last executing test programs: 1.863070156s ago: executing program 2 (id=2653): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1c, r3, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000014007910480000000000000000000000000000730000", @ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000000)={0x3, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@bridge_dellink={0xcc, 0x11, 0x300, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x1080, 0x2000}, [@IFLA_IFALIASn={0x4}, @IFLA_VF_PORTS={0x98, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3a75}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8fe9029ff39c3c57b2ba544f2c22b1bc"}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, 'wireguard\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, 'wireguard\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffc}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9330f1d1138e559e172eec07b50b400b"}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x81}, @IFLA_OPERSTATE={0x5, 0x10, 0xa}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44054}, 0x800) 1.853131814s ago: executing program 3 (id=2654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd20020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b700000000c3ff0095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.742204422s ago: executing program 2 (id=2655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x4004) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r5, 0x9}, 0x8) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1.683368642s ago: executing program 0 (id=2657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x16f8, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x6}, {0x7, 0x9}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x16c8, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5d7c}}]}, @TCA_CGROUP_EMATCHES={0x118, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x3}, {0xf, 0x0, 0x800, 0x0, 0x7, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0xac, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x400}, "e47d7c67e7388a45f2e988c42599aa5ee9818086debcdc3d819f1bee33750c76bdeb121f88593dfc6e984a896bad05553993b4ed203e156bbea32f4fdb55c88b66d193bfeab40f12d190fb81922415d4476f35448a4faeee4ddfcdbbe3fb18a747254c2b1abd3c08a4512947b208fc557c6a83d87995260b6a180e93eeaa58e610f024cc24498d1223d8c6b2c7043b3f59c04778ae60b1bf702ea64733"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0x6670000, 0x9, 0x4, 0x6, 0xd, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0xb}, {0x7fffffff, 0x4, 0x5, 0x1, 0xa, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x3}, {0x9, 0x1, 0x1, "1f"}}}]}]}, @TCA_CGROUP_EMATCHES={0x1198, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x932}, {0x7, 0xea3, 0x4, 0x9}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x5}, {0x4, 0x5, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x1}, {0xffffffffffffffff, 0x4, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x9}, {0xffffffffffffffff, 0x4, 0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0xfffe}, {0x2, 0x5, 0x7fff, 0x4, 0xc, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x7}, {0xf, 0x8, 0x0, "e9621045632102f1"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x8001}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5}, {0xa, 0xea, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x10e0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7ff}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0x4c, 0x1, 0x0, 0x0, {{0x72b0, 0x9, 0x8bf1}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0xcf}, {0x5, 0x7228, 0x3ff, 0x6, 0x9, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x1}, {0x4, 0x9, 0x0, "edf6852fdc20116c0c"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x6904}, {0x4, 0x4, 0x6}}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x7fff, 0x0, 0x1}, "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"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x3}, {0x2, 0x5, 0x1}}}]}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x7, 0x7ff, 0x49, 0x4, 0x1, 0x8, 0x100, 0x0, 0x2, 0x9, 0x1, 0x4, 0xfffffff7, 0x3, 0x5, 0xb529, 0x1000, 0xffffff10, 0x6, 0x5, 0x8, 0x401, 0x5, 0xf, 0x2, 0x5, 0x5, 0x200, 0x40, 0x8, 0x6, 0xfcab, 0x8000, 0x5, 0x7, 0x5, 0xffffffff, 0x81, 0x1, 0xfc6a, 0x1, 0xe2, 0x1, 0x10000, 0x3, 0x362, 0x8, 0xfffff001, 0x8, 0x5, 0x2, 0x400, 0x4, 0x10, 0x55cccbd5, 0x6, 0x7, 0x5, 0x1, 0x8, 0x3, 0x5, 0x9, 0x3, 0x7fffffff, 0x80000001, 0x73a2165e, 0x8, 0x3, 0x7, 0x40, 0xffff6600, 0x9, 0x3, 0x1, 0xb52cf8ca, 0xfffffffb, 0x4, 0x5, 0x9, 0x9, 0xfffffffe, 0x3, 0x0, 0x2, 0x7, 0x2, 0x9, 0xd6, 0x6, 0x10001, 0xe2dc, 0xa, 0x0, 0x1, 0x2, 0x3, 0x7, 0x8001, 0x5, 0x609, 0x40, 0x1, 0x7, 0x5d2f9606, 0x2, 0x1, 0x5, 0x9bd0, 0xfffffffd, 0xd, 0x1, 0x6, 0x7, 0x6, 0x7, 0x80000, 0x7, 0x2, 0x0, 0x9, 0x4, 0x2, 0x3, 0x8001, 0x8, 0x4, 0x100, 0x1, 0x6, 0x9, 0x1000, 0x5, 0xfffffd5a, 0x7fffffff, 0x4, 0x7, 0x100000, 0x3, 0x7, 0x7, 0x8b, 0x8, 0x1, 0x401, 0x8000, 0x5, 0x3, 0x7, 0x8, 0x69, 0x9, 0x80, 0x3ff, 0xffff, 0x64a, 0xffffffff, 0x73c, 0x6, 0x5, 0x0, 0x9c6, 0x85, 0x2f57, 0x3, 0x67f, 0x400, 0x32, 0xa, 0x5, 0x6, 0x5, 0x632f6f60, 0x2, 0x4, 0x2de4, 0x5, 0xb, 0x3, 0x1, 0x0, 0x2fd, 0x13b, 0x1ad2, 0x10001, 0x8, 0xe0, 0x100, 0xb, 0x12, 0x7ff, 0x6, 0x8001, 0x8, 0xf7a7, 0x6, 0x9, 0x6, 0x3, 0x0, 0x0, 0x5, 0x3, 0x1, 0x3, 0x100000, 0x2, 0x5, 0x8, 0xfffffffe, 0x9, 0x4, 0xec4, 0xffffddf2, 0x8, 0x8, 0x5, 0x9, 0xa6d, 0x600000, 0x6, 0x0, 0x76, 0x7f, 0x200, 0x5, 0x6, 0xfffffffc, 0x1000, 0xfffff801, 0x8, 0x1ff, 0x6, 0x7fff, 0xffff, 0xb, 0x600, 0x4, 0xc03d, 0x2, 0xf7de, 0x2, 0x8, 0x2, 0x3, 0x1, 0x1, 0x3, 0x0, 0x47cf, 0x3ff, 0x8, 0x3ee, 0x8, 0x1]}]}]}}]}, 0x16f8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.606462245s ago: executing program 3 (id=2659): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000287110bf000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1.472198413s ago: executing program 0 (id=2661): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xa7, 0x6d8, 0x3, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8000, 0x8000, 0xe}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x83, &(0x7f0000000000)={r5, 0x2}, 0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x478, 0x270, 0x478, 0x478, 0x0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x6, 0x8, 0x6}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private0, @mcast2, @private0, @empty, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@mcast1, 0x23, 0x29, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000200)="c8ff3f1c9fe6b89e952825bbaba7930a8f5fd752e4bfa784e9db5af51debf6", 0x1f}], 0x2, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.444459843s ago: executing program 3 (id=2662): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) (async) 1.318151282s ago: executing program 3 (id=2666): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008002) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x4}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000017c0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x1c, r2, 0x7ce7e4ef5851f55f, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000980), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000f7ffffbe0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x20040080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendmsg$SMC_PNETID_DEL(r6, 0x0, 0x4040000) 1.173289779s ago: executing program 3 (id=2669): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) write$nbd(r5, &(0x7f0000000740)={0x67446698, 0x0, 0x2, 0x2, 0x1, "00660d5ea889a138a0802649e1bfb8f8179cf17aa0cfa6b54586331559d761eb"}, 0x30) recvmmsg(r5, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/203, 0xcb}], 0x2}, 0x8}], 0x1, 0x10000, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="07000300010001", 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x3c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "1df107b8b8818293363b9ae197bcfe"}, @NL80211_KEY_IDX={0x5}]}]}, 0x3c}}, 0x2a7447395cefd1d8) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x50, r2, 0x801, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000814}, 0x10) 1.083313813s ago: executing program 1 (id=2671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @local, @mcast2, 0xffffffff, 0x6, 0x0, 0x500, 0x1ec3, 0x40100060, r2}) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.03383714s ago: executing program 4 (id=2672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = accept(r2, &(0x7f0000000140)=@ax25={{0x3, @netrom}, [@remote, @default, @netrom, @bcast, @rose, @netrom, @rose, @null]}, &(0x7f00000001c0)=0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000093ae27e2e593712c0000000000000000085f473031576fd5bafde9769ca713adf3567214f5df1b994d3b107e69f706d08a4b7b5efb7ff96448186dc58c2fad8937f6143181825dc0520883311e3454b9a000"/98, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r8, r6}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x1, 0xfff2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xb8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000980)={{&(0x7f0000000540)=[{0x9fce, 0x8, 0x1, {0x100000000, 0x4}, 0x900000000000, 0x2, 0x80000001}, {0x1, 0xf68, 0x0, {0xe7, 0x100000000}, 0x5, 0xfff, 0x9}, {0x7, 0x4, 0xfffffffffffff859, {0xb2b, 0x77000000000}, 0x7fff, 0x5, 0x2}, {0xfffffffffffffffa, 0x8000000000000000, 0x1, {0x17, 0x69}, 0xe62, 0x800, 0x8001}, {0x9, 0x4, 0x5, {0x8000000000000000, 0xe6}, 0x3, 0xb4c}, {0x4, 0x800, 0x7, {0x7, 0x3}, 0x5, 0x5, 0xc}], 0x6, 0x40, 0x3, 0x26}, {&(0x7f00000006c0)=[{0x1}, {0x28a, 0x3}, {0xfffffffffffffdb5, 0xa}, {0x10, 0xa}, {0x80000000, 0x6}, {0x8, 0x4}, {0x200, 0x1}, {0x5, 0x7ff}, {0x70, 0xe}, {0x0, 0x3}], 0xa, 0x10, 0x9, 0x28}, {&(0x7f0000000780)=[0x8, 0xd5, 0x2, 0x7], 0x4, 0x8, 0x9, 0x6}, {&(0x7f00000007c0)=[{0x100, 0x101, 0x4, 0xe0000000, 0x9}, {0x9, 0xada, 0x3, 0x1, 0x8}, {0x8, 0x9, 0x5, 0x9, 0xfffffff0}, {0xd5e, 0x4, 0xfffffffffffff611, 0x1, 0xfffff7d9}, {0x401, 0x3, 0x4, 0x100, 0x7}, {0x8, 0xeb2, 0x1, 0x7fffffffffffffff}, {0x400000000000, 0x3, 0x4, 0x6, 0x7ff}, {0x49, 0x2, 0x37, 0x70, 0x4}, {0x3, 0xc, 0x7, 0x8, 0xf}], 0x9, 0x28, 0x0, 0x4}, {&(0x7f0000000940)=[0xffff, 0xfffffffffffffff8, 0x1, 0x0, 0x9], 0x5, 0x8, 0x5, 0xee91}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 932.038614ms ago: executing program 1 (id=2673): r0 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0xc, @void}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4040) recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000000)=""/97, 0x61}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4091, 0xffb}], 0x4}, 0x70001}], 0x1, 0x102, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0xae, 0x4, 0xe, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7, 0x8, 0x7, 0xf}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x58}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 812.111059ms ago: executing program 2 (id=2674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x3a, 0xb, 0x70bd26, 0x4002, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0xfffefffe) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x80fd, 0x2}) 727.628904ms ago: executing program 1 (id=2675): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r0) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105e000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc050) 690.787026ms ago: executing program 4 (id=2676): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x51e, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f91124fc60100c03", 0x17}], 0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xffffc000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2140, 0x0) openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) 604.238517ms ago: executing program 2 (id=2677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x200, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb, 0x10cb}, [@IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0x28}}, 0x0) 596.171412ms ago: executing program 1 (id=2678): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x5, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0x9cc63000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x1a) r4 = socket(0xa, 0x2400000001, 0x0) ioctl$sock_ifreq(r4, 0x8948, &(0x7f0000000100)={'vlan0\x00', @ifru_names='veth1_to_team\x00'}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000013000000fc0100080000000000000000ea2fa43c000000100000000005000500000000000a00000000000000000000000000000000000000000000000000000001000000080012000200020000000002000000001000330402"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@li, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) 571.993142ms ago: executing program 4 (id=2679): syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @remote, {[@ssrr={0x89, 0xf, 0xe9, [@multicast2, @remote, @multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0xc000}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002"], 0x98}}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f, 0x1, 0x3, 0x9, 0x0, 0x5}, &(0x7f0000000300)=0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x2e, 0x3e]}}, 0x0, 0x2c}, 0x20) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="b5f8", 0x280}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1801"], 0x118}}], 0x1, 0x40) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfefd, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0600"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@sack={0x5, 0x12, [0x2, 0x7f, 0x7, 0xfa73]}]}}}}}}}}, 0x0) 167.094265ms ago: executing program 0 (id=2680): r0 = socket(0x10, 0x2, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000ba008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000ba008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6(0xa, 0x5, 0x0) (async) r3 = socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r4, 0x1, 0x14, &(0x7f0000003ec0)=""/210, &(0x7f0000003fc0)=0xd2) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) (async) setsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x400, 0x1, 0x25dfdbfb, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x34}}, 0x0) 166.617ms ago: executing program 2 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800ebf0a000000000000657461700000001800028014000700fc411decfb0000000000000000000000000000009ca16e90e25064885e5420f912a485eda7fbc62b9d63466e83f2b3bf05d5da7c70ec009bc393b924b4d13e755cad4f8546d6e2b8fc59444b12fa68f65c875f8271a300af0b4cd1d42032183dd0a916fc5156eb7cf12523c1f4ab5370f71467e2f916295c108f5b452e30e532255dbea09c9c6a572de57e15673ced8c049b6b49d050bb75c2c5a9578b42d7bbd560bc1c1915cc41f6b1acbc0124d051d7c5bf7034b2fac0a37c95165fc1ea683e0d8e", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 165.830308ms ago: executing program 0 (id=2682): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd20020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b700000000f8ff0095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 165.436214ms ago: executing program 0 (id=2683): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110, 0x2}], 0x20}, 0x0) (async, rerun: 64) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000001140)={'team0\x00', 0x5}) (rerun: 64) 162.972433ms ago: executing program 4 (id=2684): r0 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x180000016}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xed}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 162.776335ms ago: executing program 0 (id=2685): sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x6000041}, 0x4000) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) (async) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008041}, 0x20000010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000380)="03a10691df6c68fe9e6c2bb219f9c301e7af3b3931e61cca3e2fc82a4b6eb0bdbca1535b5e5079c66f12187ab087687e12451eb5e491c4224faeae5a9f46999e325186c43bb59729a542e53051f89e1a0df2c926428c06bdf4481b421b2a5fe3b93dad4c6fc50205a26bb70f1fba630e7a8e5290fe70c1dcb206c345d5dd0c87f4a6cc50a8b250e3ff76538b9005760b71585ecd4f3a5c22ce2b6879fc81641092bdf23f51dec692b8", 0xa9}, {0x0}], 0x3}}], 0x2, 0x1405c891) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e63, 0xe7, @mcast2, 0x4007daa}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2d}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 162.263125ms ago: executing program 3 (id=2686): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x40, 0x7, 0x81, 0x8, {{0x8, 0x4, 0x2, 0x37, 0x20, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @multicast2, {[@noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x300, r2, &(0x7f0000000240)={0x30001010}) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="0226963bfa595cb5650697a93b2a19cc5cf50f992853c44c88e0aaecbde6c2eaee4bbc516b9a4376244fba869c96a1d88f17", 0x32}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="98e968b31940a6ad6fbe580232cb6f605d40b2b8163782cdd8356f035d5b6821546d2eb9a6411dcc4f7b14aabd328f5b2c4eab867c795c44d60766dc", 0x3c}], 0x3, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@generic={0x88, 0xb, "4af5135a6dfc1493df"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x3, [{@multicast1, 0x1db}, {@private=0xa010100}]}, @end, @cipso={0x86, 0x10, 0x2, [{0x2, 0xa, "f85ab8038ef622a4"}]}, @timestamp_addr={0x44, 0x44, 0x36, 0x1, 0x5, [{@private=0xa010101, 0x80}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xff}, {@loopback, 0x80000000}, {@local, 0x10}, {@empty, 0x8}, {@multicast1}, {@loopback}, {@multicast1, 0x1}]}, @timestamp_addr={0x44, 0x14, 0xc5, 0x1, 0xa, [{@empty, 0x176}, {@multicast2, 0x8}]}, @lsrr={0x83, 0xb, 0x21, [@private=0xa010100, @loopback]}, @ssrr={0x89, 0xb, 0xee, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010102, @loopback}}}], 0x120}, 0x6040040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x5, &(0x7f0000000300), 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 161.201554ms ago: executing program 4 (id=2687): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004c21}, 0x20048844) 159.486262ms ago: executing program 2 (id=2688): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000002900)=""/239, 0xef}], 0x2}, 0x8910}], 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 71.464075ms ago: executing program 1 (id=2689): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f00000000c0)=0x100, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}}}, &(0x7f0000002100)=0xe8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00') r9 = getpid() sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r9, r6}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002140)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0}, &(0x7f00000021c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r13, &(0x7f0000001780)='ns/ipc\x00') (async) getpid() (async) sendmmsg$unix(r12, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0), 0x0, 0x800}}], 0x2, 0x0) (async) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002240)=@generic={&(0x7f0000002200)='./file0\x00', 0x0, 0x10}, 0x18) r16 = gettid() syz_open_procfs$namespace(r16, &(0x7f00000006c0)='ns/time_for_children\x00') (async) r17 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r17, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r18}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002280)={0x0, 0x0, 0x0}, &(0x7f00000022c0)=0xc) (async) r20 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000002300), 0x80000) (async) r21 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x6, 0x0, &(0x7f0000002340)=[0x7, 0x1000, 0x4, 0xfd, 0xf93, 0x200], 0x7}}, 0x30) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001fc0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="083e018014002500000000f4ffffff00000081c400868008003300", @ANYRES32=0x0, @ANYBLOB="1b00d400e2b45ba5b50e81e61667acb5ffd9ccf869b897a11b1d560008004c00", @ANYRES32=0x0, @ANYBLOB="0800dc00", @ANYRES32=r2, @ANYBLOB="04000f800400d8800400d28036664fb0789b9bb9f6fe7c5822c0211ee9724c03dc803521666d94d4568e2ab14ca03df29a1587aeb15a21dd375b745c77f48aaf971121a5deae72615f819c0fc5404c99c1f7ea3c467e6d41c3f9abca76d6fa2496d631bfece4578258259ef7d9c8c8e2cd6fa8e017c5b6c6100847f69dd89fee3d2483720b1f4efc04003080"], 0x1348}, {&(0x7f0000001c80)={0x2d8, 0x20, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x36, 0x12e, 0x0, 0x1, [@nested={0x4, 0x97}, @typed={0x8, 0x65, 0x0, 0x0, @uid}, @generic="baee87235d5791ebd54fc87988c9eb0cf723f908074c31f6f003921e5b087eab60a9e2469af8"]}, @generic="ad7238e8d2488d9fe439bb9ae973c88b25e26146bb668346e1b6d6b35c103eb5f2b7911d02b2a2738a6023c93709682254d3917dde0b748ea42e166c1e6b0eeed3a9aff2c61f31467cf3d410272b34d36d47f81cf7cdc90323a0070cc64fdfaeb2645a6a480a21e6d453801a8e5725af5e9c24fd42de37e6088e3de2f96fcbe00e98151247a8529061948a1e255e91da34a4d84cfa1f024dd10b231947a4ff63276e2aed37bc9cad1b9bf08d87488b69df0d115b51a57b04e388cbce29ebcbc514", @nested={0x1c2, 0x1, 0x0, 0x1, [@generic="684d4c237b892f3a6afa12b0f617b7a67c6ceab716b9903c76ade153bd741c6232867ada84109f2f277c3346335567992d83a0f39b7805be815c4949a9a22d44a491c96237500330fde6ddddfac961aa748915f02b8e330345a67afec387ed396c1ee0b5517f3fafbf9f149b95c5cc6cc4c1a8ddfd81d84ad56eba1118e66506efe7e5d8a548f3aedc1472fe0bb809c9d4aed603703e099673d7d50123f612", @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x7c, 0x0, 0x0, @u32=0x25}, @nested={0x4, 0x122}, @nested={0x4, 0xad}, @typed={0x8, 0xb8, 0x0, 0x0, @uid}, @generic="1122cb3fd6cf2483946a27235cc2dbb5038868f82603ae9147d5640202a2f545d72e4a3c8018654bfe01ae3035ae470c237d9dd697e5a6ad78c88d26a38a4f833f53a072e38c16b569d354073f1bdfbe13e81760ac30186ddc6d89a79453eaa793af36aef98ed3bd9c0ce2ad7ed8b4eef1cccad8565573c2893497687e3d8c36d2b8a81ce7c6bbbc6f56df03e67b2c38f3b7b5550a93e54cae9ba9934ade31c5f66ab35737c752f33d9c3afce6d185c5fcf71db7b8faa96e53227e2ca2225a8528dc65e39bf15c04603a43b2f7a3de203974fe499deb83d20ea9eaf557fef0327ae7862778f77a7d0ca5e33975b6a5bd1206a1"]}, @typed={0x8, 0xa1, 0x0, 0x0, @fd=r1}]}, 0x2d8}, {&(0x7f0000001f80)={0x10, 0x3a, 0x200, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x3, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r7}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r14}}}, @rights={{0x18, 0x1, 0x1, [r1, r15]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r19}}}, @rights={{0x24, 0x1, 0x1, [r2, r20, r21, r1, r0]}}], 0xc0, 0x1}, 0x2011) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a69600000000500040000000000090002597309000000000000000007800c0001800800014000000000080006000000000005000500020000000500010006000000"], 0x60}}, 0x0) (async) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 56.993901ms ago: executing program 4 (id=2690): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000002010100000000000045b80000000006fa06400000000004cbf911ccce06489b82f813"], 0x28}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x20008800) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) (async) getsockname$packet(r7, 0x0, &(0x7f0000000200)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc71e16e819ce1f22}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xc0, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x0, 0x0, {0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x0, 0x5, 0x8}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffc}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}, @NL80211_ATTR_BSS_SELECT={0x50, 0xe3, 0x0, 0x1, {0x4c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x3}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xe, 0x7f}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xd1}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x8}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xfffffffb}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8, {0xf0b7, 0x83, 0xec2a, 0x7f}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="545d8fa02a7f"}, @NL80211_ATTR_PRIVACY={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000060}, 0x40800) 0s ago: executing program 1 (id=2691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x80) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4008044) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) kernel