e, 0x6e, &(0x7f00000019c0)=""/110, 0x41000, 0x40, '\x00', r8, @fallback=0x18, r3, 0x8, &(0x7f0000001a40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001a80)={0x4, 0x0, 0x3, 0x3}, 0x10, r16, r3, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x7, 0x9, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb12a, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000001980)='GPL\x00', 0xe36e, 0x6e, &(0x7f00000019c0)=""/110, 0x41000, 0x40, '\x00', r8, @fallback=0x18, r3, 0x8, &(0x7f0000001a40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001a80)={0x4, 0x0, 0x3, 0x3}, 0x10, r16, r3, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) openat$cgroup_procs(r3, &(0x7f0000001f40)='cgroup.threads\x00', 0x2, 0x0) (async) r17 = openat$cgroup_procs(r3, &(0x7f0000001f40)='cgroup.threads\x00', 0x2, 0x0) sendmsg$netlink(r2, &(0x7f0000001fc0)={&(0x7f0000001bc0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc, &(0x7f0000001f00)=[{&(0x7f0000001c00)={0x48, 0x3e, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x110, 0x0, 0x0, @u32=0xffff}, @nested={0x30, 0xf0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid=r0}, @typed={0x14, 0xb1, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x40}, @nested={0x4, 0x26}, @nested={0x4, 0xc8}]}]}, 0x48}, {&(0x7f0000001c80)={0x220, 0x2f, 0x300, 0x70bd25, 0x25dfdbfd, "", [@generic="6cda6dd055f213d1ff2380fb5929b995f3a3543653c4fa9a5c9e5aee88308eb194e7b63f880b755917f8b53c0ee792c94d388cdcb5de4f81d2aa0f0b001999367dcd047db959ba16bb1befa1eda78ed1055c644d8139198bdaf4515f8ef1f0c5214e18be5e78240d8e76e2a970d4fd5480e6b4c247bfc645eaedcd200adf2648cdd64930ceadff94f5b61bca3f7763a3f65f289696c9b6b40ef577e3fc3e6099a9656dae0a7e28606b4a3b0f544919c4f8e5194523fdcbff10fcd12ee70f448a74fb283683a00af638bbde82097df870f1f3c9519212b282409f5c9d5b1a0882a42031dc0c6d2f", @nested={0x125, 0xcb, 0x0, 0x1, [@generic="05da584c81760f17d1d32d8dd0ddc4b0f8b10e62f2b687aacb0d1a8922337130b36a5b4bd534d47290cfb21a3679293ca55dc06677b96ed51f9f8815228024e1ec0b7c6b2387e4282f53e513c9e8ca04867a21dc085c0946e2ed20c8a1e1893492b1233a754ddc1e4ea96c4bd6beb00dbb86b9397ba615c4717fbc1b65384946f3", @typed={0x8, 0x120, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x12c}, @generic="64ec0e88888349e043146112531938ae8275b263b3952336125e5f15c2527bb96a1c2bbdc1d965d2f2205b9dd4ca1d8ac9edeeced0c542be4d5073c387acbf2d9b59a837d82fbc0950682a644d22bb776fa4cb353546041dfccb52a50fe635251a724f3c1a2d5cc6234f0f9e7776a21180c95a24aba977dcce4930b8e50abc8643d6dbc2239ef64c6d2514fbeafa074c", @nested={0x4, 0x99}]}]}, 0x220}, {&(0x7f0000001ec0)={0x2c, 0x25, 0x200, 0x70bd26, 0x25dfdbfe, "", [@typed={0xc, 0xb, 0x0, 0x0, @u64=0xc}, @generic="e7a3360c75", @typed={0x8, 0x7, 0x0, 0x0, @u32}]}, 0x2c}], 0x3, &(0x7f0000001f80)=[@rights={{0x20, 0x1, 0x1, [r3, r5, r17, r9]}}], 0x20, 0x20000000}, 0x84) 1.166103423s ago: executing program 4 (id=2941): accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) (async) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0xffff, {{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}}, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) (async) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r5, 0x0, 0xffffffff000) tee(0xffffffffffffffff, r5, 0x80, 0x2) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x27) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a80)=ANY=[@ANYBLOB="200000000208010800000000000000000500000a0900010073797a3000000008"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40080) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a80)=ANY=[@ANYBLOB="200000000208010800000000000000000500000a0900010073797a3000000008"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40080) socket(0x2a, 0x2, 0x0) (async) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$XDP_MMAP_OFFSETS(r8, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) 1.072278638s ago: executing program 3 (id=2942): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0xfe60, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x36, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESHEX=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 1.029942147s ago: executing program 0 (id=2943): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0xe, 0x8, 0x9}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, r1, 0x0, 0x5, 0x4}, 0x50) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000180)=0x9) 840.966965ms ago: executing program 3 (id=2944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) 772.238552ms ago: executing program 0 (id=2945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delchain={0x24, 0x26, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xa, 0x9}, {0x2, 0x6}}}, 0x24}}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) sendmsg$inet6(r7, &(0x7f0000001480)={&(0x7f0000000300)={0xa, 0x4e23, 0x5, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)}, 0x4000004) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000040)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x67}, {@loopback, 0x4e24, 0x4, 0x40001, 0x1, 0xffffffff}}, 0x44) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0x18}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x48) splice(r8, 0x0, r10, 0x0, 0x3000, 0x100000000000000d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, &(0x7f00000001c0)="65cf0aff", 0x0, 0x4, 0x0, 0x400}, 0x50) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add", 0xd6}], 0x1}, 0xff00) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000005200010004000000000000001c00"], 0x28}}, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRES64=r4, @ANYRES8=r4], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x104b}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@generic={0xff, 0x2, 0x1, 0x10, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 710.898191ms ago: executing program 3 (id=2946): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), r6) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c1e0000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf2501000000080002000200000008000200020000000800010001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c800000", @ANYRES16=r7, @ANYBLOB="00012abd7000fcdbdf250200000008000200020000000800020002000000080002000200000008000100010000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="856b1200ff00aaaaaaaaaaaa86dd60381f3400102f00fc000000000000000000000000000000ff020000000000000000000000000001042088a88dff000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000008000000000080065580000000033780644b9ad49fe3e1df4a9bc6470e27b49b2018a3adc072a76"], 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e64000000000500010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 549.611412ms ago: executing program 1 (id=2947): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) close(0x3) r1 = socket(0x2b, 0x1, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @multicast2}, &(0x7f0000001840)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000018c0)={'syztnl2\x00', &(0x7f0000001880)={'gretap0\x00', r2, 0x20, 0x1, 0x4, 0x9, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x66, 0x0, 0xcd, 0x29, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0xb, 0xe3, [@rand_addr=0x64010102, @local]}, @noop]}}}}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000000200)=0x8) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'gretap0\x00'}}, 0x1e) r4 = socket(0x2d, 0x2, 0x0) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)={'c', ' *:* ', 'rwm\x00'}, 0xa) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000002740)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002780)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c00)={&(0x7f0000004100)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r7, @ANYBLOB="00000000000000000000000000000001000004d66c000000ac14141e000000000000000000000000537deb020000000001010000000000000900000000000000000000000000000009000000000000000700000000000000000000000000000007000000000000008bd12807000000000200000000000000080000000000000001000000000000000100000006000000670800002dbd7000063500000a0001030800000000000000e4000600ff020000000000000000000000000001000000000000000000000000000000014e2100074e2200060a00a0203b000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff64010101000004d2320000007f0000010000000000000000000000000900000000000000ffffffffffffff7ff7ffffffffffffff0010000000000000fe4d000000000000010000000100000004000000000000000004000000000000050000000000000063640000000000000400000000000000ff0000000000000073f30000c90c0000080000002dbd7000000000000200001014000000000000001c000400ffff4e214e2100006401010100"/196], 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x4000881) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001240)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000001340)=0xe8) r10 = getpid() sendmsg$nl_generic(r1, &(0x7f0000001800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000017c0)={&(0x7f0000001380)={0x408, 0x2c, 0x10, 0x70bd26, 0x25dfdbff, {0x18}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x37}}, @typed={0xc, 0xe9, 0x0, 0x0, @u64}, @nested={0x20, 0x9d, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0xb42f}, @typed={0x8, 0xd8, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x164, 0x0, 0x0, @uid=r9}]}, @generic="ca45e50d688f95b3c861e75cb98d06b81d3d56640350e82f7e80f0406b50b2edaa52a8c403f375c25642eaba2f29e046a7f8e1f20b14934d0df85e2525cfc1d4dd8bb0ed1bd4370ac311ace9f512aec90ed4c4c2a5ea4a36844ee2a3ca4f51ecbc37892ae677cf8aad60cd8ee10fe9211f99783c21e00ef7668f9f73504343b775baaaa7018131d3536327b6865446390ad7dcfec7debeaf55e9f333f61efb0e12a856d5585cec166e9ab1433b8419fc2e13f7a88983fdc0d6b67305a9a6c9dcaa08dc5b3cfa9f4d31bba9279064431c0a91d5b19129010f0eeb17204907", @nested={0x154, 0x107, 0x0, 0x1, [@generic="e6619b275cad119a1eeff4cfe66ea7449b816f25b216cae4425688013fd272a6c3a0a2690bf7b74a6748824d15764afb133ad884f7661d586c65a45bb37e03232310", @nested={0x4, 0x11b}, @nested={0x4, 0x6a}, @nested={0x4, 0x138}, @nested={0x4, 0xde}, @generic="b5a5133e72d54b5440c39390fcf725bdcd75e3829a850cbc6377f6c2a62c3415f6902ff4d326fe62b99e8cc389c5998c4e39dfcb5ad2a8aa09c209e8ab61d15b90eefae95ea221dbe4cd51736c2d8aa17aee85b9c801cc3d50a5af26d8dd6962938b3b3a67148358aa444449c316735b3ab03c495da3f7283d53a5854237c4ac48d263430fa7655c0f17d2be79e2008993f37d5beec0461afed7244a0da87a728ebccac7c8ce465451a852f9cf74c1af020ff55d08fae878898779f4ed28681fce48b34a495320a7806f00910827e1984cfce3eae69fe8c4de55c54ed42a30c09262637150a3b507eab610e177bf", @nested={0x4, 0x13d}, @nested={0x4, 0xb2}, @typed={0x8, 0x3, 0x0, 0x0, @pid=r10}]}, @nested={0x34, 0x60, 0x0, 0x1, [@typed={0x5, 0x13d, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x8f}, @generic="1096bdf7b27308a1a0375e5997259641f26f737e448500a8b36d76e69e8ab89b", @nested={0x4, 0x7e}]}, @nested={0x149, 0xdf, 0x0, 0x1, [@generic="5b87adfc95cc25534129a513ce8bf38000d35da1d03ed4d658959bec63ce27aa7d1a7e41", @typed={0x8, 0xd5, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="b4acb6bf3ab202c5d4c58218421ee412475facf76754e4f659129902a01713f8b89504ccfa7f90c12765c482b16d6c16212d89bf1f", @generic="f6de86f64f1e030ad99d4db32a47e38846068a8fa4fc21d833ab1173a796d4b03b7732f165ed92652e23f32a8014e87f075da0c7fbc39e9b263302ff85275f342dcefc35e128eeed89b246d5e92c69d9fd06f7e1650b7124f7d274c8a4ae1fdaa6f1146532005e292358c4737dfec2b7a9321bb492d0ae4ae328c7d75bb2419ccd5ef8c3ace59b35c61f686e4b59e9669a2290ae18dab5f44cae574e53a97e6764da2680382af02cda5db8854c9ef6630fab4a62bef87045e24142da7b373eb943a07d0cefcaded6b7f004a8f747508d834125ef", @typed={0x8, 0xb4, 0x0, 0x0, @ipv4=@empty}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x80}, 0x800) r11 = socket$inet6(0xa, 0x1, 0x80000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x1ff}, 0x20) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000000)="f27ff51719318f56646c4e388d49b41fdabf5ae43266", 0x16}, {&(0x7f0000000040)="3c7aaa46ad53b3afc84e2025265caf136dfd7df2769fd25c25eb3326548ce3463cdfb6fea2d0b88f5b8e5d158fe2ba6efa0ea869c43c9d08d62f9904257ddc6db402fdad214c177706392eeebd6bf8ffa604933c934582cf589781c02ba01bd84b860781bf5da01b038d5db7003f58418c73047fb4ec4666695994177562ef0b81787a12a6c0e1e19ba07c5130232bd6967020584bdd5990dc4633c4e9dcfda799f42d1cf03d", 0xa6}, {&(0x7f00000001c0)="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", 0x1000}], 0x3}, 0x20000020) 352.174782ms ago: executing program 0 (id=2948): r0 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/128, 0x80}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000000c0)=""/225, 0xe1}], 0x3, 0x5, 0x8da0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="717218cd8efad737dd88428b042a39d7a8b292d11f28016e50e4da8cb5092b7ca6861dbdd553afe14aae0956318928c02931add1435e0d23c3922698552a8b8d429eb83f313bcd229ce85551a5b906fe70d299edd6cc6db925ff33e2a0444c020ab69689bf82a73d04266970f4b827156924c54901f40de200943f8dc621b6", 0x7f) r2 = accept$nfc_llcp(r1, &(0x7f0000000280), &(0x7f0000000300)=0x60) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000440)={{@_ha_fsid={[0x1, 0x8]}, {0x7, 0x0, 0x0, 0x8000}}, {{[0x4, 0x69dc, 0x53, 0x4]}, 0x0, 0x1, 0x0, 0x0, &(0x7f0000000340)=[{{@_ha_fsid={[0x8, 0x7ff]}, {0xcc, 0x7, 0x100, 0x1}}, 0xf9ab, 0x0, '@\x00'}, {{@align=0x1, {0x5, 0x9, 0x7f, 0xee1}}, 0x100, 0x0, ',=-\x00'}, {{@_ha_fsid={[0x0, 0x2]}, {0x7ff, 0x2, 0x0, 0x8}}, 0x5, 0x0, ',}:]-\x00'}, {{@_ha_fsid={[0x5, 0x7]}, {0x3ff, 0x0, 0x7, 0x7f}}, 0x6, 0x0, '+*&{/\x00'}, {{@_ha_fsid={[0x3, 0xb8d]}, {0x1, 0x2, 0xe52d, 0x5}}, 0x4, 0x0, '(\x00'}, {{@_ha_fsid={[0xf0df, 0x5]}, {0x5, 0x81, 0xaacf, 0xe}}, 0x0, 0x0, '$:\x00'}, {{@align=0xffffffffffffffff, {0x0, 0x9, 0x6, 0x6}}, 0x0, 0x0, ')#\x9b,\x00'}]}}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@perf_event={0x10000}}, 0x18) poll(&(0x7f00000004c0)=[{r1, 0x80}, {r1, 0x8}, {r3, 0x2202}, {0xffffffffffffffff, 0x8409}], 0x4, 0x7) r4 = accept(r0, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000580)=0x80) recvmsg$can_raw(r4, &(0x7f0000001780)={&(0x7f00000005c0)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/116, 0x74}], 0x2, &(0x7f0000000780)=""/4096, 0x1000}, 0x10000) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000017c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000001800)=0x2c) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000001880)={&(0x7f0000001840)=[{0x8, 0x173, 0x2}, {0x0, 0x3, 0x1}, {0x8, 0x4000000}], 0x3, 0x10, 0x8, 0x2}) pipe(&(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001980)={'syztnl1\x00', &(0x7f0000001900)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x6, 0xbc, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x700, 0x0, 0x480, 0x4}}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f00000019c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x2f, r7}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000001a00)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x550d77c0}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000001d40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b80)=@mpls_delroute={0x174, 0x19, 0x0, 0x70bd2c, 0x25dfdbfb, {0x1c, 0x10, 0x20, 0x0, 0x0, 0x4, 0xfd, 0x3, 0x500}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x1b, 0x7, r7}}, @RTA_DST={0x8}, @RTA_OIF={0x8, 0x4, r7}, @RTA_NEWDST={0x84, 0x13, [{0x100}, {0x4}, {0x4}, {0x3}, {0x3, 0x0, 0x1}, {0xb1, 0x0, 0x1}, {0x2}, {0xf}, {0xf52, 0x0, 0x1}, {0x3}, {0x81}, {0x1}, {}, {0x3, 0x0, 0x1}, {0x5}, {0x1}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xffff5}, {0x4}, {0x5}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x2}, {0x2, 0x0, 0x1}, {0x1}, {0x7}, {0x5, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3}, {0x3, 0x0, 0x1}, {0x101}]}, @RTA_VIA={0x14, 0x12, {0x2b, "5de0c6eb4da58d537cee72adfd35"}}, @RTA_NEWDST={0x84, 0x13, [{0x9}, {0x9}, {0x4e53}, {0x6, 0x0, 0x1}, {0x2}, {0x0, 0x0, 0x1}, {0xb}, {0x3}, {0x7, 0x0, 0x1}, {0x2}, {0x4, 0x0, 0x1}, {0xf}, {0xac1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xd}, {0x8}, {0x3}, {0x1ff, 0x0, 0x1}, {0x9}, {0xc}, {0x3, 0x0, 0x1}, {0x800}, {0x4, 0x0, 0x1}, {0x9abb}, {0x9, 0x0, 0x1}, {0x3198, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8263}, {0x10}]}, @RTA_OIF={0x8, 0x4, r7}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6e}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x10) accept4$alg(r5, 0x0, 0x0, 0x80000) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000001d80)={"bf35052c1219028771b6a12e1ef8e32c", 0x0, 0x0, {0x1, 0xe1a}, {0x100, 0x4}, 0xffffffffffffffff, [0x9, 0x8, 0x9, 0x53, 0x5, 0x7, 0x8, 0x4, 0x3, 0x10000, 0x5, 0x0, 0xffffffffffffffff, 0x80, 0x3, 0x8]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000001e80)) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x20, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10000040) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000001fc0)=0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000002000)={0x2a, 0xffffffff, 0x7fff}, 0xc) close(r5) 202.774645ms ago: executing program 0 (id=2949): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000001080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140), 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000b700000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r8, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r9}}], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0xff, @empty, 0x9}}, 0x6, 0x400}, &(0x7f0000000040)=0x90) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2006) r10 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 64.002763ms ago: executing program 3 (id=2950): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r3, 0x400}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01030000000000000000050000010900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000000030073797a3000000000020000000000000000000000000000000500000108000b40000000001c0004801800018008000100647570027e000280080002400000000a0900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0) 699.89µs ago: executing program 1 (id=2951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0xd, 0x7, 0x9, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000001ec0)=0x7fff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000011008188040f46ecdb4db9cca7480ef410000000e3bd6efb9980b4e4e320f574485120994d290009000e000a000d000100ba800000120156e7201eda09dc4e3bb24c9cb050fc06c2efba777fbdce6a4de836b05fea9d3b0732611c57d22a2b6076d84d137b77583af0a1a0fd7fecab084801e1a024120e8a826963fbd4ed688fafe1f3eb709a31a62e4aec95547789", 