console output (not intermixed with test programs): syz.1.450'. [ 153.357544][ T7520] netlink: 'syz.4.459': attribute type 10 has an invalid length. [ 153.374679][ T7520] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 153.809299][ T7536] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 153.849643][ T7506] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 154.477584][ T7566] openvswitch: netlink: Key type 70 is out of range max 32 [ 154.623926][ T7563] gre1: entered promiscuous mode [ 155.150302][ T5641] Bluetooth: hci4: command 0x0401 tx timeout [ 155.382171][ T7601] syzkaller0: entered promiscuous mode [ 155.418559][ T7601] syzkaller0: entered allmulticast mode [ 157.404529][ T7578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.707810][ T7640] __nla_validate_parse: 4 callbacks suppressed [ 157.707900][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.484'. [ 157.731638][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.484'. [ 158.219581][ T7646] syzkaller0: entered promiscuous mode [ 158.226596][ T7646] syzkaller0: entered allmulticast mode [ 158.252777][ T7645] debugfs: 'KŠŸu ™crµ±K:‘£’ˆĢ„ŻBßŻ£| “¼ŚŽlS·œ-!' already exists in 'ieee80211' [ 158.278806][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 158.424604][ T7667] openvswitch: netlink: IPv4 tun info is not correct [ 160.708498][ T7661] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 160.912041][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.495'. [ 160.975853][ T7681] netlink: 'syz.1.495': attribute type 7 has an invalid length. [ 161.017076][ T7681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.495'. [ 161.111429][ T7681] erspan0: entered promiscuous mode [ 161.169010][ T7681] gretap0: entered promiscuous mode [ 161.493378][ T7717] netlink: 192 bytes leftover after parsing attributes in process `syz.3.503'. [ 161.707999][ T7729] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 161.877651][ T7736] netlink: 'syz.4.511': attribute type 11 has an invalid length. [ 161.894322][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.511'. [ 161.925758][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.511'. [ 161.997014][ T7740] : entered promiscuous mode [ 162.181821][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 162.198722][ T7750] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 162.217599][ T7750] netlink: 224 bytes leftover after parsing attributes in process `syz.2.515'. [ 162.250270][ T152] batadv1: left promiscuous mode [ 162.291994][ T7754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.523105][ T7762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.804017][ T7781] netlink: 'syz.1.524': attribute type 4 has an invalid length. [ 162.881145][ T7783] netlink: 'syz.4.528': attribute type 12 has an invalid length. [ 162.923111][ T7783] __nla_validate_parse: 2 callbacks suppressed [ 162.923131][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 162.937803][ T7792] netlink: 'syz.4.528': attribute type 12 has an invalid length. [ 162.970831][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 162.987151][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.530'. [ 163.047401][ T7792] netlink: 'syz.4.528': attribute type 12 has an invalid length. [ 163.074804][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 163.110589][ T7799] netlink: 52 bytes leftover after parsing attributes in process `syz.3.531'. [ 163.236025][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 163.717067][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 163.816266][ T7836] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 163.831635][ T7836] bond3 (unregistering): Released all slaves [ 164.185543][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 164.272300][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 164.824314][ T7891] netlink: 'syz.0.560': attribute type 21 has an invalid length. [ 164.858688][ T7891] netlink: 128 bytes leftover after parsing attributes in process `syz.0.560'. [ 164.910430][ T7891] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 164.918869][ T7891] netlink: 'syz.0.560': attribute type 5 has an invalid length. [ 165.393645][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.404111][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.563997][ T7939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.604292][ T7909] syz.3.565 (7909) used greatest stack depth: 17944 bytes left [ 165.622042][ T7939] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 165.651639][ T7939] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 165.695904][ T7939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.140576][ T7957] syzkaller0: entered promiscuous mode [ 166.148857][ T7957] syzkaller0: entered allmulticast mode [ 166.156851][ T7972] xt_hashlimit: max too large, truncated to 1048576 [ 166.368955][ T7967] tipc: Started in network mode [ 166.376758][ T7967] tipc: Node identity 92a016c8da49, cluster identity 4711 [ 166.395564][ T7967] tipc: Enabled bearer , priority 0 [ 166.412981][ T7956] tipc: Resetting bearer [ 166.426821][ T7956] tipc: Resetting bearer [ 168.042599][ T7956] tipc: Disabling bearer [ 168.053136][ T1223] tipc: Node number set to 1223235272 [ 189.611877][ T8000] raw_sendmsg: syz.1.583 forgot to set AF_INET. Fix it! [ 190.107801][ T8021] validate_nla: 3 callbacks suppressed [ 190.107818][ T8021] netlink: 'syz.0.590': attribute type 12 has an invalid length. [ 190.145112][ T8021] __nla_validate_parse: 8 callbacks suppressed [ 190.145130][ T8021] netlink: 148 bytes leftover after parsing attributes in process `syz.0.590'. [ 190.168352][ T8021] netlink: 'syz.0.590': attribute type 12 has an invalid length. [ 190.178495][ T8021] netlink: 148 bytes leftover after parsing attributes in process `syz.0.590'. [ 190.570012][ T8041] netlink: 'syz.4.596': attribute type 8 has an invalid length. [ 190.625761][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 190.671594][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.680146][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.930698][ T8063] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.600'. [ 190.997665][ T8063] openvswitch: netlink: Flow key attr not present in new flow. [ 191.084387][ T8074] netlink: 'syz.4.606': attribute type 33 has an invalid length. [ 191.140686][ T8074] bridge0: port 3(batadv1) entered blocking state [ 191.160924][ T8074] bridge0: port 3(batadv1) entered disabled state [ 191.172049][ T8074] batadv1: entered allmulticast mode [ 191.185395][ T8074] batadv1: entered promiscuous mode [ 191.619891][ T1170] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 191.633181][ T1170] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 191.720429][ T8110] erspan0: entered promiscuous mode [ 191.739388][ T8110] erspan0: entered allmulticast mode [ 192.040559][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.618'. [ 194.064354][ T8079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.361918][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 194.367482][ T8139] sctp: [Deprecated]: syz.3.621 (pid 8139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.367482][ T8139] Use struct sctp_sack_info instead [ 194.380536][ T8136] batadv2: entered allmulticast mode [ 194.680785][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.702415][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.250360][ T152] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.281020][ T152] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.311869][ T152] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.315163][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.337242][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.343109][ T152] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.367231][ T152] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.412950][ T152] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.444961][ T152] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.477852][ T152] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.597977][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 195.830080][ T8196] netlink: 84 bytes leftover after parsing attributes in process `syz.3.635'. [ 196.303387][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 196.333105][ T8221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.643'. [ 196.346363][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.643'. [ 196.490744][ T8224] bridge0: port 3(syz_tun) entered blocking state [ 196.509816][ T8224] bridge0: port 3(syz_tun) entered disabled state [ 196.540899][ T8224] syz_tun: entered allmulticast mode [ 196.561527][ T8224] syz_tun: entered promiscuous mode [ 196.717499][ T8229] netlink: 'syz.4.646': attribute type 4 has an invalid length. [ 196.747972][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 196.791420][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 196.826923][ T8231] veth1_macvtap: left promiscuous mode [ 196.987902][ T8242] netlink: 104 bytes leftover after parsing attributes in process `syz.2.651'. [ 197.066626][ T8244] syzkaller0: entered promiscuous mode [ 197.104081][ T8244] syzkaller0: entered allmulticast mode [ 197.369993][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 197.393832][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 197.425707][ T8255] netlink: 'syz.3.654': attribute type 1 has an invalid length. [ 198.274792][ T8285] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 198.335160][ T8283] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 198.349924][ T8287] xt_hashlimit: overflow, try lower: 3/0 [ 198.512063][ T8291] tipc: Enabled bearer , priority 10 [ 198.736219][ T8303] ip6gretap0: entered promiscuous mode [ 198.904161][ T8318] SET target dimension over the limit! [ 198.944192][ T8318] mac80211_hwsim hwsim5 ’: renamed from wlan1 (while UP) [ 199.637796][ T8327] netlink: 'syz.3.675': attribute type 6 has an invalid length. [ 199.691279][ T8329] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 199.780630][ T8331] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 199.803580][ T8331] macvlan0: entered promiscuous mode [ 199.810185][ T8331] macvlan0: entered allmulticast mode [ 199.816214][ T8331] bond2: entered promiscuous mode [ 199.821456][ T8331] bridge2: entered promiscuous mode [ 199.831933][ T8331] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 199.841056][ T8331] bond2: left promiscuous mode [ 199.845933][ T8331] bridge2: left promiscuous mode [ 201.619858][ T8297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.797458][ T8333] xt_hashlimit: invalid interval [ 201.876298][ T8341] __nla_validate_parse: 2 callbacks suppressed [ 201.876319][ T8341] netlink: 96 bytes leftover after parsing attributes in process `syz.0.677'. [ 201.901691][ T8343] netlink: 96 bytes leftover after parsing attributes in process `syz.0.677'. [ 201.927002][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.679'. [ 202.000011][ T8340] vlan2: entered allmulticast mode [ 202.016449][ T8343] 8021q: VLANs not supported on gre0 [ 202.023705][ T8341] 8021q: VLANs not supported on gre0 [ 202.031352][ T8352] bridge0: port 4(gretap0) entered blocking state [ 202.038114][ T8352] bridge0: port 4(gretap0) entered disabled state [ 202.044934][ T8352] gretap0: entered allmulticast mode [ 202.331785][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 202.366204][ T8370] netlink: 'syz.3.688': attribute type 1 has an invalid length. [ 202.367443][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 202.402767][ T8372] IPVS: length: 8 != 1152 [ 202.622541][ T8388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.694'. [ 202.666350][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.691'. [ 202.691593][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 203.033490][ T8411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.051183][ T8411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.212989][ T8411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.227145][ T8411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.235754][ T8432] sock: sock_timestamping_bind_phc: sock not bind to device [ 203.254934][ T8432] netlink: 248 bytes leftover after parsing attributes in process `syz.1.706'. [ 203.266866][ T8432] netlink: 52 bytes leftover after parsing attributes in process `syz.1.706'. [ 203.479482][ T8411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.510117][ T8411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.753833][ T8464] netlink: 'syz.3.711': attribute type 10 has an invalid length. [ 203.813180][ T8411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.826243][ T8411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.908803][ T8468] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 203.909648][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.926353][ T8464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.945585][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.958495][ T8464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.285422][ T8484] xfrm2: entered promiscuous mode [ 204.293009][ T8484] xfrm2: entered allmulticast mode [ 204.306631][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.332087][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.406442][ T33] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.417989][ T33] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.528352][ T33] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.562602][ T33] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.595340][ T8496] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 204.628877][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.668658][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.834301][ T8496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.892811][ T8511] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 205.262875][ T8531] netlink: 'syz.3.732': attribute type 3 has an invalid length. [ 205.273626][ T8531] netlink: 'syz.3.732': attribute type 2 has an invalid length. [ 205.307734][ T8531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.398772][ T8538] netlink: 'syz.2.733': attribute type 4 has an invalid length. [ 205.750714][ T8566] bridge4: entered promiscuous mode [ 205.758421][ T8566] bridge4: entered allmulticast mode [ 205.775559][ T8566] team0: Port device bridge4 added [ 205.787673][ T8570] bridge0: port 3(team0) entered blocking state [ 205.796436][ T8553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.798253][ T8570] bridge0: port 3(team0) entered disabled state [ 205.812656][ T8552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.816140][ T8570] team0: entered allmulticast mode [ 205.836673][ T8570] team_slave_0: entered allmulticast mode [ 205.843801][ T8570] team_slave_1: entered allmulticast mode [ 205.853680][ T8570] dummy0: entered allmulticast mode [ 205.867064][ T8570] team0: entered promiscuous mode [ 205.873776][ T8570] team_slave_0: entered promiscuous mode [ 205.880486][ T8570] team_slave_1: entered promiscuous mode [ 205.889446][ T8570] dummy0: entered promiscuous mode [ 205.924255][ T8570] bridge0: port 3(team0) entered blocking state [ 205.935045][ T8570] bridge0: port 3(team0) entered forwarding state [ 206.303853][ T8590] Cannot find set identified by id 4 to match [ 206.688860][ T8599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.748945][ T8560] infiniband syz2: set active [ 206.785509][ T8560] infiniband syz2: added ipvlan0 [ 207.014213][ T8560] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 207.040154][ T8560] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 207.061964][ T8560] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 207.222288][ T8560] RDS/IB: syz2: added [ 207.261109][ T8560] smc: adding ib device syz2 with port count 1 [ 207.268255][ T8560] smc: ib device syz2 port 1 has no pnetid [ 207.501463][ T8649] __nla_validate_parse: 14 callbacks suppressed [ 207.501484][ T8649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.762'. [ 207.504598][ T8646] syzkaller0: entered promiscuous mode [ 207.555689][ T8646] syzkaller0: entered allmulticast mode [ 208.085252][ T8670] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 208.136104][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 212.174046][ T8704] netlink: 48 bytes leftover after parsing attributes in process `syz.1.776'. [ 212.215857][ T9] IPVS: starting estimator thread 0... [ 212.226481][ T8700] IPVS: set_ctl: invalid protocol: 0 172.30.0.1:20001 [ 212.340202][ T8706] IPVS: using max 27 ests per chain, 64800 per kthread [ 212.407125][ T8711] bond3: Unable to set up delay as MII monitoring is disabled [ 212.440693][ T8711] bond3 (unregistering): Released all slaves [ 213.202444][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'. [ 213.560907][ T8753] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 213.569773][ T8753] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 213.694284][ T8767] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.796'. [ 214.897568][ T8828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.810'. [ 215.270622][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.815'. [ 217.780717][ T8817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.791459][ T8834] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 217.805326][ T8834] netlink: 'syz.3.811': attribute type 3 has an invalid length. [ 217.824037][ T8834] netlink: 172 bytes leftover after parsing attributes in process `syz.3.811'. [ 217.834815][ T8834] NCSI netlink: No device for ifindex 813332851 [ 218.003487][ T8859] syz_tun: entered allmulticast mode [ 218.061102][ T8859] bond0: entered promiscuous mode [ 218.077105][ T8859] bond_slave_0: entered promiscuous mode [ 218.091082][ T8859] bond_slave_1: entered promiscuous mode [ 218.280897][ T8874] netlink: 'syz.0.823': attribute type 22 has an invalid length. [ 218.329620][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 218.644460][ T8908] netlink: 156 bytes leftover after parsing attributes in process `syz.2.832'. [ 218.688832][ T8908] netlink: 156 bytes leftover after parsing attributes in process `syz.2.832'. [ 218.734163][ T8913] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 219.066475][ T8928] vlan1: entered allmulticast mode [ 219.077331][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 219.081179][ T8928] veth0_vlan: entered allmulticast mode [ 219.265781][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 219.363008][ T8941] netlink: 92 bytes leftover after parsing attributes in process `syz.2.845'. [ 219.479395][ T8947] netlink: 68 bytes leftover after parsing attributes in process `syz.1.846'. [ 219.504229][ T8949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.848'. [ 219.525878][ T8949] netlink: 84 bytes leftover after parsing attributes in process `syz.0.848'. [ 219.561989][ T8949] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 219.611858][ T8952] netlink: 80 bytes leftover after parsing attributes in process `syz.2.850'. [ 219.870140][ T8967] syzkaller0: entered promiscuous mode [ 219.901011][ T8967] syzkaller0: entered allmulticast mode [ 219.935551][ T8974] sctp: [Deprecated]: syz.4.857 (pid 8974) Use of int in max_burst socket option deprecated. [ 219.935551][ T8974] Use struct sctp_assoc_value instead [ 220.095222][ T8974] bridge2: port 1(vlan2) entered blocking state [ 220.118210][ T8974] bridge2: port 1(vlan2) entered disabled state [ 220.138556][ T8974] vlan2: entered allmulticast mode [ 220.156775][ T8974] bridge2: entered allmulticast mode [ 220.185726][ T8974] vlan2: left allmulticast mode [ 220.204971][ T8974] bridge2: left allmulticast mode [ 220.504938][ T8990] bond3: entered promiscuous mode [ 220.534035][ T8989] netlink: 'syz.1.860': attribute type 13 has an invalid length. [ 220.594713][ T9003] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 220.642470][ T9008] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 220.747782][ T9010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.468834][ T9058] netlink: 'syz.4.880': attribute type 1 has an invalid length. [ 221.546691][ T9058] bond5: (slave geneve2): making interface the new active one [ 221.560997][ T9058] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 221.574093][ T1170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.601124][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.616131][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.644838][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.901919][ T9090] netlink: 'syz.1.887': attribute type 8 has an invalid length. [ 221.979344][ T9092] nbd: must specify an index to disconnect [ 222.202701][ T9107] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 222.315046][ T9107] bond5: entered promiscuous mode [ 222.320735][ T9107] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.364558][ T9117] netlink: 'syz.1.897': attribute type 1 has an invalid length. [ 222.436455][ T9117] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.455754][ T9107] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.463396][ T9107] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 222.474186][ T9107] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 222.487346][ T9107] bond5: (slave vti0): making interface the new active one [ 222.495349][ T9107] vti0: entered promiscuous mode [ 222.501523][ T9107] bond5: (slave vti0): Enslaving as an active interface with an up link [ 222.613543][ T9123] bond5: (slave geneve2): making interface the new active one [ 222.641868][ T9123] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 222.658966][ T9130] veth0: entered promiscuous mode [ 222.732328][ T9137] netlink: 'syz.4.902': attribute type 2 has an invalid length. [ 223.000985][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 223.011619][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 223.011805][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 223.023360][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 223.044453][ T9148] geneve2: entered promiscuous mode [ 223.165472][ T9157] netlink: 'syz.3.909': attribute type 3 has an invalid length. [ 223.403150][ T9169] __nla_validate_parse: 15 callbacks suppressed [ 223.403172][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 223.440132][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 223.495114][ T9176] gre1: entered promiscuous mode [ 223.501709][ T9176] gre1: entered allmulticast mode [ 223.595501][ T9178] bond6: entered promiscuous mode [ 223.604833][ T9178] bond6: entered allmulticast mode [ 223.611068][ T9178] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.958099][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.920'. [ 224.015174][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'. [ 224.052131][ T9204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.180681][ T9210] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 224.304637][ T9222] set match dimension is over the limit! [ 224.405324][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 224.773108][ T9256] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 224.895206][ T9264] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 225.002597][ T9264] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 225.082150][ T9264] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 225.115964][ T9281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.945'. [ 225.127138][ T9284] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20000 [ 225.139237][ T9285] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20000 [ 225.140095][ T9264] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 225.172892][ T9279] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 225.186703][ T9264] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 225.247269][ T9264] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 225.320198][ T9264] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 225.338980][ T9264] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 225.365385][ T9264] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 225.466093][ T9264] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 225.544148][ T9304] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.951'. [ 225.591507][ T9309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.953'. [ 225.618616][ T9309] netlink: 21 bytes leftover after parsing attributes in process `syz.1.953'. [ 225.646039][ T9309] netlink: 21 bytes leftover after parsing attributes in process `syz.1.953'. [ 225.977037][ T9326] xfrm1: entered allmulticast mode [ 226.581227][ T9368] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 226.957304][ T9372] syzkaller1: entered promiscuous mode [ 226.976450][ T9372] syzkaller1: entered allmulticast mode [ 227.275649][ T9386] xt_hashlimit: size too large, truncated to 1048576 [ 227.445375][ T9379] bond5: option lp_interval: invalid value (0) [ 227.472095][ T9379] bond5: option lp_interval: allowed values 1 - 2147483647 [ 227.488236][ T9379] bond5 (unregistering): Released all slaves [ 227.496249][ T9397] openvswitch: netlink: Flow key attr not present in new flow. [ 227.854092][ T9414] macvlan2: entered promiscuous mode [ 227.862616][ T9414] macvlan2: entered allmulticast mode [ 227.871411][ T9414] bond5: entered promiscuous mode [ 227.882885][ T9414] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.923398][ T9414] bond5: left promiscuous mode [ 229.386068][ T9352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.401094][ T9429] netlink: 'syz.0.986': attribute type 11 has an invalid length. [ 229.426965][ T9429] __nla_validate_parse: 7 callbacks suppressed [ 229.426988][ T9429] netlink: 228 bytes leftover after parsing attributes in process `syz.0.986'. [ 229.585782][ T9442] netlink: 60 bytes leftover after parsing attributes in process `syz.2.989'. [ 232.617872][ T9448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.798923][ T9491] validate_nla: 52 callbacks suppressed [ 232.798942][ T9491] netlink: 'syz.4.1005': attribute type 4 has an invalid length. [ 232.831299][ T9494] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 232.917517][ T9494] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 232.924458][ T9499] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 232.931496][ T9494] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 233.101866][ T9501] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 233.187079][ T9519] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.191053][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 233.230270][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 233.248887][ T9499] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1006'. [ 233.290508][ T9499] veth1_to_bridge: entered allmulticast mode [ 233.321252][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 233.340466][ T9499] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1006'. [ 233.351647][ T9525] netlink: 'syz.1.1012': attribute type 11 has an invalid length. [ 233.367550][ T9525] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1012'. [ 233.382272][ T9527] : entered promiscuous mode [ 233.493763][ T30] audit: type=1804 audit(1779685783.676:2): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1014" name="/newroot/217/cgroup.controllers" dev="tmpfs" ino=1122 res=1 errno=0 [ 233.576254][ T30] audit: type=1800 audit(1779685783.706:3): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1014" name="cgroup.controllers" dev="tmpfs" ino=1122 res=0 errno=0 [ 233.613871][ T9537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1018'. [ 233.633781][ T9538] netlink: 'syz.0.1017': attribute type 29 has an invalid length. [ 233.643832][ T9537] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1018'. [ 233.662560][ T9538] netlink: 'syz.0.1017': attribute type 29 has an invalid length. [ 233.788068][ T9540] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 234.147674][ T9555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.364328][ T9569] bridge0: port 3(syz_tun) entered blocking state [ 234.371064][ T9569] bridge0: port 3(syz_tun) entered listening state [ 234.378850][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.386093][ T9569] bridge0: port 2(bridge_slave_1) entered listening state [ 234.393792][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.401118][ T9569] bridge0: port 1(bridge_slave_0) entered listening state [ 234.452893][ T9575] netlink: 'syz.4.1033': attribute type 15 has an invalid length. [ 235.012912][ T9609] siw: device registration error -23 [ 235.051640][ T9609] __nla_validate_parse: 4 callbacks suppressed [ 235.051658][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 235.196935][ T9622] veth1_macvtap: entered allmulticast mode [ 235.215366][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 235.298105][ T9631] sctp: [Deprecated]: syz.2.1048 (pid 9631) Use of int in max_burst socket option. [ 235.298105][ T9631] Use struct sctp_assoc_value instead [ 235.328337][ T9622] veth1_macvtap (unregistering): left allmulticast mode [ 235.373865][ T9635] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1048'. [ 235.435864][ T9637] openvswitch: netlink: Message has 8 unknown bytes. [ 235.443182][ T9637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.458749][ T9637] openvswitch: netlink: Message has 8 unknown bytes. [ 235.465895][ T9637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.684493][ T9650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1056'. [ 235.715804][ T9650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1056'. [ 235.892445][ T9660] netlink: 'syz.3.1058': attribute type 8 has an invalid length. [ 236.249893][ T9689] openvswitch: netlink: IP tunnel dst address not specified [ 236.288770][ T9691] openvswitch: netlink: IP tunnel dst address not specified [ 236.501981][ T9648] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.542320][ T9648] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 236.573976][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1070'. [ 236.775623][ T9648] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.805735][ T9648] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 236.871138][ T9648] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.883267][ T9648] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 236.929781][ T9648] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.947412][ T9648] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 236.987183][ T9648] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.018101][ T9648] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 237.094634][ T9731] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1077'. [ 237.112311][ T9731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1077'. [ 237.272903][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 237.448570][ T9731] team0: left allmulticast mode [ 237.473785][ T9731] team_slave_0: left allmulticast mode [ 237.483542][ T9731] team_slave_1: left allmulticast mode [ 237.490088][ T9731] dummy0: left allmulticast mode [ 237.520392][ T9731] team0: left promiscuous mode [ 237.527035][ T9731] team_slave_0: left promiscuous mode [ 237.544724][ T9731] team_slave_1: left promiscuous mode [ 237.552222][ T9731] dummy0: left promiscuous mode [ 237.561056][ T9731] bridge0: port 3(team0) entered disabled state [ 237.568056][ T9757] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1082'. [ 237.584816][ T9731] bridge_slave_1: left allmulticast mode [ 237.601481][ T9731] bridge_slave_1: left promiscuous mode [ 237.612023][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.626003][ T9731] bridge_slave_0: left promiscuous mode [ 237.638168][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.760165][ T9748] IPVS: Error connecting to the multicast addr [ 237.778144][ T9757] 8021q: VLANs not supported on gre0 [ 237.927392][ T9771] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 238.898048][ T9823] netlink: 'syz.0.1098': attribute type 2 has an invalid length. [ 239.055336][ T9831] netlink: 'syz.2.1100': attribute type 1 has an invalid length. [ 239.269676][ T9838] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 239.460833][ T9843] bond2 (unregistering): Released all slaves [ 239.518428][ T63] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.560468][ T63] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.584086][ T63] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.611987][ T63] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.117587][ T9886] __nla_validate_parse: 5 callbacks suppressed [ 240.117605][ T9886] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1113'. [ 240.716767][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 240.759811][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 240.802898][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 240.953272][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 240.975981][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 240.993202][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 241.206278][ T9937] nbd1: detected capacity change from 0 to 63 [ 241.230987][ T9936] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1128'. [ 241.246288][ T5635] block nbd1: Receive control failed (result -32) [ 241.252032][ T8683] block nbd1: Send control failed (result -32) [ 241.256765][ T5641] block nbd1: Receive control failed (result -32) [ 241.287887][ T8683] block nbd1: Request send failed, requeueing [ 241.401053][ T1557] block nbd1: Dead connection, failed to find a fallback [ 241.411928][ T1557] block nbd1: shutting down sockets [ 241.417603][ T1557] blk_print_req_error: 138 callbacks suppressed [ 241.417622][ T1557] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.436303][ T1557] buffer_io_error: 138 callbacks suppressed [ 241.436315][ T1557] Buffer I/O error on dev nbd1, logical block 0, async page read [ 241.462942][ T8683] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.473461][ T8683] Buffer I/O error on dev nbd1, logical block 1, async page read [ 241.482297][ T8683] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.494694][ T8683] Buffer I/O error on dev nbd1, logical block 2, async page read [ 241.503215][ T8683] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.513657][ T8683] Buffer I/O error on dev nbd1, logical block 3, async page read [ 241.521973][ T8683] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.532916][ T8683] Buffer I/O error on dev nbd1, logical block 0, async page read [ 241.541763][ T8683] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.551723][ T8683] Buffer I/O error on dev nbd1, logical block 1, async page read [ 241.560001][ T8683] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.569774][ T8683] Buffer I/O error on dev nbd1, logical block 2, async page read [ 241.577762][ T8683] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.587449][ T8683] Buffer I/O error on dev nbd1, logical block 3, async page read [ 241.596506][ T8683] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.611830][ T8683] Buffer I/O error on dev nbd1, logical block 0, async page read [ 241.630063][ T8683] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.649667][ T8683] Buffer I/O error on dev nbd1, logical block 1, async page read [ 241.695769][ T8683] ldm_validate_partition_table(): Disk read failed. [ 241.737081][ T8683] Dev nbd1: unable to read RDB block 0 [ 241.766949][ T8683] nbd1: unable to read partition table [ 241.832322][ T8683] ldm_validate_partition_table(): Disk read failed. [ 241.894293][ T8683] Dev nbd1: unable to read RDB block 0 [ 241.954407][ T8683] nbd1: unable to read partition table [ 242.038830][ T9993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1138'. [ 242.051385][ T9998] syzkaller0: entered promiscuous mode [ 242.066365][ T9998] syzkaller0: entered allmulticast mode [ 242.079691][ T30] audit: type=1107 audit(1779685792.256:4): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 242.083492][ T9997] x_tables: duplicate underflow