0x93}], 0x1}, 0x40840) 0s ago: executing program 4 (id=2952): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0x4, [@datasec={0xe, 0x1, 0x0, 0xf, 0x1, [{0x1, 0xfffffff8, 0x8}], "c4"}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000240)=""/20, 0x38, 0x14, 0x0, 0x1e134e51, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x7}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendto$inet6(r5, &(0x7f0000000200)="020409dbec075d37ad77", 0xa, 0x24040001, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000008110000e1a63f1f59f0a40cf024edb361d9819617b3942cf9a2ce7ad7a7a0863fb1db0efa324f8c5ba58bac639950706e24bb485d79d109d71f137858ae0b286f483e5a7081a7efc762b517ad6c3bb130090b3bd0f0503915edae52ca8560f1600046f07182eb9485a181f2ad99", @ANYRES32=r0, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): se check. [ 259.754343][T11449] netlink: 'syz.0.1347': attribute type 21 has an invalid length. [ 259.791815][T11449] netlink: 'syz.0.1347': attribute type 5 has an invalid length. [ 259.821211][T11449] netlink: 'syz.0.1347': attribute type 6 has an invalid length. [ 259.832859][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.840359][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.056165][T11467] netlink: 'syz.0.1352': attribute type 2 has an invalid length. [ 260.063934][T11467] netlink: 'syz.0.1352': attribute type 8 has an invalid length. [ 260.142945][T11467] netlink: 'syz.0.1352': attribute type 12 has an invalid length. [ 260.269924][T11481] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 260.325753][T11481] bridge_slave_0: left allmulticast mode [ 260.331424][T11481] bridge_slave_0: left promiscuous mode [ 260.337100][T11481] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.346159][T11481] bridge_slave_1: left allmulticast mode [ 260.351792][T11481] bridge_slave_1: left promiscuous mode [ 260.357530][T11481] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.370492][T11481] bond0: (slave bond_slave_0): Releasing backup interface [ 260.383223][T11481] bond0: (slave bond_slave_1): Releasing backup interface [ 260.393029][T11481] team0: Port device team_slave_0 removed [ 260.419486][T11481] team0: Port device team_slave_1 removed [ 260.425605][T11481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.440305][T11481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.450494][T11481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.474837][T11489] bridge0: port 3(syz_tun) entered blocking state [ 260.482016][T11489] bridge0: port 3(syz_tun) entered disabled state [ 260.488604][T11489] syz_tun: entered allmulticast mode [ 260.495646][T11489] syz_tun: entered promiscuous mode [ 260.504249][T11481] netlink: 'syz.3.1358': attribute type 2 has an invalid length. [ 260.717824][T11493] xfrm1: entered allmulticast mode [ 261.420486][T11532] syzkaller0: entered promiscuous mode [ 261.425999][T11532] syzkaller0: entered allmulticast mode [ 261.510850][T11535] __nla_validate_parse: 10 callbacks suppressed [ 261.511062][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 261.869093][T11551] netlink: 'syz.0.1378': attribute type 40 has an invalid length. [ 262.231444][T11559] syzkaller0: entered promiscuous mode [ 262.253079][T11559] syzkaller0: entered allmulticast mode [ 262.374742][T11565] batadv_slave_1: entered promiscuous mode [ 262.451047][T11564] batadv_slave_1: left promiscuous mode [ 262.739005][T11580] syzkaller0: entered promiscuous mode [ 262.744511][T11580] syzkaller0: entered allmulticast mode [ 262.894435][T11580] tc action pedit 'at' offset 20 out of bounds [ 263.567154][T11611] batadv_slave_1: entered promiscuous mode [ 263.793171][T11610] batadv_slave_1: left promiscuous mode [ 263.985448][T11635] netlink: 'syz.1.1401': attribute type 1 has an invalid length. [ 263.993206][T11635] nbd: error processing sock list [ 264.091073][T11637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1401'. [ 264.108730][T11637] RDS: rds_bind could not find a transport for fc00::4, load rds_tcp or rds_rdma? [ 264.131669][T11640] RDS: rds_bind could not find a transport for fc00::4, load rds_tcp or rds_rdma? [ 264.447551][T11644] bond6: entered allmulticast mode [ 264.497314][T11644] macvlan3: entered promiscuous mode [ 264.502645][T11644] macvlan3: entered allmulticast mode [ 264.776418][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 264.842020][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 265.135870][T11665] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.460037][T11674] bond2 (unregistering): Released all slaves [ 265.646188][T11675] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 265.972490][T11701] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1411'. [ 266.568180][T11711] syzkaller0: entered promiscuous mode [ 266.573701][T11711] syzkaller0: entered allmulticast mode [ 266.638650][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1416'. [ 266.647644][T11722] openvswitch: netlink: EtherType 0 is less than min 600 [ 266.757330][T11711] tc action pedit 'at' offset 20 out of bounds [ 267.182597][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 267.652119][T11752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1423'. [ 267.708148][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1422'. [ 267.720326][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1422'. [ 267.808025][T11756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1423'. [ 267.898545][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 268.132341][T11772] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1426'. [ 268.931379][T11777] tipc: Enabled bearer , priority 0 [ 269.231592][T11786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.239682][ T5823] team_slave_0: entered promiscuous mode [ 269.245986][ T5823] team_slave_1: entered promiscuous mode [ 270.034624][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 270.091824][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'. [ 270.108472][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'. [ 270.350795][T11847] tipc: Enabled bearer , priority 30 [ 270.453465][T11851] netlink: 'syz.1.1445': attribute type 13 has an invalid length. [ 270.662293][T11851] tipc: Resetting bearer [ 270.928178][T11851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.970021][T11851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.357331][T11851] tipc: Resetting bearer [ 271.468474][T11851] tipc: Resetting bearer [ 271.621681][T11851] dummy0: left allmulticast mode [ 271.737074][ T43] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.748875][ T43] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.827079][ T43] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.853419][ T43] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.862342][ T43] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.903952][ T43] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.912888][ T43] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.933098][ T43] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.957205][T11889] __nla_validate_parse: 11 callbacks suppressed [ 271.957222][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 272.004789][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1453'. [ 272.184363][T11909] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 272.254487][T11909] bond14: entered promiscuous mode [ 272.260004][T11909] 8021q: adding VLAN 0 to HW filter on device bond14 [ 272.276292][T11909] netlink: 'syz.3.1455': attribute type 5 has an invalid length. [ 272.284336][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 272.292448][T11909] macvtap1: entered allmulticast mode [ 272.305334][T11916] gretap2: entered allmulticast mode [ 272.312634][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 272.370527][T11909] macvtap2: entered allmulticast mode [ 272.389972][T11909] bond14: (slave bridge3): making interface the new active one [ 272.399918][T11909] bridge3: entered promiscuous mode [ 272.407060][T11909] bond14: (slave bridge3): Enslaving as an active interface with an up link [ 272.417842][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 272.428317][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 272.454286][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 272.504092][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 272.514083][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 272.525226][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 273.338880][T11951] netlink: 'syz.1.1462': attribute type 1 has an invalid length. [ 273.731213][T11966] FAULT_INJECTION: forcing a failure. [ 273.731213][T11966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.744590][T11966] CPU: 1 UID: 0 PID: 11966 Comm: syz.0.1466 Not tainted syzkaller #0 PREEMPT(full) [ 273.744616][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.744626][T11966] Call Trace: [ 273.744633][T11966] [ 273.744641][T11966] dump_stack_lvl+0xe8/0x150 [ 273.744674][T11966] should_fail_ex+0x40c/0x560 [ 273.744709][T11966] _copy_from_user+0x2d/0xb0 [ 273.744738][T11966] ___sys_sendmsg+0x1c6/0x360 [ 273.744766][T11966] ? __lock_acquire+0x683/0x2cf0 [ 273.744795][T11966] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.744859][T11966] ? __fget_files+0x2a/0x420 [ 273.744883][T11966] ? __fget_files+0x3a2/0x420 [ 273.744917][T11966] __x64_sys_sendmsg+0x1b1/0x290 [ 273.744947][T11966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.744994][T11966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.745015][T11966] do_syscall_64+0x174/0x580 [ 273.745041][T11966] ? trace_irq_disable+0x3b/0x140 [ 273.745065][T11966] ? clear_bhb_loop+0x40/0x90 [ 273.745088][T11966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.745107][T11966] RIP: 0033:0x7fa44019de59 [ 273.745125][T11966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.745142][T11966] RSP: 002b:00007fa44100a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.745162][T11966] RAX: ffffffffffffffda RBX: 00007fa440425fa0 RCX: 00007fa44019de59 [ 273.745176][T11966] RDX: 0000000000008054 RSI: 0000200000000d80 RDI: 0000000000000004 [ 273.745188][T11966] RBP: 00007fa44100a090 R08: 0000000000000000 R09: 0000000000000000 [ 273.745199][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.745211][T11966] R13: 00007fa440426038 R14: 00007fa440425fa0 R15: 00007ffd39439bb8 [ 273.745241][T11966] [ 274.146182][T11944] bond7: (slave gretap3): making interface the new active one [ 274.155893][T11944] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 274.232798][T11950] macvlan3: entered promiscuous mode [ 274.238132][T11950] macvlan3: entered allmulticast mode [ 274.244194][T11950] bond7: entered promiscuous mode [ 274.249256][T11950] gretap3: entered promiscuous mode [ 274.256108][T11950] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 274.263914][T11950] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 274.279982][T11950] bond7: left promiscuous mode [ 274.284761][T11950] gretap3: left promiscuous mode [ 274.382337][T11954] xfrm0 speed is unknown, defaulting to 1000 [ 274.391656][T11972] No such timeout policy "syz1" [ 274.399351][T11977] No such timeout policy "syz1" [ 274.833228][T11986] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 274.866905][T11986] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 274.976295][T11989] ksmbd: Unknown IPC event: 0, ignore. [ 275.145867][T11996] xt_TCPMSS: Only works on TCP SYN packets [ 275.656730][T12011] xfrm0 speed is unknown, defaulting to 1000 [ 275.878833][T12016] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 275.924827][T12016] syzkaller0: entered promiscuous mode [ 275.930323][T12016] syzkaller0: entered allmulticast mode [ 278.567730][T12030] __nla_validate_parse: 61 callbacks suppressed [ 278.567780][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 278.670125][T12030] syzkaller0: entered promiscuous mode [ 278.675634][T12030] syzkaller0: entered allmulticast mode [ 279.275946][T12057] nbd: socks must be embedded in a SOCK_ITEM attr [ 279.395064][T12051] bridge4: entered allmulticast mode [ 279.700919][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 279.831528][T12080] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1493'. [ 280.256558][T12099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1499'. [ 280.265550][T12099] ksmbd: Unknown IPC event: 0, ignore. [ 280.446745][T12109] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1499'. [ 280.609012][T12105] fb: port 2(bridge_slave_1) entered disabled state [ 280.644301][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 280.769273][T12121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.851045][T12126] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1507'. [ 280.867348][T12128] tipc: New replicast peer: 255.255.255.255 [ 280.875266][T12128] tipc: Enabled bearer , priority 10 [ 280.883333][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1509'. [ 280.911320][T12128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1509'. [ 280.930274][T12128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1509'. [ 281.155494][T12140] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 281.354556][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1514'. [ 281.374579][T12147] bond15: entered promiscuous mode [ 281.380007][T12147] 8021q: adding VLAN 0 to HW filter on device bond15 [ 281.425322][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055ece000: rx timeout, send abort [ 281.515078][T12158] bond16: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 281.553892][T12158] bond16 (unregistering): Released all slaves [ 281.946374][ T5823] tipc: Node number set to 4278190081 [ 281.981983][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055ece400: rx timeout, send abort [ 281.990214][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055ece000: abort rx timeout. Force session deactivation [ 282.138211][T12179] Cannot find add_set index 0 as target [ 282.534851][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055ece400: abort rx timeout. Force session deactivation [ 283.086779][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055f0c000: rx timeout, send abort [ 283.472317][T12220] xfrm0: entered allmulticast mode [ 283.500349][T12220] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 283.529907][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056763c00: rx timeout, send abort [ 283.548362][ T7995] xfrm0 speed is unknown, defaulting to 1000 [ 283.554386][ T7995] syz0: Port: 1 Link DOWN [ 283.558786][ T7995] xfrm0 speed is unknown, defaulting to 1000 [ 283.640117][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055f0c000: abort rx timeout. Force session deactivation [ 283.658784][T12226] __nla_validate_parse: 5 callbacks suppressed [ 283.658802][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 283.677119][T12226] netlink: 'syz.3.1538': attribute type 4 has an invalid length. [ 283.770171][T12238] netlink: 'syz.2.1540': attribute type 30 has an invalid length. [ 283.901063][T12245] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1543'. [ 284.082171][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056763c00: abort rx timeout. Force session deactivation [ 284.100830][T12254] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 284.149884][T12254] netlink: 'syz.4.1542': attribute type 2 has an invalid length. [ 284.186398][T12262] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 284.265656][T12262] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1546'. [ 284.287933][T12262] team0 (unregistering): Port device bridge2 removed [ 284.310020][T12263] xfrm0 speed is unknown, defaulting to 1000 [ 285.253417][T12299] bond3: option fail_over_mac: invalid value (127) [ 285.261587][T12299] bond3 (unregistering): Released all slaves [ 286.212138][T12331] netlink: 'syz.2.1558': attribute type 2 has an invalid length. [ 286.219906][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 286.316946][T12332] bridge0: port 3(vlan3) entered blocking state [ 286.323337][T12332] bridge0: port 3(vlan3) entered disabled state [ 286.329754][T12332] vlan3: entered allmulticast mode [ 286.335354][T12332] bridge0: entered allmulticast mode [ 286.343839][T12332] vlan3: left allmulticast mode [ 286.348720][T12332] bridge0: left allmulticast mode [ 286.900953][T12347] xt_bpf: check failed: parse error [ 287.006295][T12350] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 287.014058][T12350] netlink: 'syz.3.1562': attribute type 2 has an invalid length. [ 287.198707][T12358] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 287.533584][T12377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1574'. [ 287.762472][T12394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1574'. [ 287.782596][T12394] nbd: device at index 64 is going down [ 287.790911][T12397] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 287.799754][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 288.009234][T12406] bridge0: port 4(vlan3) entered blocking state [ 288.015696][T12406] bridge0: port 4(vlan3) entered disabled state [ 288.022182][T12406] vlan3: entered allmulticast mode [ 288.027315][T12406] bridge0: entered allmulticast mode [ 288.036748][T12406] vlan3: left allmulticast mode [ 288.042493][T12406] bridge0: left allmulticast mode [ 288.991293][T12446] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 289.004402][T12446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1592'. [ 289.091254][T12446] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 289.092886][T12444] netlink: 'syz.3.1591': attribute type 32 has an invalid length. [ 289.106808][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 289.234365][T12444] bond16: option coupled_control: invalid value (255) [ 289.242700][T12444] bond16 (unregistering): Released all slaves [ 290.022887][T12472] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 290.150686][T12476] netlink: 'syz.4.1602': attribute type 4 has an invalid length. [ 290.322741][T12479] xfrm0 speed is unknown, defaulting to 1000 [ 290.432821][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 290.445519][T12487] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1604'. [ 290.561140][T12490] bond3: option ad_actor_sys_prio: invalid value (0) [ 290.567866][T12490] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 290.638499][T12490] bond3 (unregistering): Released all slaves [ 291.234307][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 291.244394][T12518] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1612'. [ 291.253364][T12518] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1612'. [ 291.393652][T12530] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.575360][T12539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1614'. [ 291.585350][T12539] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1614'. [ 291.998140][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'. [ 292.595276][T12565] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 292.710695][T12574] gretap1: entered allmulticast mode [ 292.947585][T12584] syzkaller0: entered promiscuous mode [ 292.953093][T12584] syzkaller0: entered allmulticast mode [ 293.631159][T12599] netlink: 'syz.0.1637': attribute type 10 has an invalid length. [ 293.780201][T12609] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 293.824927][T12609] netlink: 'syz.0.1637': attribute type 2 has an invalid length. [ 293.939462][T12613] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 293.956953][T12613] netlink: 'syz.1.1643': attribute type 1 has an invalid length. [ 294.087994][T12619] __nla_validate_parse: 5 callbacks suppressed [ 294.088014][T12619] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1646'. [ 294.105474][T12622] x_tables: duplicate underflow at hook 3 [ 294.124326][T12619] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 294.133039][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 294.314098][T12624] bridge1: entered allmulticast mode [ 294.505686][T12633] IPv6: sit1: Disabled Multicast RS [ 295.061774][T12655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1653'. [ 295.107719][T12652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1653'. [ 295.159348][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1657'. [ 295.947659][T12680] vlan3: entered promiscuous mode [ 295.952725][T12680] hsr0: entered promiscuous mode [ 295.996837][T12680] vlan3: entered allmulticast mode [ 296.001997][T12680] hsr0: entered allmulticast mode [ 296.007027][T12680] hsr_slave_0: entered allmulticast mode [ 296.012663][T12680] hsr_slave_1: entered allmulticast mode [ 296.019309][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'. [ 296.031054][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'. [ 296.075752][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 296.105163][T12680] hsr_slave_0: left promiscuous mode [ 296.112576][T12680] hsr_slave_1: left promiscuous mode [ 296.156288][T12700] netlink: 'syz.0.1669': attribute type 33 has an invalid length. [ 297.077783][T12746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1675'. [ 297.087892][T12747] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 297.087932][T12747] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1674'. [ 297.108494][T12747] bond8: option ad_actor_sys_prio: invalid value (0) [ 297.122460][T12747] bond8: option ad_actor_sys_prio: allowed values 1 - 65535 [ 297.151134][T12747] bond8 (unregistering): Released all slaves [ 297.246531][T12750] batadv_slave_0: entered promiscuous mode [ 297.270365][T12749] batadv_slave_0: left promiscuous mode [ 297.913482][T12791] netlink: 'syz.0.1692': attribute type 5 has an invalid length. [ 298.505388][T12832] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.512051][T12832] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 298.770222][T12839] netlink: 'syz.2.1701': attribute type 13 has an invalid length. [ 299.088089][T12858] sch_fq: defrate 6 ignored. [ 299.224516][T12868] __nla_validate_parse: 7 callbacks suppressed [ 299.224551][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'. [ 299.261705][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'. [ 299.313025][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'. [ 299.321976][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'. [ 299.383447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.426065][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'. [ 299.435036][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'. [ 299.633534][T12881] netlink: 'syz.1.1708': attribute type 4 has an invalid length. [ 299.716085][T12887] netlink: 'syz.1.1708': attribute type 4 has an invalid length. [ 299.907128][T12891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1711'. [ 300.228284][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1719'. [ 300.237451][T12915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1719'. [ 300.246615][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1719'. [ 300.488232][ T996] IPVS: starting estimator thread 0... [ 300.563855][T12935] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 300.585984][T12936] xt_hashlimit: size too large, truncated to 1048576 [ 300.620031][T12935] bond8: entered promiscuous mode [ 300.626615][T12935] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.738156][T12940] fb: port 1(bridge_slave_0) entered disabled state [ 300.838579][T12930] IPVS: using max 37 ests per chain, 88800 per kthread [ 300.925364][T12940] bridge_slave_0 (unregistering): left allmulticast mode [ 300.932433][T12940] bridge_slave_0 (unregistering): left promiscuous mode [ 300.939568][T12940] fb: port 1(bridge_slave_0) entered disabled state [ 301.060946][T12924] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 301.867105][T12978] netlink: 'syz.1.1735': attribute type 3 has an invalid length. [ 302.007633][T12981] netlink: 'syz.3.1736': attribute type 29 has an invalid length. [ 302.250995][T12990] openvswitch: netlink: Unknown key attributes 20 [ 302.578056][T13002] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 302.663497][T13005] x_tables: duplicate underflow at hook 3 [ 303.185594][T13029] netlink: 'syz.1.1751': attribute type 10 has an invalid length. [ 303.430432][T13044] batman_adv: batadv0: Adding interface: gretap4 [ 303.436790][T13044] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.462064][T13044] batman_adv: batadv0: Interface activated: gretap4 [ 303.664349][T13055] tipc: Enabled bearer , priority 0 [ 303.697224][T13059] tipc: Disabling bearer [ 303.937732][T13070] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 304.375720][T13088] __nla_validate_parse: 15 callbacks suppressed [ 304.375741][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 304.409630][T13088] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 304.420936][T13088] bond9 (unregistering): Released all slaves [ 304.503918][T13092] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1765'. [ 304.542995][T13092] syzkaller1: entered promiscuous mode [ 304.553982][T13092] syzkaller1: entered allmulticast mode [ 304.968756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.167915][T13121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.571137][T13124] tipc: New replicast peer: 255.255.255.255 [ 307.582180][T13124] tipc: Enabled bearer , priority 10 [ 307.910275][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 308.040289][T13168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1783'. [ 308.470090][T13187] sctp: [Deprecated]: syz.4.1791 (pid 13187) Use of int in max_burst socket option deprecated. [ 308.470090][T13187] Use struct sctp_assoc_value instead [ 308.918364][T13203] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1795'. [ 309.161638][T13216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1799'. [ 309.504150][ T5635] block nbd5: Receive control failed (result -32) [ 309.504308][ T50] block nbd5: Receive control failed (result -32) [ 309.730364][T13233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.742477][T13234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.897777][T13245] gre2: entered promiscuous mode [ 309.939442][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 309.968309][T13247] macsec3: entered promiscuous mode [ 309.990242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.049595][T13251] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 310.059505][T13251] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 310.067626][T13251] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1811'. [ 310.094272][T13251] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 310.233310][T13251] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 310.372696][T13266] syzkaller0: entered promiscuous mode [ 310.378202][T13266] syzkaller0: entered allmulticast mode [ 311.229586][T13298] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1823'. [ 311.311596][T13307] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1826'. [ 311.932917][T13317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.972925][T13328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.986112][T13331] netlink: 'syz.4.1831': attribute type 1 has an invalid length. [ 311.990479][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 312.085676][T13326] bridge0: port 3(vlan3) entered blocking state [ 312.094243][T13326] bridge0: port 3(vlan3) entered disabled state [ 312.100669][T13326] vlan3: entered allmulticast mode [ 312.106655][T13326] bridge0: entered allmulticast mode [ 312.115084][T13326] vlan3: left allmulticast mode [ 312.119962][T13326] bridge0: left allmulticast mode [ 312.199246][T13339] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1834'. [ 312.221856][T13331] bond4 (unregistering): Released all slaves [ 312.263184][T13340] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1831'. [ 312.282673][T13339] netlink: 30 bytes leftover after parsing attributes in process `syz.0.1834'. [ 312.293333][T13339] netlink: 'syz.0.1834': attribute type 29 has an invalid length. [ 312.781734][T13356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1839'. [ 312.813112][T13368] syzkaller0: entered promiscuous mode [ 312.818609][T13368] syzkaller0: entered allmulticast mode [ 312.825284][T13370] syzkaller0: entered promiscuous mode [ 312.846206][T13370] syzkaller0: entered allmulticast mode [ 312.927177][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 312.943846][T13380] netlink: 'syz.0.1846': attribute type 1 has an invalid length. [ 313.090656][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.102725][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.114338][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.169649][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.286417][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.307505][T13396] xfrm0 speed is unknown, defaulting to 1000 [ 313.830510][T13411] openvswitch: netlink: Duplicate or invalid key (type 0). [ 313.837779][T13411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.847005][T13411] netlink: 'syz.1.1854': attribute type 6 has an invalid length. [ 314.920620][T13465] openvswitch: netlink: Actions may not be safe on all matching packets [ 315.200474][T13475] __nla_validate_parse: 42 callbacks suppressed [ 315.200496][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 315.748324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.030554][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.093259][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 318.131410][T13491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1870'. [ 318.166354][T13491] netlink: 30 bytes leftover after parsing attributes in process `syz.1.1870'. [ 318.184292][T13491] netlink: 'syz.1.1870': attribute type 29 has an invalid length. [ 318.301650][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1875'. [ 318.401360][T13505] netlink: 'syz.1.1876': attribute type 1 has an invalid length. [ 318.436634][T13505] 8021q: adding VLAN 0 to HW filter on device bond9 [ 318.710151][T13523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1881'. [ 318.857380][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 319.090859][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1885'. [ 319.200491][T13554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1891'. [ 319.211468][T13555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1891'. [ 319.777891][T13575] bond16: option ad_user_port_key: invalid value (65535) [ 319.784953][T13575] bond16: option ad_user_port_key: allowed values 0 - 1023 [ 319.891844][T13563] netlink: 'syz.4.1894': attribute type 4 has an invalid length. [ 319.903326][T13575] bond16 (unregistering): Released all slaves [ 320.497045][T13588] gre0: entered promiscuous mode [ 321.178141][T13633] netlink: 'syz.1.1911': attribute type 9 has an invalid length. [ 321.189254][T13634] __nla_validate_parse: 4 callbacks suppressed [ 321.189272][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 321.409973][T13639] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 321.647322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.187721][T13677] batadv_slave_1: entered promiscuous mode [ 322.377364][T13684] netlink: 'syz.1.1928': attribute type 58 has an invalid length. [ 322.415246][T13684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1928'. [ 322.446274][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'. [ 322.516855][T13675] batadv_slave_1: entered promiscuous mode [ 322.703254][T13702] netlink: 'syz.0.1934': attribute type 2 has an invalid length. [ 322.711091][T13702] netlink: 'syz.0.1934': attribute type 2 has an invalid length. [ 323.011016][T13675] batadv_slave_1: left promiscuous mode [ 323.137953][T13708] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1936'. [ 323.246792][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 323.561687][T13722] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 324.000720][T13748] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1942'. [ 324.155273][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.164072][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.173600][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.182707][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.203520][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 325.079423][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.087283][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.248039][T13773] netlink: 'syz.2.1951': attribute type 7 has an invalid length. [ 325.258604][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.266444][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.384488][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 325.410802][T13777] macvtap1: entered promiscuous mode [ 325.416132][T13777] erspan0: entered promiscuous mode [ 325.442349][T13777] macvtap1: entered allmulticast mode [ 325.447782][T13777] erspan0: entered allmulticast mode [ 325.693671][T13777] syzkaller0: entered promiscuous mode [ 325.699177][T13777] syzkaller0: entered allmulticast mode [ 325.819292][T13793] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 325.819292][T13793] Please contact the netfilter-devel mailing list or update your nftables rules. [ 326.292485][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 326.515513][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 326.601031][T13822] bond16: (slave bridge4): Enslaving as an active interface with an up link [ 326.618076][T13822] macvlan2: entered promiscuous mode [ 326.623401][T13822] macvlan2: entered allmulticast mode [ 326.629180][T13822] bond16: (slave macvlan2): Error -98 calling set_mac_address [ 326.876797][ T170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.901111][ T170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.951194][ T170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.960024][ T170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 327.038485][T13842] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 327.046272][T13842] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 327.062703][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'. [ 327.071578][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'. [ 327.427180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.436945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.931125][T13870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1982'. [ 328.182252][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 328.421880][T13885] xfrm0 speed is unknown, defaulting to 1000 [ 328.516270][T13889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.696413][T13884] bond10: entered allmulticast mode [ 328.807610][T13894] macsec2: entered promiscuous mode [ 328.913377][T13904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1993'. [ 328.929639][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'. [ 328.960336][T13904] netlink: 'syz.2.1993': attribute type 4 has an invalid length. [ 329.329164][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 329.338263][T13914] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 329.442435][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 329.666060][T13931] team_slave_0: left promiscuous mode [ 329.672220][T13931] team_slave_1: left promiscuous mode [ 329.859333][T13931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.892695][T13931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.900157][T13931] batadv_slave_1: left promiscuous mode [ 329.996262][T13931] gretap2: left allmulticast mode [ 330.008821][T13914] xfrm0 speed is unknown, defaulting to 1000 [ 330.062894][ T35] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.071789][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 330.080759][ T35] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.104651][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 330.113671][ T35] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.122537][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 330.162738][ T35] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.188769][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 330.609986][T13968] netlink: 'syz.3.2009': attribute type 11 has an invalid length. [ 330.612860][T13947] xfrm0 speed is unknown, defaulting to 1000 [ 330.665507][T13971] netlink: 'syz.3.2010': attribute type 13 has an invalid length. [ 330.673359][T13971] netlink: 'syz.3.2010': attribute