at hook 3 [ 242.189609][ T9993] x_tables: duplicate underflow at hook 3 [ 242.201256][T10004] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1141'. [ 242.213284][T10003] tipc: Enabling of bearer rejected, failed to enable media [ 242.264170][T10010] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 242.309588][T10010] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 242.457384][T10019] xt_l2tp: v2 tid > 0xffff: 1114244 [ 242.506934][T10023] netlink: 'syz.0.1146': attribute type 5 has an invalid length. [ 242.539292][T10023] netlink: 'syz.0.1146': attribute type 2 has an invalid length. [ 242.704954][T10030] tipc: Enabling of bearer rejected, already enabled [ 243.807156][T10099] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 244.059619][T10106] can: request_module (can-proto-0) failed. [ 244.367151][T10119] syzkaller0: entered promiscuous mode [ 244.373183][T10119] syzkaller0: entered allmulticast mode [ 244.380345][T10128] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 244.489218][T10137] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.223342][T10181] __nla_validate_parse: 18 callbacks suppressed [ 247.223363][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 247.296433][T10185] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1190'. [ 247.326143][T10185] netlink: 320 bytes leftover after parsing attributes in process `syz.0.1190'. [ 247.348987][T10181] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.363151][T10188] bond6: entered promiscuous mode [ 247.373861][T10188] bond6: entered allmulticast mode [ 247.381189][T10193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.387492][T10188] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.400432][T10188] team0: Port device bond6 added [ 247.428903][T10181] bond6: (slave vcan0): refused to change device type [ 247.609218][T10206] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1198'. [ 247.802999][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 247.954330][T10224] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1206'. [ 248.057154][T10228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1208'. [ 248.174122][T10230] SET target dimension over the limit! [ 248.194722][T10236] vxcan0: tx address claim with dlc 0 [ 248.601036][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1217'. [ 248.624373][T10260] netlink: 'syz.2.1217': attribute type 1 has an invalid length. [ 248.660134][T10260] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1217'. [ 248.993327][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 249.025113][T10281] netlink: 'syz.4.1220': attribute type 13 has an invalid length. [ 249.616948][T10304] netlink: 'syz.2.1227': attribute type 1 has an invalid length. [ 249.675781][T10299] bond8 (unregistering): Released all slaves [ 249.711761][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 249.720780][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 249.728022][ C0] bridge0: port 3(syz_tun) entered learning state [ 249.753242][T10304] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 251.012270][T10382] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 251.038068][T10382] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 251.578550][T10403] netlink: 'syz.4.1247': attribute type 4 has an invalid length. [ 251.609414][T10411] netlink: 'syz.4.1247': attribute type 4 has an invalid length. [ 252.032289][T10427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.239839][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.247722][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.312233][T10432] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 252.447280][T10441] __nla_validate_parse: 4 callbacks suppressed [ 252.447299][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1258'. [ 252.479571][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'. [ 252.757399][T10462] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1264'. [ 252.967979][T10468] netlink: 'syz.0.1267': attribute type 4 has an invalid length. [ 253.385504][T10498] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1273'. [ 254.086421][T10542] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 254.168242][T10542] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 254.276267][T10552] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 254.299310][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 254.420139][T10562] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 254.440721][T10560] syzkaller0: entered promiscuous mode [ 254.446509][T10560] syzkaller0: entered allmulticast mode [ 254.449535][T10563] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 254.581295][T10552] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1290'. [ 254.614624][T10570] syzkaller0: entered promiscuous mode [ 254.629568][T10570] syzkaller0: entered allmulticast mode [ 254.666729][T10577] netlink: 'syz.1.1298': attribute type 11 has an invalid length. [ 254.788374][T10581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.847617][T10581] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 254.958080][T10584] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 255.089909][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 256.752222][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.069785][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 265.077389][ C0] bridge0: topology change detected, propagating [ 265.084190][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.091441][ C0] bridge0: topology change detected, propagating [ 265.097922][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.105202][ C0] bridge0: topology change detected, propagating [ 265.790064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.802420][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 278.983206][T10639] tipc: Enabling of bearer rejected, already enabled [ 279.035663][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 279.220301][T10654] netlink: 'syz.2.1317': attribute type 1 has an invalid length. [ 279.304081][T10654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.324817][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'. [ 279.351093][T10660] vlan2: entered allmulticast mode [ 279.372875][T10660] bond2: entered allmulticast mode [ 279.443469][T10654] bond2: (slave geneve2): making interface the new active one [ 279.470516][T10654] geneve2: entered allmulticast mode [ 279.492352][T10654] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 279.656265][T10669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1320'. [ 279.717198][T10672] tipc: Enabling of bearer rejected, failed to enable media [ 280.472713][T10707] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 280.497813][T10707] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.504207][T10712] netlink: 'syz.0.1332': attribute type 2 has an invalid length. [ 280.598445][T10712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1332'. [ 280.650619][T10712] tipc: Invalid UDP bearer configuration [ 280.650682][T10712] tipc: Enabling of bearer rejected, failed to enable media [ 280.870520][T10727] netlink: 'syz.0.1337': attribute type 63 has an invalid length. [ 280.903354][T10727] netlink: 'syz.0.1337': attribute type 63 has an invalid length. [ 280.951097][T10732] netlink: 'syz.2.1338': attribute type 12 has an invalid length. [ 280.990603][T10732] netlink: 'syz.2.1338': attribute type 29 has an invalid length. [ 281.019547][T10732] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1338'. [ 281.029510][T10732] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1338'. [ 281.633133][T10754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1343'. [ 282.087127][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 282.121084][T10767] netlink: 'syz.2.1348': attribute type 30 has an invalid length. [ 282.140821][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 282.186359][T10769] netlink: 'syz.2.1348': attribute type 30 has an invalid length. [ 282.345604][T10772] netlink: 'syz.3.1349': attribute type 4 has an invalid length. [ 282.597016][T10786] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 282.932162][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1360'. [ 283.190595][T10809] bridge6: entered promiscuous mode [ 283.197644][T10809] bridge6: entered allmulticast mode [ 283.225099][T10809] xt_hashlimit: size too large, truncated to 1048576 [ 284.369774][T10869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.390756][T10869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.423701][T10869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.432071][T10869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.658578][T10891] __nla_validate_parse: 4 callbacks suppressed [ 284.658597][T10891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1394'. [ 284.683577][T10891] netlink: 'syz.0.1394': attribute type 1 has an invalid length. [ 284.691635][T10891] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1394'. [ 284.701809][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 284.856957][T10900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1395'. [ 285.075596][T10909] openvswitch: netlink: IP tunnel dst address not specified [ 285.104062][T10905] syzkaller0: entered promiscuous mode [ 285.112657][T10905] syzkaller0: entered allmulticast mode [ 287.278644][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1406'. [ 287.314068][T10934] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1408'. [ 287.500124][T10949] netlink: 'syz.0.1411': attribute type 1 has an invalid length. [ 287.508449][T10949] netlink: 'syz.0.1411': attribute type 11 has an invalid length. [ 287.528634][T10949] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1411'. [ 287.817917][T10973] Cannot find set identified by id 3 to match [ 287.860634][T10977] SET target dimension over the limit! [ 288.005091][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'. [ 288.260669][T11001] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 288.406566][T11005] geneve3: entered promiscuous mode [ 288.422079][ T1170] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 54884 - 0 [ 288.445093][ T63] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 54884 - 0 [ 288.479106][ T63] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 54884 - 0 [ 288.487018][T11011] netlink: 'syz.4.1433': attribute type 11 has an invalid length. [ 288.496018][ T63] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 54884 - 0 [ 288.509975][T11011] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1433'. [ 288.622752][T11017] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1436'. [ 288.911447][T11037] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 289.076722][T11037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.186628][T11035] bond3: (slave geneve3): making interface the new active one [ 289.216964][T11035] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 289.555125][T11063] bridge_slave_1: left allmulticast mode [ 289.628419][T11063] bridge_slave_1: left promiscuous mode [ 289.696571][T11063] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.787716][T11063] bridge_slave_0: left allmulticast mode [ 289.838247][T11063] bridge_slave_0: left promiscuous mode [ 289.852848][T11063] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.024361][T11090] __nla_validate_parse: 2 callbacks suppressed [ 290.024382][T11090] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1446'. [ 290.273978][T11114] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.294240][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1450'. [ 290.713419][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1456'. [ 291.102394][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 291.324915][T11169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1466'. [ 291.370059][T11169] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1466'. [ 291.389611][T11169] netlink: 'syz.0.1466': attribute type 5 has an invalid length. [ 291.401365][T11169] netlink: 'syz.0.1466': attribute type 6 has an invalid length. [ 291.409545][T11169] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1466'. [ 291.477348][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 291.594316][T11188] ip6tnl2: entered allmulticast mode [ 291.713283][T11195] netlink: 'syz.4.1473': attribute type 21 has an invalid length. [ 291.724866][T11195] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1473'. [ 291.822643][T11204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1474'. [ 292.243638][ T30] audit: type=1800 audit(1779685842.426:5): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1478" name="memory.events" dev="tmpfs" ino=1501 res=0 errno=0 [ 292.268279][T11222] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 292.282048][T11222] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 292.424129][T11229] nbd: couldn't find a device at index 1048580 [ 292.570936][T11242] netlink: 'syz.0.1484': attribute type 4 has an invalid length. [ 292.619838][T11242] netlink: 'syz.0.1484': attribute type 4 has an invalid length. [ 292.753842][T11252] openvswitch: netlink: IP tunnel dst address not specified [ 292.854757][T11260] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 292.906643][T11255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.996160][T11269] openvswitch: netlink: Message has 8 unknown bytes. [ 293.035941][T11269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.183183][T11285] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 293.337430][T11292] netlink: 'syz.3.1501': attribute type 1 has an invalid length. [ 293.483282][T11298] tipc: Enabling of bearer rejected, failed to enable media [ 293.604711][T11298] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 293.621559][T11310] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 293.640619][T11298] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 293.649439][T11309] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 293.755091][T11298] ip6t_srh: unknown srh match flags 4000 [ 293.941117][T11316] bond4 (unregistering): Released all slaves [ 294.393091][T11334] ip6gretap0: entered promiscuous mode [ 294.399488][T11334] ip6gretap0: entered allmulticast mode [ 294.765648][T11349] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.783712][T11350] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 294.805118][T11350] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 294.844045][T11350] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 295.802415][T11412] __nla_validate_parse: 7 callbacks suppressed [ 295.802436][T11412] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1531'. [ 295.835643][T11413] openvswitch: netlink: IP tunnel dst address not specified [ 295.958370][T11419] syzkaller1: entered promiscuous mode [ 295.991675][T11422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1534'. [ 296.006053][T11419] syzkaller1: entered allmulticast mode [ 296.097713][T11428] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1536'. [ 296.363796][T11438] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 296.442468][T11077] tipc: Subscription rejected, illegal request [ 296.777350][T11458] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1546'. [ 296.916636][T11460] Cannot find set identified by id 65534 to match [ 296.938102][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1550'. [ 297.001610][T11472] bond0: ARP target 8.4.0.0 is already present [ 297.027794][T11472] bond0: option arp_ip_target: invalid value (1032) [ 297.047707][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 297.068379][T11472] validate_nla: 4 callbacks suppressed [ 297.068403][T11472] netlink: 'syz.1.1550': attribute type 10 has an invalid length. [ 297.113204][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1551'. [ 297.134741][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1550'. [ 297.159423][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 297.183890][T11475] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 297.205162][T11472] ipvlan0: entered allmulticast mode [ 297.210878][T11472] veth0_vlan: entered allmulticast mode [ 297.231230][T11472] team0: Device ipvlan0 failed to register rx_handler [ 297.247118][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1554'. [ 298.354857][T11550] tipc: Enabling of bearer rejected, failed to enable media [ 298.362193][T11551] netlink: 'syz.0.1569': attribute type 30 has an invalid length. [ 298.471435][T11556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.518822][T11551] bond6: option arp_missed_max: invalid value (0) [ 298.525629][T11551] bond6: option arp_missed_max: allowed values 1 - 255 [ 298.538761][T11551] bond6 (unregistering): Released all slaves [ 298.642642][T11563] netlink: 'syz.2.1572': attribute type 20 has an invalid length. [ 298.738750][T11563] netlink: 'syz.2.1572': attribute type 20 has an invalid length. [ 298.989771][T11583] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 299.238125][T11602] nft_compat: unsupported protocol 5 [ 299.341045][T11613] netlink: 'syz.2.1584': attribute type 8 has an invalid length. [ 299.916717][T11640] 8021q: adding VLAN 0 to HW filter on device bond9 [ 300.081217][T11649] 8021q: adding VLAN 0 to HW filter on device bond10 [ 300.121571][T11649] bond9: (slave bond10): Enslaving as an active interface with an up link [ 300.443179][T11679] netlink: 'syz.0.1601': attribute type 3 has an invalid length. [ 300.468911][T11679] hsr0 speed is unknown, defaulting to 1000 [ 300.477461][T11679] hsr0 speed is unknown, defaulting to 1000 [ 300.497689][T11679] hsr0 speed is unknown, defaulting to 1000 [ 300.506174][T11679] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 300.531375][T11679] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 300.583070][T11679] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 300.614390][T11679] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 300.671281][T11679] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 300.778569][T11679] hsr0 speed is unknown, defaulting to 1000 [ 300.792880][T11679] hsr0 speed is unknown, defaulting to 1000 [ 300.810256][T11679] hsr0 speed is unknown, defaulting to 1000 [ 300.817318][T11679] hsr0 speed is unknown, defaulting to 1000 [ 300.847281][T11679] hsr0 speed is unknown, defaulting to 1000 [ 301.096912][T11712] __nla_validate_parse: 18 callbacks suppressed [ 301.096930][T11712] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1612'. [ 301.119270][T11715] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1612'. [ 301.201768][T11723] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1614'. [ 301.340333][T11732] netlink: 'syz.1.1616': attribute type 1 has an invalid length. [ 301.528624][T11732] bond8: (slave xfrm3): The slave device specified does not support setting the MAC address [ 301.548927][T11732] bond8: (slave xfrm3): Error -95 calling set_mac_address [ 301.589572][T11745] IPv6: addrconf: prefix option has invalid lifetime [ 301.777150][T11759] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1619'. [ 301.965285][T11753] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1619'. [ 302.066035][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 302.207272][T11786] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 302.265301][T11786] xt_hashlimit: size too large, truncated to 1048576 [ 302.310189][T11792] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.325947][T11792] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 302.472347][T11792] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.483987][T11792] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 302.654445][T11792] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.677248][T11792] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 302.741278][T11805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1633'. [ 302.816348][T11792] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.842816][T11792] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 302.998657][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 303.020537][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1640'. [ 303.069971][ T1170] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.105268][ T1170] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 303.118184][T11828] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1640'. [ 303.237865][ T1170] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.255689][ T1170] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 303.302447][ T1170] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.322086][ T1170] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 303.442874][ T1170] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.460756][T11851] xt_hashlimit: size too large, truncated to 1048576 [ 303.463744][ T1170] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 304.081984][T11891] IPv6: sit1: Disabled Multicast RS [ 304.097155][T11891] sit1: entered allmulticast mode [ 304.491459][T11911] openvswitch: netlink: IP tunnel dst address not specified [ 304.524767][T11906] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 304.540037][T11906] bond6 (unregistering): Released all slaves [ 304.894782][T11931] netlink: 'syz.2.1666': attribute type 83 has an invalid length. [ 304.924609][T11940] openvswitch: netlink: IP tunnel dst address not specified [ 305.560278][T11974] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 305.755408][T11988] openvswitch: netlink: Tunnel attr 9480 out of range max 16 [ 305.848138][T11993] syzkaller0: entered promiscuous mode [ 305.875217][T11993] syzkaller0: entered allmulticast mode [ 306.088775][T12011] lo: left promiscuous mode [ 306.113884][T12011] tunl0: left promiscuous mode [ 306.126374][T12011] gre0: left promiscuous mode [ 306.158473][T12011] erspan0: left promiscuous mode [ 306.174655][T12011] ip_vti0: left promiscuous mode [ 306.198982][T12011] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 306.574101][T12040] __nla_validate_parse: 8 callbacks suppressed [ 306.574121][T12040] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1694'. [ 306.610820][T12040] 8021q: VLANs not supported on gre0 [ 306.807867][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'. [ 306.972936][T12053] bond6: entered promiscuous mode [ 307.018474][T12053] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.106852][T12059] xt_nfacct: accounting object `syz1' does not exist [ 307.207675][T12067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.215226][T12075] netlink: 'syz.4.1700': attribute type 10 has an invalid length. [ 307.251599][T12067] bond6: (slave sit1): The slave device specified does not support setting the MAC address [ 307.315220][T12067] bond6: (slave sit1): Error -95 calling set_mac_address [ 307.377197][T12075] macvlan1: entered promiscuous mode [ 307.401933][T12075] macvlan1: entered allmulticast mode [ 307.423643][T12075] veth1_vlan: entered allmulticast mode [ 307.458799][T12075] team0: Port device macvlan1 added [ 307.660492][T12094] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1703'. [ 307.699515][ T9] IPVS: starting estimator thread 0... [ 307.723770][T12094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1703'. [ 307.723832][T12101] netlink: 'syz.3.1702': attribute type 4 has an invalid length. [ 307.799142][T12100] IPVS: using max 30 ests per chain, 72000 per kthread [ 307.996348][T12114] ip6tnl2: entered allmulticast mode [ 308.015118][T12116] nbd: couldn't find device at index 2958377 [ 308.138453][T12121] netlink: 'syz.4.1710': attribute type 4 has an invalid length. [ 308.299775][T12134] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1716'. [ 308.319940][T12138] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 308.582695][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 308.914164][T12176] sctp: [Deprecated]: syz.0.1729 (pid 12176) Use of int in maxseg socket option. [ 308.914164][T12176] Use struct sctp_assoc_value instead [ 