type 17 has an invalid length. [ 330.895526][T13971] gre0: left promiscuous mode [ 331.016629][T13971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.025699][T13971] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.066609][T13971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.099315][T13971] veth1_vlan: left promiscuous mode [ 331.106421][T13971] vlan0: left promiscuous mode [ 331.120211][T13971] veth1_vlan: entered promiscuous mode [ 331.131704][T13971] veth1_macvtap: left promiscuous mode [ 331.142231][T13971] veth0_macvtap: left promiscuous mode [ 331.163956][T13971] veth0_macvtap: entered promiscuous mode [ 331.181262][T13971] veth1_macvtap: entered promiscuous mode [ 331.190688][T13971] geneve1: left promiscuous mode [ 331.202119][T13971] ip6gre1: left promiscuous mode [ 331.207083][T13971] ip6gre1: left allmulticast mode [ 331.213660][T13971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.221812][T13971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.230433][T13971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.239127][T13971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 331.247107][T13971] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 331.254781][T13971] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.274283][T13971] 8021q: adding VLAN 0 to HW filter on device eth0 [ 331.288821][T13971] 8021q: adding VLAN 0 to HW filter on device eth1 [ 331.302399][T13971] 8021q: adding VLAN 0 to HW filter on device eth2 [ 331.315796][T13971] 8021q: adding VLAN 0 to HW filter on device eth3 [ 331.329846][T13971] 8021q: adding VLAN 0 to HW filter on device bond6 [ 331.337671][T13971] vlan2: left allmulticast mode [ 331.342546][T13971] bond6: left allmulticast mode [ 331.348986][T13971] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.383602][T13971] bond8: left promiscuous mode [ 331.388410][T13971] bridge2: left promiscuous mode [ 331.393904][T13971] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.404910][T13971] 8021q: adding VLAN 0 to HW filter on device bond9 [ 331.413176][T13971] 8021q: adding VLAN 0 to HW filter on device bond10 [ 331.422108][T13971] 8021q: adding VLAN 0 to HW filter on device bond11 [ 331.432473][T13971] 8021q: adding VLAN 0 to HW filter on device bond12 [ 331.484363][T13971] 8021q: adding VLAN 0 to HW filter on device bond13 [ 331.494929][T13971] xfrm1: left allmulticast mode [ 331.501912][T13971] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 331.509083][T13971] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 331.520144][T13971] bond14: left promiscuous mode [ 331.525031][T13971] bridge3: left promiscuous mode [ 331.531235][T13971] 8021q: adding VLAN 0 to HW filter on device bond14 [ 331.539251][T13971] bond14: entered allmulticast mode [ 331.544464][T13971] bridge3: entered allmulticast mode [ 331.550081][T13971] macvtap1: left allmulticast mode [ 331.555203][T13971] bond14: left allmulticast mode [ 331.560145][T13971] bridge3: left allmulticast mode [ 331.566394][T13971] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 331.592524][T13971] bond14: entered allmulticast mode [ 331.597768][T13971] bridge3: entered allmulticast mode [ 331.603333][T13971] macvtap2: left allmulticast mode [ 331.608464][T13971] bond14: left allmulticast mode [ 331.613404][T13971] bridge3: left allmulticast mode [ 331.619601][T13971] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 331.634829][T13971] bridge3: entered promiscuous mode [ 331.640159][T13971] bond15: left promiscuous mode [ 331.645348][T13971] 8021q: adding VLAN 0 to HW filter on device bond15 [ 331.656850][T13971] gretap1: left allmulticast mode [ 331.672199][T13971] gre2: left promiscuous mode [ 331.680343][T13971] 8021q: adding VLAN 0 to HW filter on device bond16 [ 331.704348][T13971] macsec2: left promiscuous mode [ 331.729500][ T188] bridge0: entered promiscuous mode [ 331.792710][ T9224] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 331.799952][ T9224] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 331.844155][ T43] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.853032][ T43] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.976695][ T43] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.013173][ T43] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.130769][T13989] __nla_validate_parse: 1 callbacks suppressed [ 332.130788][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 332.165199][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 332.746047][T14000] netlink: 'syz.3.2019': attribute type 1 has an invalid length. [ 332.771345][T14000] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2019'. [ 332.968284][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2021'. [ 333.051770][T14013] syzkaller0: entered promiscuous mode [ 333.057277][T14013] syzkaller0: entered allmulticast mode [ 333.203196][T14015] xt_recent: Unsupported userspace flags (000000c5) [ 333.314278][T14017] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 333.333174][T14017] bond17: (slave lo): Enslaving as an active interface with an up link [ 333.346853][T14017] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 333.455895][T14023] xfrm0 speed is unknown, defaulting to 1000 [ 333.553828][T14032] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2027'. [ 334.356705][T14050] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 334.419774][T14057] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 334.441204][T14057] bond7 (unregistering): Released all slaves [ 334.808008][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2036'. [ 335.299966][T14076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.052871][T14097] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 336.066120][T14097] netlink: 'syz.2.2049': attribute type 3 has an invalid length. [ 336.240625][T14101] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2052'. [ 336.250006][T14101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2052'. [ 336.281470][T14101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2052'. [ 336.413667][T14110] bond7 (unregistering): Released all slaves [ 336.572675][T14119] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2055'. [ 336.581666][T14119] netlink: 'syz.1.2055': attribute type 2 has an invalid length. [ 336.589396][T14119] netlink: 'syz.1.2055': attribute type 1 has an invalid length. [ 336.628708][T14119] ÿ: renamed from bond_slave_0 [ 336.910562][T14135] netlink: 'syz.1.2061': attribute type 2 has an invalid length. [ 337.081336][T14147] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 337.285676][T14153] __nla_validate_parse: 3 callbacks suppressed [ 337.285695][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'. [ 337.300830][T14153] openvswitch: netlink: EtherType 0 is less than min 600 [ 337.424255][T14162] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2070'. [ 337.542032][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2073'. [ 337.550938][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 337.591597][T14168] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 337.592720][T14162] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 337.601309][T14168] syzkaller0: entered promiscuous mode [ 337.601329][T14168] syzkaller0: entered allmulticast mode [ 337.738950][T14171] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 337.746376][T14171] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 337.880450][T14177] netlink: 'syz.2.2077': attribute type 1 has an invalid length. [ 337.888222][T14177] netlink: 'syz.2.2077': attribute type 2 has an invalid length. [ 338.632291][T14202] IPVS: Unknown mcast interface: pim6reg [ 338.642047][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2082'. [ 341.322682][T14232] x_tables: duplicate underflow at hook 2 [ 341.644521][T14247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2095'. [ 341.832817][T14252] netlink: 'syz.2.2093': attribute type 21 has an invalid length. [ 341.840912][T14252] netlink: 'syz.2.2093': attribute type 22 has an invalid length. [ 341.848737][T14252] netlink: 'syz.2.2093': attribute type 23 has an invalid length. [ 341.856548][T14252] netlink: 'syz.2.2093': attribute type 25 has an invalid length. [ 341.864369][T14252] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2093'. [ 342.155144][T14266] xfrm0 speed is unknown, defaulting to 1000 [ 342.177492][T14252] xt_CT: No such helper "snmp_trap" [ 342.437960][T14267] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20003 [ 342.588013][T14280] netlink: 'syz.0.2104': attribute type 2 has an invalid length. [ 342.595878][T14280] netlink: 'syz.0.2104': attribute type 1 has an invalid length. [ 342.603608][T14280] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2104'. [ 342.745661][T14287] netlink: 'syz.0.2104': attribute type 2 has an invalid length. [ 342.753449][T14287] netlink: 'syz.0.2104': attribute type 1 has an invalid length. [ 342.761171][T14287] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2104'. [ 343.204463][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2107'. [ 343.321878][T14301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2108'. [ 343.538526][T14306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2107'. [ 343.610106][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2111'. [ 343.733178][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 343.803705][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'. [ 346.690993][T14315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.958328][T14362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2119'. [ 346.990040][T14362] netlink: 'syz.0.2119': attribute type 10 has an invalid length. [ 347.049946][T14366] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2121'. [ 347.071498][T14358] netlink: 'syz.0.2119': attribute type 1 has an invalid length. [ 347.079234][T14358] netlink: 'syz.0.2119': attribute type 2 has an invalid length. [ 347.155384][T14366] bond0 (unregistering): (slave 07ÿ): Releasing backup interface [ 347.165614][T14366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.187044][T14366] bond0 (unregistering): Released all slaves [ 347.264881][T14368] ip6gre3: entered promiscuous mode [ 347.270226][T14368] ip6gre3: entered allmulticast mode [ 347.270728][T14373] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 347.360364][T14373] 8021q: adding VLAN 0 to HW filter on device bond18 [ 347.376241][ T170] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 347.383971][ T170] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 347.428420][T14378] batman_adv: batadv0: Adding interface: vlan2 [ 347.457577][T14378] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.482707][T14378] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 347.513601][ T5818] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 347.534988][T14373] vlan3: entered promiscuous mode [ 347.554433][T14373] veth0_to_team: entered promiscuous mode [ 347.574691][T14373] vlan3: entered allmulticast mode [ 347.579854][T14373] veth0_to_team: entered allmulticast mode [ 347.647335][T14384] xfrm0 speed is unknown, defaulting to 1000 [ 347.723037][T14399] __nla_validate_parse: 1 callbacks suppressed [ 347.723054][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 347.852704][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 348.088582][T14424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2136'. [ 348.192359][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 348.493721][T14433] netlink: 'syz.1.2138': attribute type 1 has an invalid length. [ 348.533617][T14433] netlink: 'syz.1.2138': attribute type 2 has an invalid length. [ 348.848078][T14443] netlink: 'syz.3.2140': attribute type 4 has an invalid length. [ 349.051584][T14443] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 349.066908][T14443] 8021q: adding VLAN 0 to HW filter on device bond17 [ 349.074801][T14443] vlan3: left promiscuous mode [ 349.099690][T14443] veth0_to_team: left promiscuous mode [ 349.376136][T14463] netlink: 'syz.2.2147': attribute type 27 has an invalid length. [ 349.512196][T14468] lo speed is unknown, defaulting to 1000 [ 349.517782][T14474] netlink: 'syz.3.2152': attribute type 2 has an invalid length. [ 349.518838][T14468] lo speed is unknown, defaulting to 1000 [ 349.525667][T14474] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2152'. [ 349.588752][T14475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.606490][T14468] lo speed is unknown, defaulting to 1000 [ 349.772017][T14478] openvswitch: netlink: Missing key (keys=40, expected=100) [ 349.782092][T14480] openvswitch: netlink: Missing key (keys=40, expected=100) [ 349.789608][T14482] netlink: 'syz.1.2154': attribute type 3 has an invalid length. [ 349.824204][T14480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2155'. [ 349.853011][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2153'. [ 349.933160][T14485] geneve2: entered promiscuous mode [ 350.030481][T14496] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2157'. [ 350.122000][T14491] tipc: Enabled bearer , priority 0 [ 350.171946][T14491] tipc: Disabling bearer [ 350.183334][T14468] infiniband syz1: set down [ 350.191527][T14468] infiniband syz1: added lo [ 350.222706][ T996] lo speed is unknown, defaulting to 1000 [ 350.239297][T14468] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 350.254348][T14468] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 350.271464][T14468] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 350.300226][T14468] RDS/IB: syz1: added [ 350.304286][T14468] smc: adding ib device syz1 with port count 1 [ 350.310452][T14468] smc: ib device syz1 port 1 has no pnetid [ 350.316597][ T7995] lo speed is unknown, defaulting to 1000 [ 350.343211][T14468] lo speed is unknown, defaulting to 1000 [ 350.738789][T14518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 350.744087][T14468] lo speed is unknown, defaulting to 1000 [ 350.816965][T14518] bridge5: port 1(vlan3) entered blocking state [ 350.823422][T14518] bridge5: port 1(vlan3) entered disabled state [ 350.829810][T14518] vlan3: entered allmulticast mode [ 350.839217][T14518] bridge5: entered allmulticast mode [ 350.852777][T14518] vlan3: left allmulticast mode [ 350.857686][T14518] bridge5: left allmulticast mode [ 350.921649][T14534] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 351.059509][T14468] lo speed is unknown, defaulting to 1000 [ 351.207460][T14468] lo speed is unknown, defaulting to 1000 [ 351.341018][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 351.351390][T14552] xfrm0 speed is unknown, defaulting to 1000 [ 351.447260][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 351.641031][T14552] lo speed is unknown, defaulting to 1000 [ 351.927668][T14468] lo speed is unknown, defaulting to 1000 [ 352.448828][T14561] gretap0: entered promiscuous mode [ 352.641318][T14551] gretap0: left promiscuous mode [ 352.836821][T14589] syzkaller0: entered promiscuous mode [ 352.842327][T14589] syzkaller0: entered allmulticast mode [ 352.968968][T14585] smc: removing ib device syz1 [ 352.997868][T14585] smbdirect: ib_dev[syz1] removed [ 353.837790][T14532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.029316][T14604] syzkaller0: entered promiscuous mode [ 354.035240][T14604] syzkaller0: entered allmulticast mode [ 354.217348][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2183'. [ 354.406315][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 354.862724][T14620] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2186'. [ 355.028902][T14617] ±ÿþ€: renamed from team_slave_1 [ 355.518903][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2193'. [ 355.936651][T14653] lo speed is unknown, defaulting to 1000 [ 355.942776][T14653] lo speed is unknown, defaulting to 1000 [ 355.949617][T14653] lo speed is unknown, defaulting to 1000 [ 355.992257][T14653] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 356.007435][T14653] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 356.024469][T14653] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 356.037530][T14653] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 356.056063][T14653] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 356.088584][T14653] lo speed is unknown, defaulting to 1000 [ 356.101117][T14653] lo speed is unknown, defaulting to 1000 [ 356.109532][T14653] lo speed is unknown, defaulting to 1000 [ 356.117125][T14653] lo speed is unknown, defaulting to 1000 [ 356.124607][T14653] lo speed is unknown, defaulting to 1000 [ 356.210543][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2200'. [ 356.835068][T14696] nftables ruleset with unbound set [ 356.940981][T14696] netlink: 'syz.3.2209': attribute type 11 has an invalid length. [ 356.954474][T14690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2208'. [ 357.247559][T14707] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2212'. [ 357.268947][T14705] validate_nla: 4 callbacks suppressed [ 357.268964][T14705] netlink: 'syz.2.2213': attribute type 10 has an invalid length. [ 357.388462][T14719] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 357.418133][T14719] bond7: entered promiscuous mode [ 357.426271][T14719] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.451314][T14719] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.472363][T14719] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 357.482488][T14719] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 357.496933][T14719] bond7: (slave gre1): making interface the new active one [ 357.504167][T14719] gre1: entered promiscuous mode [ 357.510566][T14719] bond7: (slave gre1): Enslaving as an active interface with an up link [ 359.288752][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 373.063154][T14748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2226'. [ 373.413028][T14766] IPVS: Scheduler module ip_vs_sip not found [ 373.629605][T14776] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 373.637607][T14776] syzkaller0: entered promiscuous mode [ 373.643085][T14776] syzkaller0: entered allmulticast mode [ 373.729242][T14776] tipc: Enabled bearer , priority 0 [ 373.737159][T14776] netlink: 'syz.0.2232': attribute type 2 has an invalid length. [ 373.752969][T14776] : entered promiscuous mode [ 373.775466][T14775] tipc: Resetting bearer [ 373.799017][T14783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.801935][T14775] tipc: Disabling bearer [ 373.888790][T14789] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 374.030874][T14797] netlink: 'syz.3.2239': attribute type 1 has an invalid length. [ 374.062377][T14797] bond19: entered promiscuous mode [ 374.067800][T14797] 8021q: adding VLAN 0 to HW filter on device bond19 [ 374.103787][T14797] bond19: (slave bridge6): making interface the new active one [ 374.111367][T14797] bridge6: entered promiscuous mode [ 374.117570][T14797] bond19: (slave bridge6): Enslaving as an active interface with an up link [ 374.514729][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2243'. [ 374.539320][T14818] syzkaller0: entered promiscuous mode [ 374.544818][T14818] syzkaller0: entered allmulticast mode [ 374.720557][ T29] audit: type=1800 audit(1783863936.263:6): pid=14834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2249" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2557 res=0 errno=0 [ 374.879575][T14837] tipc: Enabled bearer , priority 0 [ 374.887357][T14837] syzkaller0: entered promiscuous mode [ 374.892847][T14837] syzkaller0: entered allmulticast mode [ 374.926889][T14837] tipc: Resetting bearer [ 374.969077][T14845] ip6t_rpfilter: unknown options [ 375.127294][T14836] tipc: Resetting bearer [ 375.153309][T14836] tipc: Disabling bearer [ 375.194359][T14849] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2253'. [ 375.303482][T14851] Unsupported ieee802154 address type: 0 [ 375.342683][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 375.600172][T14856] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.006943][T14864] xfrm0 speed is unknown, defaulting to 1000 [ 376.717363][T14864] lo speed is unknown, defaulting to 1000 [ 376.767127][T14889] bond20: option ad_select: invalid value (34) [ 376.774408][T14889] bond20 (unregistering): Released all slaves [ 377.178319][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 377.200117][T14897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.963556][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2270'. [ 378.207137][T14922] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 378.222781][T14922] syzkaller0: entered promiscuous mode [ 378.284060][T14922] syzkaller0: entered allmulticast mode [ 378.301342][T14922] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 378.577732][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.742974][T14945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2279'. [ 378.755013][T14945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2279'. [ 378.810866][T14948] netlink: 'syz.2.2278': attribute type 14 has an invalid length. [ 378.952774][T14956] bond4: invalid ARP target 0.0.0.0 specified for addition [ 378.960020][T14956] bond4: option arp_ip_target: invalid value (0) [ 378.968005][T14956] bond4 (unregistering): Released all slaves [ 379.174043][T14969] openvswitch: netlink: IP tunnel dst address not specified [ 379.181348][T14969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.576705][T14987] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2289'. [ 379.585915][T14987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2289'. [ 379.628711][T14989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2290'. [ 379.776761][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 379.819808][T14991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.828780][T14991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.836734][T14991] batman_adv: batadv0: Removing interface: gretap1 [ 380.068374][T14996] syzkaller0: entered promiscuous mode [ 380.073878][T14996] syzkaller0: entered allmulticast mode [ 380.165499][T14997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2293'. [ 380.574824][T15011] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 380.694468][T15023] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2296'. [ 380.766889][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2296'. [ 382.765568][T15018] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2297'. [ 382.869664][T15033] netlink: 'syz.1.2299': attribute type 32 has an invalid length. [ 382.924478][T15033] bond0: Setting coupled_control to off (0) [ 383.006239][T15044] sctp: [Deprecated]: syz.4.2304 (pid 15044) Use of int in max_burst socket option deprecated. [ 383.006239][T15044] Use struct sctp_assoc_value instead [ 383.056729][T15045] xt_hashlimit: size too large, truncated to 1048576 [ 383.541632][T15067] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 383.667943][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 383.753687][T15074] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 384.139066][T15094] syzkaller0: entered promiscuous mode [ 384.144553][T15094] syzkaller0: entered allmulticast mode [ 384.287934][T15099] Cannot find del_set index 4 as target [ 384.427624][T15105] netlink: 'syz.1.2322': attribute type 1 has an invalid length. [ 384.559408][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 384.571426][T15105] xt_hashlimit: size too large, truncated to 1048576 [ 385.739104][T15144] netlink: 'syz.3.2333': attribute type 1 has an invalid length. [ 386.014288][ T204] nci: nci_rx_work: unknown MT 0x1 [ 387.631580][T15144] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 387.929970][T15168] xt_hashlimit: size too large, truncated to 1048576 [ 387.997230][T15171] xt_hashlimit: size too large, truncated to 1048576 [ 388.004169][T15171] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 388.060345][T15171] __nla_validate_parse: 9 callbacks suppressed [ 388.060363][T15171] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2339'. [ 388.223508][T15178] netlink: 'syz.2.2340': attribute type 1 has an invalid length. [ 388.866596][T15183] syzkaller0: entered promiscuous mode [ 388.873351][T15183] syzkaller0: entered allmulticast mode [ 388.880670][T15146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.072029][T15186] sctp: [Deprecated]: syz.1.2345 (pid 15186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.072029][T15186] Use struct sctp_sack_info instead [ 389.097557][T15183] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 389.110001][T15183] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 389.118463][T15183] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 389.348676][T15206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2349'. [ 389.412588][T15212] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2350'. [ 389.626621][T15223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2352'. [ 389.639717][T15223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2352'. [ 390.322845][T15239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2355'. [ 390.633464][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2355'. [ 392.027731][T15240] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 393.272268][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 393.330402][T15292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.412487][T15300] syzkaller0: entered promiscuous mode [ 393.491118][T15300] syzkaller0: entered allmulticast mode [ 393.499950][T15300] 0: reclassify loop, rule prio 0, protocol 800 [ 393.894596][T15308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.932558][T15306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.116947][T15337] openvswitch: netlink: Flow actions attr not present in new flow. [ 394.167237][T15339] xt_hashlimit: size too large, truncated to 1048576 [ 394.434399][T15349] netlink: 'syz.2.2377': attribute type 11 has an invalid length. [ 394.442260][T15349] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2377'. [ 394.543466][T15350] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2378'. [ 394.589300][T15349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2377'. [ 394.599956][T15333] netlink: 'syz.4.2374': attribute type 75 has an invalid length. [ 394.657247][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2378'. [ 394.890454][T15359] syzkaller0: entered promiscuous mode [ 394.897079][T15359] syzkaller0: entered allmulticast mode [ 394.940182][T15361] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2381'. [ 394.971198][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 394.980085][T15361] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2381'. [ 395.211687][T15365] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 395.289152][T15371] netlink: 'syz.0.2385': attribute type 4 has an invalid length. [ 395.315807][T15371] netlink: 'syz.0.2385': attribute type 4 has an invalid length. [ 395.328740][T15371] : renamed from bridge_slave_0 [ 395.486101][T15382] Cannot find set identified by id 65534 to match [ 395.503184][T15385] netlink: 'syz.3.2390': attribute type 11 has an invalid length. [ 395.596392][T15388] bond20: Unable to set up delay as MII monitoring is disabled [ 395.605644][T15388] bond20 (unregistering): Released all slaves [ 395.719893][T15378] syzkaller1: entered promiscuous mode [ 395.725393][T15378] syzkaller1: entered allmulticast mode [ 395.768637][T15394] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2392'. [ 396.285806][T15410] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2395'. [ 396.449264][T15414] xt_hashlimit: size too large, truncated to 1048576 [ 397.138132][T15456] bridge6: port 1(vlan4) entered blocking state [ 397.144615][T15456] bridge6: port 1(vlan4) entered disabled state [ 397.151007][T15456] vlan4: entered allmulticast mode [ 397.157245][T15456] bridge6: entered allmulticast mode [ 397.165921][T15456] vlan4: left allmulticast mode [ 397.224176][T15456] bridge6: left allmulticast mode [ 397.261289][T15466] syzkaller1: entered promiscuous mode [ 397.266796][T15466] syzkaller1: entered allmulticast mode [ 397.421600][T15477] xt_TCPMSS: Only works on TCP SYN packets [ 397.997105][T15493] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 398.068705][T15480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.094047][T15480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.105702][T15480] xfrm0: left allmulticast mode [ 398.236845][T15480] bond1: left promiscuous mode [ 398.241656][T15480] bond1: left allmulticast mode [ 398.247097][T15480] bridge0: left allmulticast mode [ 398.253071][T15480] bridge4: left allmulticast mode [ 398.348364][T15493] dummy0: entered promiscuous mode [ 398.600920][T15513] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 398.872529][T15516] __nla_validate_parse: 9 callbacks suppressed [ 398.872547][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2426'. [ 399.126809][T15525] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 399.145712][T15525] bond2 (unregistering): Released all slaves [ 399.358561][T15531] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2428'. [ 399.363546][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2430'. [ 399.367887][T15531] openvswitch: netlink: Message has 512 unknown bytes. [ 399.506587][T15540] veth0: entered promiscuous mode [ 399.512596][T15531] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2428'. [ 399.640505][T15539] veth0: left promiscuous mode [ 399.780935][T15553] syzkaller0: entered promiscuous mode [ 399.787183][T15553] syzkaller0: entered allmulticast mode [ 399.817684][ T9224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.825526][ T9224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.841567][T15562] xt_hashlimit: size too large, truncated to 1048576 [ 399.862407][T15562] xt_hashlimit: max too large, truncated to 1048576 [ 399.927171][T15554] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2435'. [ 399.955969][T15561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2432'. [ 399.956382][T15554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2435'. [ 399.974607][T15554] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2435'. [ 400.516966][T15586] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2444'. [ 400.573207][T15586] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2444'. [ 400.596092][T15589] netlink: 'syz.2.2445': attribute type 21 has an invalid length. [ 400.607662][T15589] netlink: 'syz.2.2445': attribute type 21 has an invalid length. [ 400.724059][T15597] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 400.802650][T15597] bond0: entered promiscuous mode [ 400.807724][T15597] geneve1: entered promiscuous mode [ 400.820991][T15597] gretap0: entered promiscuous mode [ 400.854970][T15597] hsr0: entered promiscuous mode [ 400.882415][T15602] netlink: 'syz.4.2449': attribute type 13 has an invalid length. [ 401.484320][T15630] xt_TCPMSS: Only works on TCP SYN packets [ 401.624470][T15637] lo: entered allmulticast mode [ 401.629533][T15637] tunl0: entered allmulticast mode [ 401.673561][T15637] gre0: entered allmulticast mode [ 401.678751][T15637] gretap0: entered allmulticast mode [ 401.684255][T15637] ip_vti0: entered allmulticast mode [ 401.689719][T15637] ip6_vti0: entered allmulticast mode [ 401.695201][T15637] sit0: entered allmulticast mode [ 401.700415][T15637] ip6tnl0: entered allmulticast mode [ 401.705834][T15637] ip6gre0: entered allmulticast mode [ 401.711444][T15637] bridge0: entered allmulticast mode [ 401.716877][T15637] vcan0: entered allmulticast mode [ 401.722142][T15637] team0: entered allmulticast mode [ 401.727353][T15637] team_slave_1: entered allmulticast mode [ 401.733698][T15637] dummy0: entered allmulticast mode [ 401.739060][T15637] nlmon0: entered allmulticast mode [ 401.744418][T15637] batadv0: entered allmulticast mode [ 401.765488][T15637] vxcan0: entered allmulticast mode [ 401.771515][T15637] vxcan1: entered allmulticast mode [ 401.776836][T15637] veth0: entered allmulticast mode [ 401.782002][T15637] veth1: entered allmulticast mode [ 401.787768][T15637] wg0: entered allmulticast mode [ 401.792764][T15637] wg1: entered allmulticast mode [ 401.797783][T15637] wg2: entered allmulticast mode [ 401.802777][T15637] veth0_to_bridge: entered allmulticast mode [ 401.808892][T15637] veth1_to_bridge: entered allmulticast mode [ 401.815013][T15637] veth0_to_bond: entered allmulticast mode [ 401.820882][T15637] ÿ: entered allmulticast mode [ 401.825782][T15637] veth1_to_bond: entered allmulticast mode [ 401.831660][T15637] bond_slave_1: entered allmulticast mode [ 401.837428][T15637] veth1_to_team: entered allmulticast mode [ 401.843368][T15637] veth1_to_batadv: entered allmulticast mode [ 401.849420][T15637] batadv_slave_1: entered allmulticast mode [ 401.855385][T15637] xfrm0: entered allmulticast mode [ 401.860550][T15637] veth0_to_hsr: entered allmulticast mode [ 401.883092][T15637] hsr_slave_0: entered allmulticast mode [ 401.888930][T15637] veth1_to_hsr: left promiscuous mode [ 401.894310][T15637] veth1_to_hsr: entered allmulticast mode [ 401.900162][T15637] hsr_slave_1: entered allmulticast mode [ 401.905943][T15637] veth1_vlan: entered allmulticast mode [ 401.911633][T15637] veth0_vlan: entered allmulticast mode [ 401.917320][T15637] vlan0: entered allmulticast mode [ 401.922561][T15637] vlan1: entered allmulticast mode [ 401.927803][T15637] macvlan0: entered allmulticast mode [ 401.933310][T15637] macvlan1: entered allmulticast mode [ 401.938823][T15637] ipvlan0: entered allmulticast mode [ 401.944251][T15637] ipvlan1: entered allmulticast mode [ 401.949671][T15637] veth1_macvtap: entered allmulticast mode [ 401.957107][T15637] veth0_macvtap: entered allmulticast mode [ 401.964141][T15637] macvtap0: entered allmulticast mode [ 401.969682][T15637] macsec0: entered allmulticast mode [ 401.975081][T15637] geneve0: entered allmulticast mode [ 401.980548][T15637] geneve1: entered allmulticast mode [ 402.005404][T15637] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 402.013173][T15637] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 402.020650][T15637] bond1: entered allmulticast mode [ 402.025895][T15637] gretap1: entered allmulticast mode [ 402.031299][T15637] gtp0: entered allmulticast mode [ 402.036473][T15637] batadv1: entered allmulticast mode [ 402.041923][T15637] macsec1: entered allmulticast mode [ 402.047333][T15637] : entered allmulticast mode [ 402.052233][T15637] syztnl0: entered allmulticast mode [ 402.057857][T15637] mac80211_hwsim hwsim16 wlan2: entered allmulticast mode [ 402.065120][T15637] ip6gre1: left promiscuous mode [ 402.070172][T15637] gretap2: entered allmulticast mode [ 402.075579][T15637] bond2: entered allmulticast mode [ 402.080696][T15637] ip6gretap1: entered allmulticast mode [ 402.086729][T15637] vxlan0: entered allmulticast mode [ 402.110821][T15637] macsec2: left promiscuous mode [ 402.137754][T15637] bond4: entered allmulticast mode [ 402.142897][T15637] geneve3: entered allmulticast mode [ 402.148448][T15637] ip6gre2: left promiscuous mode [ 402.153489][T15637] bond5: entered allmulticast mode [ 402.158717][T15637] sit1: entered allmulticast mode [ 402.163852][T15637] ip6tnl1: entered allmulticast mode [ 402.169275][T15637] mac80211_hwsim hwsim20 wlan3: entered allmulticast mode [ 402.176526][T15637] bond7: entered allmulticast mode [ 402.181634][T15637] gretap3: entered allmulticast mode [ 402.187137][T15637] bond_slave_1.0: entered allmulticast mode [ 402.194005][T15637] bridge2: entered allmulticast mode [ 402.199857][T15637] bond8: left promiscuous mode [ 402.220294][T15637] bond8: entered allmulticast mode [ 402.225958][T15637] gretap4: entered allmulticast mode [ 402.231762][T15637] mac80211_hwsim hwsim23 wlan4: entered allmulticast mode [ 402.239067][T15637] macsec3: left promiscuous mode [ 402.244183][T15637] macsec3: entered allmulticast mode [ 402.251637][T15637] mac80211_hwsim hwsim6 nicvf0: entered allmulticast mode [ 402.259369][T15637] bond9: entered allmulticast mode [ 402.264999][T15637] vlan3: entered allmulticast mode [ 402.270254][T15637] mac80211_hwsim hwsim24 wlan5: entered allmulticast mode [ 402.277571][T15637] macvtap1: left promiscuous mode [ 402.282591][T15637] erspan0: left promiscuous mode [ 402.288267][T15637] netdevsim netdevsim1 eth0: entered allmulticast mode [ 402.295267][T15637] netdevsim netdevsim1 eth1: entered allmulticast mode [ 402.302271][T15637] netdevsim netdevsim1 