309.020412][T12181] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 309.218899][T12189] tipc: Enabling not permitted [ 309.232493][T12189] tipc: Enabling of bearer rejected, failed to enable media [ 309.260243][T12189] : renamed from gretap0 (while UP) [ 309.278770][T12142] infiniband syz0: set active [ 309.292951][T12142] infiniband syz0: added bridge_slave_1 [ 309.295801][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 309.317217][T12191] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 309.329453][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 309.347128][T12142] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 309.374402][T12189] netlink: 'syz.0.1733': attribute type 12 has an invalid length. [ 309.388697][T12142] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 309.445409][T12142] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 309.575906][T12142] RDS/IB: syz0: added [ 309.591218][T12202] netlink: 'syz.0.1738': attribute type 2 has an invalid length. [ 309.595688][T12142] smc: adding ib device syz0 with port count 1 [ 309.618180][T12202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.629339][T12142] smc: ib device syz0 port 1 has no pnetid [ 309.931608][T12216] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1740'. [ 309.987962][T12217] macvtap0: entered allmulticast mode [ 310.011387][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1740'. [ 310.028623][T12217] veth0_macvtap: entered allmulticast mode [ 310.423620][T12244] block nbd4: not configured, cannot reconfigure [ 311.538684][T12306] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 311.976411][T12331] __nla_validate_parse: 2 callbacks suppressed [ 311.976430][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 312.052118][T12331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1760'. [ 312.384831][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 312.731062][T12344] bond1 (unregistering): Released all slaves [ 312.749726][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1767'. [ 312.872065][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1768'. [ 312.954256][T12369] xt_cgroup: xt_cgroup: no path or classid specified [ 313.022348][T12371] bridge5: entered allmulticast mode [ 313.146428][T12374] vlan3: entered allmulticast mode [ 313.154954][T12374] bond0: entered allmulticast mode [ 313.163829][T12374] bond_slave_0: entered allmulticast mode [ 313.170472][T12374] bond_slave_1: entered allmulticast mode [ 313.217412][T12377] block nbd3: Unsupported socket: should be TCP or UNIX. [ 313.344191][T12382] netlink: 'syz.2.1772': attribute type 1 has an invalid length. [ 313.457925][T12382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.765188][T12404] macsec1: entered promiscuous mode [ 314.028850][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1784'. [ 314.055077][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 314.118497][T12424] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 314.148980][T12424] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 314.183160][T12425] IPVS: fo: FWM 3 0x00000003 - no destination available [ 314.356440][T12446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1790'. [ 314.402051][T12446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1790'. [ 314.592791][T12455] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1794'. [ 314.791861][T12468] netlink: 'syz.3.1798': attribute type 7 has an invalid length. [ 315.018960][T12483] macvtap0: entered promiscuous mode [ 315.030419][T12483] team0: entered promiscuous mode [ 315.041137][T12483] team_slave_0: entered promiscuous mode [ 315.055757][T12483] team_slave_1: entered promiscuous mode [ 315.086359][T12483] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 315.111198][T12483] team0: Device macvtap0 is already an upper device of the team interface [ 315.127339][T12490] netlink: 'syz.4.1801': attribute type 2 has an invalid length. [ 315.138835][T12483] team0: left promiscuous mode [ 315.144639][T12490] netlink: 'syz.4.1801': attribute type 2 has an invalid length. [ 315.175218][ T1223] team_slave_0: left promiscuous mode [ 315.182192][ T1223] team_slave_1: left promiscuous mode [ 318.190501][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.355960][T12571] tipc: Started in network mode [ 334.372362][T12571] tipc: Node identity ac14140f, cluster identity 4711 [ 334.396253][T12571] tipc: Enabled bearer , priority 10 [ 334.456582][T12573] __nla_validate_parse: 8 callbacks suppressed [ 334.456604][T12573] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1815'. [ 334.512561][T12581] netlink: 'syz.3.1820': attribute type 1 has an invalid length. [ 334.524933][T12573] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1815'. [ 334.564956][T12581] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1820'. [ 334.630154][T12589] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1822'. [ 334.762484][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1825'. [ 334.934696][T12598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1826'. [ 334.987293][T12598] veth1_macvtap: entered allmulticast mode [ 335.002364][T12615] xt_ecn: cannot match TCP bits for non-tcp packets [ 335.014369][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'. [ 335.358349][T12598] veth1_macvtap (unregistering): left allmulticast mode [ 335.510989][ T9] tipc: Node number set to 2886997007 [ 335.587801][T12624] netlink: 'syz.4.1831': attribute type 1 has an invalid length. [ 335.617866][T12624] netlink: 'syz.4.1831': attribute type 4 has an invalid length. [ 335.644943][T12624] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1831'. [ 335.914047][T12644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1837'. [ 336.042861][T12651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.136513][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1840'. [ 336.178893][T12656] Cannot find map_set index 135 as target [ 336.200479][T12661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.246269][T12671] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 336.519616][T12659] syzkaller0: entered promiscuous mode [ 336.538433][T12659] syzkaller0: entered allmulticast mode [ 337.424610][T12755] openvswitch: netlink: Missing key (keys=40, expected=100) [ 337.715962][T12772] netlink: 'syz.4.1867': attribute type 39 has an invalid length. [ 337.731831][T12772] hsr_slave_0: left promiscuous mode [ 337.740350][T12772] hsr_slave_1: left promiscuous mode [ 337.944566][T12784] netlink: 'syz.4.1870': attribute type 10 has an invalid length. [ 339.033963][T12852] sctp: [Deprecated]: syz.1.1886 (pid 12852) Use of int in max_burst socket option deprecated. [ 339.033963][T12852] Use struct sctp_assoc_value instead [ 339.057054][T12862] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 339.085378][T12862] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 339.105446][T12862] gretap4: entered promiscuous mode [ 339.111513][T12862] gretap4: entered allmulticast mode [ 339.437429][T12877] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 339.622912][T12889] __nla_validate_parse: 10 callbacks suppressed [ 339.622933][T12889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1899'. [ 339.662293][T12891] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1898'. [ 339.682602][T12889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1899'. [ 339.694351][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1898'. [ 339.717461][T12891] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1898'. [ 339.757089][T12891] netlink: 'syz.2.1898': attribute type 3 has an invalid length. [ 339.775984][T12897] netlink: 'syz.2.1898': attribute type 5 has an invalid length. [ 339.784379][T12891] netlink: 'syz.2.1898': attribute type 2 has an invalid length. [ 339.790841][T12897] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1898'. [ 339.797263][T12891] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1898'. [ 340.034024][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 340.075196][T12909] ksmbd: Daemon and kernel module version mismatch. ksmbd: 8, kernel module: 1. User-space ksmbd should terminate. [ 340.175562][T12918] openvswitch: netlink: IPv4 tun info is not correct [ 340.194247][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'. [ 340.224118][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'. [ 340.251717][T12918] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 340.290499][T12918] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 340.310098][T12918] netlink: 'syz.0.1908': attribute type 2 has an invalid length. [ 340.312740][T12927] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 340.330031][T12919] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 340.350674][T12919] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 340.352225][T12927] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 340.537956][T12937] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.593414][T12950] lo speed is unknown, defaulting to 1000 [ 342.600374][T12950] lo speed is unknown, defaulting to 1000 [ 342.667682][T12950] lo speed is unknown, defaulting to 1000 [ 342.688129][T12950] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 342.715883][T12950] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 342.738824][T12950] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 342.766156][T12950] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 342.847396][T12950] lo speed is unknown, defaulting to 1000 [ 342.881055][T12950] lo speed is unknown, defaulting to 1000 [ 342.923191][T12950] lo speed is unknown, defaulting to 1000 [ 342.931117][T12950] lo speed is unknown, defaulting to 1000 [ 342.939289][T12950] lo speed is unknown, defaulting to 1000 [ 343.110564][ T9] lo speed is unknown, defaulting to 1000 [ 343.507442][T13026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.645474][T13028] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 32 [ 343.744797][T13034] syzkaller0: entered promiscuous mode [ 343.776153][T13034] syzkaller0: entered allmulticast mode [ 344.077741][T13052] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.095078][T13053] openvswitch: netlink: Flow actions attr not present in new flow. [ 367.967190][T13073] validate_nla: 6 callbacks suppressed [ 367.967209][T13073] netlink: 'syz.0.1951': attribute type 1 has an invalid length. [ 367.984795][T13073] __nla_validate_parse: 12 callbacks suppressed [ 367.984814][T13073] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1951'. [ 368.005135][T13073] netlink: 'syz.0.1951': attribute type 1 has an invalid length. [ 368.014471][T13073] netlink: 'syz.0.1951': attribute type 8 has an invalid length. [ 368.022838][T13073] netlink: 606 bytes leftover after parsing attributes in process `syz.0.1951'. [ 368.211012][T13093] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1958'. [ 368.229481][T13097] netlink: 'syz.3.1957': attribute type 11 has an invalid length. [ 368.255078][T13097] netlink: 'syz.3.1957': attribute type 11 has an invalid length. [ 368.272928][T13097] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1957'. [ 368.373997][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1960'. [ 368.782344][T13121] netlink: 'syz.3.1964': attribute type 83 has an invalid length. [ 368.790666][T13122] netlink: 'syz.3.1964': attribute type 83 has an invalid length. [ 368.915400][T13094] hsr0 speed is unknown, defaulting to 1000 [ 369.121703][T13125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1965'. [ 369.180545][T13127] xt_hashlimit: size too large, truncated to 1048576 [ 369.400396][T13130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.418522][T13125] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1965'. [ 369.451009][T13094] lo speed is unknown, defaulting to 1000 [ 369.476157][T13125] team0: Port device dummy0 removed [ 369.860999][T13151] xt_CT: No such helper "pptp" [ 370.044101][T13169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1976'. [ 370.987370][T13