eth2: entered allmulticast mode [ 402.309258][T15637] netdevsim netdevsim1 eth3: entered allmulticast mode [ 402.361680][T15637] vxcan2: entered allmulticast mode [ 402.367071][T15637] vxcan3: entered allmulticast mode [ 402.372409][T15637] ip6gre3: entered allmulticast mode [ 402.378192][T15637] ip6erspan0: entered allmulticast mode [ 402.383857][T15637] bond0: entered allmulticast mode [ 402.389095][T15637] mac80211_hwsim hwsim26 wlan6: entered allmulticast mode [ 402.396369][T15637] ip6tnl2: entered allmulticast mode [ 402.858112][T15676] netlink: 'syz.1.2469': attribute type 25 has an invalid length. [ 402.891021][ T170] wlan1: Trigger new scan to find an IBSS to join [ 402.902192][T15676] bridge3: entered allmulticast mode [ 403.468051][T15712] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 403.749694][T15724] "syz.3.2484" (15724) uses obsolete ecb(arc4) skcipher [ 404.035591][T15739] block nbd6: Unsupported socket: should be TCP or UNIX. [ 404.348402][T15759] __nla_validate_parse: 11 callbacks suppressed [ 404.348420][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2491'. [ 404.418176][T15757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2493'. [ 404.442284][T15743] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2480'. [ 405.062211][T15805] netlink: 'syz.3.2505': attribute type 1 has an invalid length. [ 405.069970][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 405.159727][T15759] block nbd6: server does not support multiple connections per device. [ 405.170497][T15759] block nbd6: shutting down sockets [ 405.687938][T15819] netlink: 'syz.4.2512': attribute type 1 has an invalid length. [ 405.713667][T15821] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 405.714686][T15819] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 405.777882][T15814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2508'. [ 405.998459][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 406.180093][T15841] tipc: Started in network mode [ 406.184995][T15841] tipc: Node identity b62513845748, cluster identity 4711 [ 406.192249][T15841] tipc: Enabled bearer , priority 0 [ 406.199400][T15845] syzkaller0: entered promiscuous mode [ 406.204874][T15845] syzkaller0: entered allmulticast mode [ 406.319474][T15847] netlink: 'syz.3.2516': attribute type 1 has an invalid length. [ 406.353700][T15847] netlink: 'syz.3.2516': attribute type 2 has an invalid length. [ 406.361710][T15850] bridge0: left allmulticast mode [ 406.375463][T15850] bridge0: port 4(vlan4) entered blocking state [ 406.381888][T15850] bridge0: port 4(vlan4) entered disabled state [ 406.388275][T15850] vlan4: entered allmulticast mode [ 406.395898][T15850] vlan4: entered promiscuous mode [ 406.400945][T15850] geneve0: entered promiscuous mode [ 406.408684][T15845] tipc: Resetting bearer [ 406.460994][T15845] tipc: Disabling bearer [ 406.801035][T15870] veth0_virt_wifi: left allmulticast mode [ 406.806815][T15870] veth0_virt_wifi: left promiscuous mode [ 406.812682][T15870] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 407.783094][ T7336] wlan1: Trigger new scan to find an IBSS to join [ 409.674619][T15884] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004 [ 409.699575][T15884] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2524'. [ 409.919307][ T7336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.919375][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 410.073591][T15898] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2529'. [ 410.175937][T15907] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2531'. [ 410.184961][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2531'. [ 410.371132][T15919] netlink: 'syz.2.2535': attribute type 13 has an invalid length. [ 410.439255][T15909] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2532'. [ 410.484108][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 411.044820][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2543'. [ 411.162372][T15970] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20004 [ 411.280139][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2546'. [ 411.503403][T15977] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2547'. [ 411.526835][T15983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2549'. [ 411.539919][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 411.834644][T15994] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 412.065123][T15994] vlan4: left allmulticast mode [ 412.088911][T15994] vlan4: left promiscuous mode [ 412.121278][T15994] geneve0: left promiscuous mode [ 412.202539][T15994] bridge0: port 4(vlan4) entered disabled state [ 412.225815][T15994] syz_tun: left promiscuous mode [ 412.246528][T15994] bridge0: port 3(syz_tun) entered disabled state [ 412.256135][T15994] bridge_slave_1: left promiscuous mode [ 412.261894][T15994] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.271540][T15994] bridge_slave_0: left promiscuous mode [ 412.277332][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.339943][T16002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.364616][T16009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.049405][T16032] batadv0: left allmulticast mode [ 413.110036][T16030] syzkaller0: entered promiscuous mode [ 413.115554][T16030] syzkaller0: entered allmulticast mode [ 413.317152][T16047] netlink: 'syz.0.2567': attribute type 21 has an invalid length. [ 413.325039][T16047] netlink: 'syz.0.2567': attribute type 5 has an invalid length. [ 413.333670][T16047] netlink: 'syz.0.2567': attribute type 6 has an invalid length. [ 413.377074][T16045] xt_CT: No such helper "netbios-ns" [ 413.433474][T16051] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.440743][T16051] dummy0: left promiscuous mode [ 413.520244][T16051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.530583][T16051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.545296][T16051] veth1_vlan: left promiscuous mode [ 413.551338][T16051] veth0_vlan: left promiscuous mode [ 413.557503][T16051] veth0_vlan: entered promiscuous mode [ 413.565894][T16051] veth1_vlan: entered promiscuous mode [ 413.596350][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.604818][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.612796][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.620760][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.630595][T16051] gretap0: entered promiscuous mode [ 413.647161][T16051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.657851][T16051] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 413.726809][ T7343] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.734521][ T7343] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.742128][ T10] team_slave_0: entered promiscuous mode [ 413.747776][ T10] ±ÿþ€: entered promiscuous mode [ 413.752937][ T10] bridge1: entered promiscuous mode [ 413.758161][ T10] bridge2: entered promiscuous mode [ 413.766493][ T7336] bridge0: port 1(1) entered blocking state [ 413.772677][ T7336] bridge0: port 1(1) entered listening state [ 413.808669][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.815818][ T7336] bridge0: port 2(bridge_slave_1) entered listening state [ 413.867508][ T9224] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.876228][ T9224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.884919][ T9224] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 413.935993][ T5736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.970274][ T9224] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.978999][ T9224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.023686][ T9224] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 414.074468][ T9224] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.083207][ T9224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.092350][ T9224] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 414.101610][ T9224] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.110297][ T9224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.140658][ T9224] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 414.694347][ T5716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.703073][ T5716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.752889][T16088] __nla_validate_parse: 9 callbacks suppressed [ 414.752907][T16088] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2578'. [ 414.768164][T16088] gretap0: entered promiscuous mode [ 414.773373][T16088] gretap0: left allmulticast mode [ 414.791345][T16088] gretap0: left promiscuous mode [ 414.796312][T16088] gretap0: entered allmulticast mode [ 414.803063][T16088] batadv0: entered allmulticast mode [ 414.813742][T16088] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 414.873376][T16088] batman_adv: batadv0: Interface deactivated: gretap4 [ 415.006220][T16088] vlan4: entered allmulticast mode [ 415.314546][T16112] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 416.083156][T16158] ªªªªª!: renamed from virt_wifi0 [ 416.118974][T16162] syzkaller1: entered promiscuous mode [ 416.124474][T16162] syzkaller1: entered allmulticast mode [ 416.684582][T16166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2596'. [ 416.782682][T16182] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 416.902445][T16187] netlink: 'syz.3.2602': attribute type 12 has an invalid length. [ 417.005739][T16195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2604'. [ 417.109791][T16205] vlan0: entered promiscuous mode [ 417.367149][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.421437][T16223] netlink: 'syz.1.2613': attribute type 5 has an invalid length. [ 417.432925][T16227] netlink: 'syz.2.2612': attribute type 27 has an invalid length. [ 417.689165][T16237] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 417.738565][T16239] bond11: entered allmulticast mode [ 417.745319][T16244] geneve1: entered promiscuous mode [ 417.769558][T16244] geneve1: entered allmulticast mode [ 418.472855][T16258] netlink: 480 bytes leftover after parsing attributes in process `syz.3.2621'. [ 418.953725][T16263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.672900][T16237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.681799][T16244] netlink: 'syz.2.2618': attribute type 2 has an invalid length. [ 420.691191][T16244] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2618'. [ 421.050255][T16280] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 421.058369][T16280] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 421.443960][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2629'. [ 421.452845][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2629'. [ 421.486237][T16290] bond20: Removing last arp target with arp_interval on [ 421.643722][T16302] netlink: 'syz.3.2631': attribute type 2 has an invalid length. [ 421.737988][T16308] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 421.745425][T16308] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 421.892745][T16314] Cannot find add_set index 1 as target [ 422.067681][T16322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2640'. [ 422.077351][T16324] netlink: 'syz.1.2641': attribute type 1 has an invalid length. [ 422.180205][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2639'. [ 422.219933][T16324] 8021q: adding VLAN 0 to HW filter on device bond12 [ 422.270489][T16324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2641'. [ 422.401353][ T5736] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 422.643466][T16356] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 422.662248][T16362] netlink: 'syz.1.2651': attribute type 5 has an invalid length. [ 422.674507][T16364] xt_hashlimit: size too large, truncated to 1048576 [ 422.709883][T16366] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 422.759450][T16371] netlink: 'syz.1.2655': attribute type 1 has an invalid length. [ 422.888306][T16364] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2652'. [ 422.899003][T16371] bond13: entered promiscuous mode [ 422.899459][T16371] 8021q: adding VLAN 0 to HW filter on device bond13 [ 422.946895][T16371] 8021q: adding VLAN 0 to HW filter on device bond13 [ 422.964942][T16371] bond13: (slave ipip0): The slave device specified does not support setting the MAC address [ 422.975136][T16371] bond13: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 423.000391][T16371] bond13: (slave ipip0): making interface the new active one [ 423.007803][T16371] ipip0: entered promiscuous mode [ 423.025027][T16366] block nbd6: server does not support multiple connections per device. [ 423.033582][T16366] block nbd6: shutting down sockets [ 423.046501][T16371] bond13: (slave ipip0): Enslaving as an active interface with an up link [ 423.051189][T16386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.166974][ T5736] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 423.304332][T16398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2659'. [ 423.850883][T16420] bond2 (unregistering): Released all slaves [ 424.064090][T16433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.584216][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.317436][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 425.702147][T16487] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2676'. [ 425.711792][T16487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2676'. [ 425.731787][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 425.749883][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 425.761651][T16490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'. [ 425.771931][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2677'. [ 425.780896][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2677'. [ 425.833823][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2678'. [ 425.842812][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 426.055533][T16503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2681'. [ 426.614550][T16533] syzkaller0: entered promiscuous mode [ 426.623666][T16533] syzkaller0: entered allmulticast mode [ 426.643743][T16531] netlink: 'syz.1.2687': attribute type 22 has an invalid length. [ 426.682229][T16531] netlink: 'syz.1.2687': attribute type 22 has an invalid length. [ 426.707669][ T7343] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.729113][ T7343] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.737861][ T7343] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.785343][ T7343] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.071066][T16546] =v: renamed from veth1 (while UP) [ 427.483901][T16558] syzkaller1: entered promiscuous mode [ 427.534093][T16558] syzkaller1: entered allmulticast mode [ 427.553101][T16558] syzkaller1: left promiscuous mode [ 427.558348][T16558] syzkaller1: left allmulticast mode [ 428.341062][T16605] x_tables: unsorted entry at hook 2 [ 429.057599][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 429.098968][ C1] bridge0: port 1(1) entered learning state [ 431.109595][T16633] netlink: 'syz.4.2712': attribute type 5 has an invalid length. [ 431.882863][T16669] __nla_validate_parse: 15 callbacks suppressed [ 431.882915][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2722'. [ 431.967727][T16663] xfrm0 speed is unknown, defaulting to 1000 [ 431.979220][T16671] syzkaller1: entered promiscuous mode [ 432.003801][T16671] syzkaller1: entered allmulticast mode [ 432.044090][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2724'. [ 432.079815][T16671] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 432.102622][T16671] bond4 (unregistering): Released all slaves [ 432.167010][T16681] netlink: 'syz.3.2727': attribute type 1 has an invalid length. [ 432.219524][T16681] 8021q: adding VLAN 0 to HW filter on device bond21 [ 432.230862][T16681] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2727'. [ 432.271784][T16681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2727'. [ 432.510416][T16663] lo speed is unknown, defaulting to 1000 [ 432.548826][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2729'. [ 432.906357][T16702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2731'. [ 432.952035][T16704] netlink: 'syz.4.2732': attribute type 8 has an invalid length. [ 432.986089][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2732'. [ 433.009354][T16704] bond0: entered promiscuous mode [ 433.014423][T16704] bond_slave_0: entered promiscuous mode [ 433.020288][T16704] bond_slave_1: entered promiscuous mode [ 433.027416][T16704] gretap0: entered promiscuous mode [ 433.045105][T16704] bond0: left promiscuous mode [ 433.050192][T16704] bond_slave_0: left promiscuous mode [ 433.055779][T16704] bond_slave_1: left promiscuous mode [ 433.074520][T16704] gretap0: left promiscuous mode [ 433.504969][T16725] xfrm0 speed is unknown, defaulting to 1000 [ 433.686218][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 433.758431][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'. [ 433.818863][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 433.827768][T16726] netlink: 'syz.1.2735': attribute type 12 has an invalid length. [ 433.835580][T16726] netlink: 'syz.1.2735': attribute type 11 has an invalid length. [ 433.925338][T16743] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 433.940678][T16743] ipt_ECN: cannot use operation on non-tcp rule [ 434.004135][T16725] lo speed is unknown, defaulting to 1000 [ 434.221971][T16751] netlink: 'syz.4.2741': attribute type 4 has an invalid length. [ 434.496655][T16770] ip_vti0: Master is either lo or non-ether device [ 434.515483][T16781] netlink: 'syz.4.2748': attribute type 8 has an invalid length. [ 434.529521][T16781] bond0: entered promiscuous mode [ 434.534591][T16781] bond_slave_0: entered promiscuous mode [ 434.540452][T16781] bond_slave_1: entered promiscuous mode [ 434.553919][T16781] gretap0: entered promiscuous mode [ 434.560205][T16781] bond0: left promiscuous mode [ 434.564988][T16781] bond_slave_0: left promiscuous mode [ 434.570560][T16781] bond_slave_1: left promiscuous mode [ 434.576524][T16781] gretap0: left promiscuous mode [ 434.674375][T16761] block nbd6: server does not support multiple connections per device. [ 434.694937][T16761] block nbd6: shutting down sockets [ 435.664265][T16827] ipvlan1: entered promiscuous mode [ 435.670714][T16827] ipvlan1: left promiscuous mode [ 435.703461][T16829] ipvlan1: entered promiscuous mode [ 435.727660][T16829] ipvlan1: left promiscuous mode [ 435.815044][T16845] bridge7: entered promiscuous mode [ 435.859359][T16845] bridge7: entered allmulticast mode [ 436.525737][T16875] tunl0: Caught tx_queue_len zero misconfig [ 436.807644][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 436.835592][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 436.843649][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 436.851596][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 436.859201][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 436.889425][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 436.901396][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 436.910507][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 436.946530][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 436.955032][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 437.032636][T16892] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 437.043515][T16889] syzkaller0: entered promiscuous mode [ 437.043539][T16889] syzkaller0: entered allmulticast mode [ 437.642656][T16885] xfrm0 speed is unknown, defaulting to 1000 [ 438.029236][T16917] __nla_validate_parse: 6 callbacks suppressed [ 438.029256][T16917] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2779'. [ 438.045850][T16917] openvswitch: netlink: Message has 512 unknown bytes. [ 438.123899][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2780'. [ 438.133003][T16919] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 438.965176][ T5635] Bluetooth: hci5: command tx timeout [ 439.409452][T16927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.974885][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.464930][T16885] lo speed is unknown, defaulting to 1000 [ 441.148997][ T5635] Bluetooth: hci5: command tx timeout [ 441.397315][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 441.436786][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 441.746005][T16989] sctp: [Deprecated]: syz.1.2792 (pid 16989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.746005][T16989] Use struct sctp_sack_info instead [ 441.853750][T16954] block nbd6: server does not support multiple connections per device. [ 441.863223][T16885] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.878603][T16885] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.885807][T16885] bridge_slave_0: entered allmulticast mode [ 441.907430][T16954] block nbd6: shutting down sockets [ 441.947613][T16885] bridge_slave_0: entered promiscuous mode [ 441.968221][T16885] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.997907][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.027435][T16885] bridge_slave_1: entered allmulticast mode [ 442.035143][T16885] bridge_slave_1: entered promiscuous mode [ 442.326238][T16993] xfrm0 speed is unknown, defaulting to 1000 [ 442.365576][ T5716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.445709][T16885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.622832][T16885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.665830][T16885] team0: Port device team_slave_0 added [ 442.674304][T16885] team0: Port device team_slave_1 added [ 442.913706][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.922739][T17018] netlink: 'syz.1.2796': attribute type 1 has an invalid length. [ 443.063532][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.117012][T16885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.172376][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.198469][T16885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.210934][T16885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.217902][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.309384][ T50] Bluetooth: hci5: command tx timeout [ 443.314879][T16885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.419425][T16993] lo speed is unknown, defaulting to 1000 [ 443.507646][T17035] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 443.787377][T16885] hsr_slave_0: entered promiscuous mode [ 443.794026][T16885] hsr_slave_1: entered promiscuous mode [ 443.852196][T16885] debugfs: 'hsr0' already exists in 'hsr' [ 443.857959][T16885] Cannot create hsr debugfs directory [ 444.417627][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.424882][ C0] bridge0: topology change detected, propagating [ 444.475346][ C1] bridge0: port 1(1) entered forwarding state [ 444.481630][ C1] bridge0: topology change detected, propagating [ 444.757240][T17056] syzkaller1: entered promiscuous mode [ 444.762745][T17056] syzkaller1: entered allmulticast mode [ 444.893661][T17060] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2805'. [ 445.104883][T16885] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.148429][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'. [ 445.264940][T17071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2807'. [ 445.274246][T17071] batadv_slave_1: entered promiscuous mode [ 445.326160][T17068] bridge7: left promiscuous mode [ 445.331117][T17068] bridge7: left allmulticast mode [ 445.473022][ T50] Bluetooth: hci5: command tx timeout [ 445.544112][T16885] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.721652][T17071] batadv_slave_1: left promiscuous mode [ 446.102231][T17095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2815'. [ 446.157747][T16885] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.296469][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2816'. [ 446.323861][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2816'. [ 446.541441][T16885] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.580787][T17104] ipip0: entered promiscuous mode [ 446.883918][T17112] x_tables: duplicate entry at hook 1 [ 446.980919][T17113] netlink: 'syz.1.2820': attribute type 9 has an invalid length. [ 447.142303][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 447.184791][T17124] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2822'. [ 447.193864][T17124] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2822'. [ 447.850180][T16885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 447.860803][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.868772][T16885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 447.877841][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.885673][T16885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 447.943871][ T50] block nbd6: Receive control failed (result -32) [ 447.974935][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'. [ 448.040356][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.082481][T17157] 8021q: adding VLAN 0 to HW filter on device bond8 [ 448.090031][T16885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 448.121590][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.270237][T17174] netlink: 'syz.1.2834': attribute type 4 has an invalid length. [ 448.305114][T16885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.330271][T16885] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.384466][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.391629][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.412671][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.419816][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.905214][T17198] netlink: 'syz.2.2838': attribute type 1 has an invalid length. [ 449.166945][T17213] netlink: 'syz.4.2841': attribute type 1 has an invalid length. [ 449.176945][T17213] x_tables: duplicate underflow at hook 3 [ 449.240366][T17217] netlink: 'syz.2.2842': attribute type 1 has an invalid length. [ 449.291771][T17222] netlink: 'syz.4.2843': attribute type 1 has an invalid length. [ 449.292107][T17217] 8021q: adding VLAN 0 to HW filter on device bond10 [ 449.311989][T16885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.354561][T16885] veth0_vlan: entered promiscuous mode [ 449.421377][T16885] veth1_vlan: entered promiscuous mode [ 449.510515][T16885] veth0_macvtap: entered promiscuous mode [ 449.533947][T16885] veth1_macvtap: entered promiscuous mode [ 449.554376][T16885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.577933][T16885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.617034][ T9224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.660724][ T9224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.705780][ T9224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.738842][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.767978][T17238] erspan0: entered allmulticast mode [ 449.838104][ T7336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.854231][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.862073][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.863767][ T7336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.331656][T17265] syzkaller0: entered promiscuous mode [ 450.337162][T17265] syzkaller0: entered allmulticast mode [ 450.346150][T17265] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 450.601656][T17279] __nla_validate_parse: 6 callbacks suppressed [ 450.601691][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2858'. [ 450.603042][T17280] sctp: [Deprecated]: syz.3.2859 (pid 17280) Use of int in maxseg socket option. [ 450.603042][T17280] Use struct sctp_assoc_value instead [ 450.781007][T17286] netlink: 'syz.4.2861': attribute type 1 has an invalid length. [ 450.894539][T17286] bond4: (slave gretap1): making interface the new active one [ 450.911736][T17286] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 450.956393][T17295] can: request_module (can-proto-0) failed. [ 450.971730][T17295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2860'. [ 451.197679][T17309] netlink: 'syz.3.2860': attribute type 4 has an invalid length. [ 451.239708][T17310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2863'. [ 451.252659][T17310] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2863'. [ 451.366542][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.377829][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.377880][T17317] netlink: 'syz.3.2860': attribute type 4 has an invalid length. [ 451.385665][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.401382][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.409227][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.189924][T17350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.198642][T17350] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 452.296115][T17351] netlink: 'syz.0.2868': attribute type 1 has an invalid length. [ 452.379316][T17316] xfrm0 speed is unknown, defaulting to 1000 [ 452.514035][T17359] netlink: 'syz.4.2867': attribute type 3 has an invalid length. [ 452.554101][T17362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2871'. [ 452.724842][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.795883][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'. [ 452.828223][T17316] lo speed is unknown, defaulting to 1000 [ 452.835893][ T5716] IPVS: starting estimator thread 0... [ 452.932154][T17376] bond14: entered promiscuous mode [ 452.937661][T17376] 8021q: adding VLAN 0 to HW filter on device bond14 [ 453.061145][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.132144][T17373] IPVS: using max 25 ests per chain, 60000 per kthread [ 453.161254][T17387] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.168099][T17387] tipc: Resetting bearer [ 453.174693][T17387] dummy0: left promiscuous mode [ 453.181011][T17387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.191729][ T9224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.200312][ T7342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.208396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.216886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.238521][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'. [ 453.242699][ T7342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.256786][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.265919][ T7995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.271693][T17387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.282319][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.296503][T17387] veth1_vlan: left promiscuous mode [ 453.302971][T17387] veth0_vlan: left promiscuous mode [ 453.309188][T17387] veth0_vlan: entered promiscuous mode [ 453.315200][T17387] tipc: Resetting bearer [ 453.321313][T17387] veth1_vlan: entered promiscuous mode [ 453.329278][T17387] tipc: Resetting bearer [ 453.367346][T17387] tipc: Resetting bearer [ 453.374000][T17387] veth1_macvtap: left promiscuous mode [ 453.380755][T17387] veth0_macvtap: left promiscuous mode [ 453.386884][T17387] veth0_macvtap: entered promiscuous mode [ 453.393302][T17387] veth1_macvtap: entered promiscuous mode [ 453.403886][T17387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.431694][T17387] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 453.466141][ T50] Bluetooth: hci2: command tx timeout [ 453.534315][ T7336] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.542559][ T7336] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.550787][ T7336] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.589774][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 453.598524][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 453.608042][ T13] bridge0: port 2(netdevsim1) entered disabled state [ 453.618166][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.633097][ T7336] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.662196][T17316] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.702770][ T5635] block nbd7: Receive control failed (result -32) [ 453.727114][T17316] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.740178][T17392] x_tables: duplicate underflow at hook 2 [ 453.746296][T17316] bridge_slave_0: entered allmulticast mode [ 453.755524][T17316] bridge_slave_0: entered promiscuous mode [ 453.849024][T17316] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.865250][T17316] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.879537][T17316] bridge_slave_1: entered allmulticast mode [ 453.915343][T17316] bridge_slave_1: entered promiscuous mode [ 454.047127][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.078094][T17316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.090936][T17316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.183056][T17316] team0: Port device team_slave_0 added [ 454.199993][T17316] team0: Port device team_slave_1 added [ 454.313827][T17316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.320808][T17316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.365522][T17316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.382076][T17417] syzkaller0: refused to change device tx_queue_len [ 454.391810][T17419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2888'. [ 454.404798][T17316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.411746][T17316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.437590][T17316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.513822][T17316] hsr_slave_0: entered promiscuous mode [ 454.520450][T17316] hsr_slave_1: entered promiscuous mode [ 454.526760][T17316] debugfs: 'hsr0' already exists in 'hsr' [ 454.532557][T17316] Cannot create hsr debugfs directory [ 455.040976][ T13] vlan2: left allmulticast mode [ 455.046178][ T13] geneve0: left allmulticast mode [ 455.051282][ T13] vlan2: left promiscuous mode [ 455.056126][ T13] geneve0: left promiscuous mode [ 455.062226][ T13] bridge0: port 1(vlan2) entered disabled state [ 455.339249][ T13] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 455.436236][ T13] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 455.607943][ T5635] Bluetooth: hci2: command tx timeout [ 455.684477][ T13] bond7 (unregistering): (slave gre1): Releasing backup interface [ 455.692393][ T13] gre1 (unregistering): left promiscuous mode [ 455.748306][T17467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.222604][ T13] bond0 (unregistering): Released all slaves [ 456.245110][ T13] bond1 (unregistering): Released all slaves [ 456.286402][ T13] bond2 (unregistering): Released all slaves [ 456.307918][ T13] bond3 (unregistering): Released all slaves [ 456.328364][ T13] bond4 (unregistering): Released all slaves [ 456.347130][ T13] bond5 (unregistering): Released all slaves [ 456.395476][ T13] bond6 (unregistering): Released all slaves [ 456.422675][ T13] bond7 (unregistering): Released all slaves [ 456.437142][ T13] bond8 (unregistering): Released all slaves [ 456.449894][ T13] bond9 (unregistering): Released all slaves [ 456.462773][ T13] bond10 (unregistering): Released all slaves [ 456.488705][T17440] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2892'. [ 456.743816][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 456.873795][ T13] : left promiscuous mode [ 457.237668][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 457.275103][ T13] tipc: Disabling bearer [ 457.279326][T17507] validate_nla: 1 callbacks suppressed [ 457.279358][T17507] netlink: 'syz.0.2903': attribute type 30 has an invalid length. [ 457.301390][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 457.311494][T17513] netlink: 'syz.0.2903': attribute type 30 has an invalid length. [ 457.332774][ T13] tipc: Left network mode [ 457.403866][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. [ 457.464749][T17510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.742793][ T5635] Bluetooth: hci2: command tx timeout [ 458.547504][ T7342] net_ratelimit: 1 callbacks suppressed [ 458.547523][ T7342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.979828][T17566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2912'. [ 459.072186][T17572] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 459.185254][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2914'. [ 459.224358][T17572] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2914'. [ 459.262810][T17572] team0 (unregistering): Port device team_slave_0 removed [ 459.278382][T17572] team0 (unregistering): Port device team_slave_1 removed [ 459.370971][T17585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2916'. [ 459.401654][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.418582][T17585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2916'. [ 459.492625][T17316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 459.511552][T17316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.519487][T17316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 459.570983][T17316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.579206][T17316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 459.595445][T17316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.691632][T17316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.711953][T17316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.751928][ T5635] Bluetooth: hci2: command tx timeout [ 460.043533][T17608] IPv6: addrconf: prefix option has invalid lifetime [ 460.061924][T17316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.187262][T17316] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.362883][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.370054][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.380620][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.387778][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.515359][ T13] hsr_slave_0: left promiscuous mode [ 460.523750][T17630] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2930'. [ 462.541036][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.312112][ T13] hsr_slave_1: left promiscuous mode [ 463.702800][T17630] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.709993][T17630] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.239088][ T9224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.373871][T17677] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2942'. [ 464.678757][T17316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.779736][T17316] veth0_vlan: entered promiscuous mode [ 464.802787][T17692] nbd: nbd3 already in use [ 464.820216][T17316] veth1_vlan: entered promiscuous mode [ 464.826414][T17692] block nbd3: NBD_DISCONNECT [ 464.857033][T17690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2945'. [ 464.877691][T17316] veth0_macvtap: entered promiscuous mode [ 464.888753][T17316] veth1_macvtap: entered promiscuous mode [ 464.914822][T17692] block nbd3: Send disconnect failed -104 [ 464.933025][T17692] block nbd3: shutting down sockets [ 464.954677][T17316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.010922][T17316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.036886][T17696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2946'. [ 465.049670][ T170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.154133][ T170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.182158][ T170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.217237][ T170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.463940][ T7342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.471478][T17707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2950'. [ 465.471835][ T7342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.482694][T17709] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2951'. [ 465.519188][T17704] [ 465.521544][T17704] ====================================================== [ 465.528564][T17704] WARNING: possible circular locking dependency detected [ 465.535589][T17704] syzkaller #0 Not tainted [ 465.540004][T17704] ------------------------------------------------------ [ 465.543922][ T7343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.547017][T17704] syz.0.2949/17704 is trying to acquire lock: [ 465.547029][T17704] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 465.547085][T17704] [ 465.547085][T17704] but task is already holding lock: [ 465.547092][T17704] ffff88803689e9b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 465.547139][T17704] [ 465.547139][T17704] which lock already depends on the new lock. [ 465.547139][T17704] [ 465.547146][T17704] [ 465.547146][T17704] the existing dependency chain (in reverse order) is: [ 465.547154][T17704] [ 465.547154][T17704] -> #8 (&mm->mmap_lock){++++}-{4:4}: [ 465.547181][T17704] __might_fault+0xcb/0x130 [ 465.547200][T17704] _copy_from_user+0x28/0xb0 [ 465.547225][T17704] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 465.630331][T17704] ip_generic_getfrag+0x149/0x2d0 [ 465.635898][T17704] __ip6_append_data+0x3b26/0x40c0 [ 465.641540][T17704] ip6_append_data+0x108/0x270 [ 465.646826][T17704] rawv6_sendmsg+0x1298/0x18c0 [ 465.652117][T17704] sock_sendmsg_nosec+0x10e/0x180 [ 465.657660][T17704] ____sys_sendmsg+0x54e/0x850 [ 465.662948][T17704] ___sys_sendmsg+0x2a5/0x360 [ 465.668153][T17704] __x64_sys_sendmsg+0x1b1/0x290 [ 465.673614][T17704] do_syscall_64+0x174/0x580 [ 465.678740][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.685156][T17704] [ 465.685156][T17704] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 465.692888][T17704] lock_sock_nested+0x41/0x100 [ 465.698175][T17704] tls_sw_sendmsg+0x161/0x2860 [ 465.703453][T17704] sock_sendmsg_nosec+0x90/0x180 [ 465.708908][T17704] sock_write_iter+0x2de/0x3e0 [ 465.714180][T17704] do_iter_readv_writev+0x612/0x8c0 [ 465.719894][T17704] vfs_writev+0x343/0x990 [ 465.724735][T17704] do_writev+0x154/0x2e0 [ 465.729488][T17704] do_syscall_64+0x174/0x580 [ 465.734593][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.741004][T17704] [ 465.741004][T17704] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 465.748472][T17704] __mutex_lock+0x19d/0x1550 [ 465.753577][T17704] tls_sw_sendmsg+0x13c/0x2860 [ 465.758858][T17704] sock_sendmsg_nosec+0x90/0x180 [ 465.764319][T17704] sock_sendmsg+0x1ca/0x2d0 [ 465.769344][T17704] __sock_xmit+0x245/0x4f0 [ 465.774287][T17704] nbd_disconnect+0x3ad/0x560 [ 465.779479][T17704] nbd_disconnect_and_put+0x32/0x280 [ 465.785277][T17704] nbd_genl_disconnect+0x4af/0x590 [ 465.790903][T17704] genl_family_rcv_msg_doit+0x233/0x340 [ 465.796965][T17704] genl_rcv_msg+0x614/0x7a0 [ 465.801977][T17704] netlink_rcv_skb+0x226/0x4a0 [ 465.807263][T17704] genl_rcv+0x28/0x40 [ 465.811757][T17704] netlink_unicast+0x7bb/0x940 [ 465.817030][T17704] netlink_sendmsg+0x813/0xb40 [ 465.822298][T17704] sock_sendmsg_nosec+0x13a/0x180 [ 465.827830][T17704] ____sys_sendmsg+0x54e/0x850 [ 465.833116][T17704] ___sys_sendmsg+0x2a5/0x360 [ 465.838305][T17704] __x64_sys_sendmsg+0x1b1/0x290 [ 465.843759][T17704] do_syscall_64+0x174/0x580 [ 465.848867][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.855273][T17704] [ 465.855273][T17704] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 465.862924][T17704] __mutex_lock+0x19d/0x1550 [ 465.868032][T17704] nbd_queue_rq+0x373/0x1150 [ 465.873137][T17704] blk_mq_dispatch_rq_list+0x499/0x1990 [ 465.879194][T17704] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 465.886039][T17704] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 465.892533][T17704] blk_mq_run_work_fn+0x16c/0x300 [ 465.898063][T17704] process_scheduled_works+0xa8e/0x14e0 [ 465.904115][T17704] worker_thread+0xa47/0xfb0 [ 465.909211][T17704] kthread+0x388/0x470 [ 465.913796][T17704] ret_from_fork+0x514/0xb70 [ 465.918901][T17704] ret_from_fork_asm+0x1a/0x30 [ 465.924175][T17704] [ 465.924175][T17704] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 465.931377][T17704] __mutex_lock+0x19d/0x1550 [ 465.936479][T17704] nbd_queue_rq+0xc1/0x1150 [ 465.941497][T17704] blk_mq_dispatch_rq_list+0x499/0x1990 [ 465.947553][T17704] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 465.954392][T17704] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 465.960886][T17704] blk_mq_run_work_fn+0x16c/0x300 [ 465.966417][T17704] process_scheduled_works+0xa8e/0x14e0 [ 465.972472][T17704] worker_thread+0xa47/0xfb0 [ 465.977570][T17704] kthread+0x388/0x470 [ 465.982147][T17704] ret_from_fork+0x514/0xb70 [ 465.987249][T17704] ret_from_fork_asm+0x1a/0x30 [ 465.992521][T17704] [ 465.992521][T17704] -> #3 (set->srcu){.+.+}-{0:0}: [ 465.999631][T17704] __synchronize_srcu+0xc9/0x2f0 [ 466.005078][T17704] elevator_switch+0x1e8/0x7b0 [ 466.010350][T17704] elevator_change+0x2fa/0x480 [ 466.015624][T17704] elevator_set_default+0x375/0x440 [ 466.021332][T17704] blk_register_queue+0x3f3/0x4e0 [ 466.026871][T17704] __add_disk+0x6cb/0xe30 [ 466.031707][T17704] add_disk_fwnode+0xfb/0x4b0 [ 466.036886][T17704] nbd_dev_add+0x733/0xb60 [ 466.041817][T17704] nbd_init+0x15f/0x1e0 [ 466.046479][T17704] do_one_initcall+0x250/0x870 [ 466.051752][T17704] do_initcall_level+0x10a/0x1a0 [ 466.057201][T17704] do_initcalls+0x59/0xa0 [ 466.062047][T17704] kernel_init_freeable+0x29d/0x3e0 [ 466.067762][T17704] kernel_init+0x1d/0x1d0 [ 466.072602][T17704] ret_from_fork+0x514/0xb70 [ 466.077705][T17704] ret_from_fork_asm+0x1a/0x30 [ 466.082973][T17704] [ 466.082973][T17704] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 466.090779][T17704] __mutex_lock+0x19d/0x1550 [ 466.095891][T17704] elevator_change+0x1af/0x480 [ 466.101161][T17704] elevator_set_none+0xb5/0x140 [ 466.106518][T17704] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 466.112844][T17704] nbd_start_device+0x189/0xb30 [ 466.118216][T17704] nbd_genl_connect+0x1597/0x1c10 [ 466.123752][T17704] genl_family_rcv_msg_doit+0x233/0x340 [ 466.129806][T17704] genl_rcv_msg+0x614/0x7a0 [ 466.134820][T17704] netlink_rcv_skb+0x226/0x4a0 [ 466.140095][T17704] genl_rcv+0x28/0x40 [ 466.144583][T17704] netlink_unicast+0x7bb/0x940 [ 466.149859][T17704] netlink_sendmsg+0x813/0xb40 [ 466.155128][T17704] sock_sendmsg_nosec+0x13a/0x180 [ 466.160670][T17704] ____sys_sendmsg+0x54e/0x850 [ 466.165947][T17704] ___sys_sendmsg+0x2a5/0x360 [ 466.171140][T17704] __x64_sys_sendmsg+0x1b1/0x290 [ 466.176592][T17704] do_syscall_64+0x174/0x580 [ 466.181696][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.188095][T17704] [ 466.188095][T17704] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 466.196688][T17704] blk_alloc_queue+0x544/0x690 [ 466.201964][T17704] __blk_mq_alloc_disk+0x194/0x390 [ 466.207588][T17704] nbd_dev_add+0x494/0xb60 [ 466.212515][T17704] nbd_init+0x15f/0x1e0 [ 466.217180][T17704] do_one_initcall+0x250/0x870 [ 466.222467][T17704] do_initcall_level+0x10a/0x1a0 [ 466.227914][T17704] do_initcalls+0x59/0xa0 [ 466.232755][T17704] kernel_init_freeable+0x29d/0x3e0 [ 466.238462][T17704] kernel_init+0x1d/0x1d0 [ 466.243297][T17704] ret_from_fork+0x514/0xb70 [ 466.248395][T17704] ret_from_fork_asm+0x1a/0x30 [ 466.253668][T17704] [ 466.253668][T17704] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 466.260867][T17704] __lock_acquire+0x1520/0x2cf0 [ 466.266236][T17704] lock_acquire+0x106/0x350 [ 466.271252][T17704] fs_reclaim_acquire+0x71/0x100 [ 466.276702][T17704] prepare_alloc_pages+0x15b/0x650 [ 466.282320][T17704] __alloc_frozen_pages_noprof+0x12f/0x380 [ 466.288636][T17704] alloc_pages_mpol+0x212/0x380 [ 466.293997][T17704] alloc_pages_noprof+0xac/0x2a0 [ 466.299446][T17704] pte_alloc_one+0x22/0x370 [ 466.304453][T17704] do_pte_missing+0x13c8/0x34b0 [ 466.309849][T17704] handle_mm_fault+0x1b36/0x3080 [ 466.315290][T17704] do_user_addr_fault+0x744/0x1340 [ 466.320915][T17704] exc_page_fault+0x6a/0xc0 [ 466.325935][T17704] asm_exc_page_fault+0x26/0x30 [ 466.331295][T17704] rep_movs_alternative+0xf/0xa0 [ 466.336740][T17704] _copy_from_user+0x7a/0xb0 [ 466.341843][T17704] do_ipv6_setsockopt+0x249/0x3180 [ 466.347463][T17704] ipv6_setsockopt+0x59/0x170 [ 466.352649][T17704] smc_setsockopt+0x232/0xb00 [ 466.357843][T17704] do_sock_setsockopt+0x17c/0x1b0 [ 466.363377][T17704] __x64_sys_setsockopt+0x13d/0x1b0 [ 466.369088][T17704] do_syscall_64+0x174/0x580 [ 466.374196][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.380607][T17704] [ 466.380607][T17704] other info that might help us debug this: [ 466.380607][T17704] [ 466.390818][T17704] Chain exists of: [ 466.390818][T17704] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 466.390818][T17704] [ 466.403406][T17704] Possible unsafe locking scenario: [ 466.403406][T17704] [ 466.410841][T17704] CPU0 CPU1 [ 466.416188][T17704] ---- ---- [ 466.421542][T17704] rlock(&mm->mmap_lock); [ 466.425947][T17704] lock(sk_lock-AF_INET6); [ 466.432955][T17704] lock(&mm->mmap_lock); [ 466.439788][T17704] lock(fs_reclaim); [ 466.443756][T17704] [ 466.443756][T17704] *** DEADLOCK *** [ 466.443756][T17704] [ 466.451880][T17704] 2 locks held by syz.0.2949/17704: [ 466.457056][T17704] #0: ffff88802a346fa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x174/0xb00 [ 466.467581][T17704] #1: ffff88803689e9b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 466.477495][T17704] [ 466.477495][T17704] stack backtrace: [ 466.483373][T17704] CPU: 0 UID: 0 PID: 17704 Comm: syz.0.2949 Not tainted syzkaller #0 PREEMPT(full) [ 466.483405][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.483424][T17704] Call Trace: [ 466.483431][T17704] [ 466.483438][T17704] dump_stack_lvl+0xe8/0x150 [ 466.483462][T17704] print_circular_bug+0x2e1/0x300 [ 466.483479][T17704] check_noncircular+0x12e/0x150 [ 466.483503][T17704] __lock_acquire+0x1520/0x2cf0 [ 466.483528][T17704] ? is_bpf_text_address+0x26/0x2b0 [ 466.483551][T17704] ? prepare_alloc_pages+0x15b/0x650 [ 466.483570][T17704] lock_acquire+0x106/0x350 [ 466.483588][T17704] ? prepare_alloc_pages+0x15b/0x650 [ 466.483608][T17704] ? is_bpf_text_address+0x292/0x2b0 [ 466.483628][T17704] ? is_bpf_text_address+0x26/0x2b0 [ 466.483649][T17704] fs_reclaim_acquire+0x71/0x100 [ 466.483666][T17704] ? prepare_alloc_pages+0x15b/0x650 [ 466.483685][T17704] prepare_alloc_pages+0x15b/0x650 [ 466.483706][T17704] __alloc_frozen_pages_noprof+0x12f/0x380 [ 466.483728][T17704] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 466.483749][T17704] ? __pfx_policy_nodemask+0x10/0x10 [ 466.483770][T17704] ? __lock_acquire+0x683/0x2cf0 [ 466.483792][T17704] alloc_pages_mpol+0x212/0x380 [ 466.483814][T17704] alloc_pages_noprof+0xac/0x2a0 [ 466.483836][T17704] pte_alloc_one+0x22/0x370 [ 466.483852][T17704] do_pte_missing+0x13c8/0x34b0 [ 466.483872][T17704] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 466.483895][T17704] handle_mm_fault+0x1b36/0x3080 [ 466.483914][T17704] ? handle_mm_fault+0xec/0x3080 [ 466.483932][T17704] ? __pfx_handle_mm_fault+0x10/0x10 [ 466.483952][T17704] ? __lock_acquire+0x683/0x2cf0 [ 466.483972][T17704] ? lock_mm_and_find_vma+0xa7/0x340 [ 466.483991][T17704] do_user_addr_fault+0x744/0x1340 [ 466.484017][T17704] exc_page_fault+0x6a/0xc0 [ 466.484038][T17704] asm_exc_page_fault+0x26/0x30 [ 466.484053][T17704] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 466.484072][T17704] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 466.484086][T17704] RSP: 0018:ffffc90005c57a18 EFLAGS: 00050202 [ 466.484099][T17704] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 466.484110][T17704] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: ffffc90005c57ac0 [ 466.484121][T17704] RBP: ffffc90005c57d38 R08: 0000000000000003 R09: 0000000000000004 [ 466.484131][T17704] R10: dffffc0000000000 R11: fffff52000b8af58 R12: 0000000000000040 [ 466.484142][T17704] R13: 0000000000000228 R14: ffffc90005c57ac0 R15: 0000200000000e00 [ 466.484162][T17704] _copy_from_user+0x7a/0xb0 [ 466.484188][T17704] do_ipv6_setsockopt+0x249/0x3180 [ 466.484210][T17704] ? __pfx___futex_wait+0x10/0x10 [ 466.484228][T17704] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 466.484249][T17704] ? __mutex_trylock_common+0x15f/0x270 [ 466.484265][T17704] ? __pfx___mutex_trylock_common+0x10/0x10 [ 466.484280][T17704] ? rcu_is_watching+0x15/0xb0 [ 466.484301][T17704] ? trace_contention_end+0x3d/0x140 [ 466.484316][T17704] ? __mutex_lock+0x30d/0x1550 [ 466.484339][T17704] ? __lock_acquire+0x683/0x2cf0 [ 466.484359][T17704] ? smc_setsockopt+0x174/0xb00 [ 466.484379][T17704] ? __pfx___mutex_lock+0x10/0x10 [ 466.484405][T17704] ipv6_setsockopt+0x59/0x170 [ 466.484425][T17704] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 466.484444][T17704] smc_setsockopt+0x232/0xb00 [ 466.484466][T17704] ? __pfx_smc_setsockopt+0x10/0x10 [ 466.484485][T17704] ? aa_sock_opt_perm+0xff/0x1a0 [ 466.484501][T17704] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 466.484517][T17704] ? __pfx_smc_setsockopt+0x10/0x10 [ 466.484537][T17704] do_sock_setsockopt+0x17c/0x1b0 [ 466.484560][T17704] __x64_sys_setsockopt+0x13d/0x1b0 [ 466.484582][T17704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.484597][T17704] do_syscall_64+0x174/0x580 [ 466.484618][T17704] ? trace_irq_disable+0x3b/0x140 [ 466.484636][T17704] ? clear_bhb_loop+0x40/0x90 [ 466.484653][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.484668][T17704] RIP: 0033:0x7fa44019de59 [ 466.484682][T17704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.484696][T17704] RSP: 002b:00007fa44100a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 466.484710][T17704] RAX: ffffffffffffffda RBX: 00007fa440425fa0 RCX: 00007fa44019de59 [ 466.484721][T17704] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000b [ 466.484731][T17704] RBP: 00007fa440233e6f R08: 0000000000000228 R09: 0000000000000000 [ 466.484740][T17704] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000000 [ 466.484750][T17704] R13: 00007fa440426038 R14: 00007fa440425fa0 R15: 00007ffd39439bb8 [ 466.484767][T17704] [ 467.018328][ T7343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.046719][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.066165][T17709] tipc: Resetting bearer [ 467.072275][ T13] IPVS: stop unused estimator thread 0... [ 467.086841][T17709] tipc: Disabling bearer [ 467.104587][T17709] team0 (unregistering): Port device team_slave_1 removed [ 467.128475][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'. [ 467.137488][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2952'. [ 467.146341][T17711] netlink: 'syz.4.2952': attribute type 14 has an invalid length. [ 467.154418][T17711] netlink: 'syz.4.2952': attribute type 13 has an invalid length. [ 469.991466][ T204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.067301][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.266811][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.117982][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.027355][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog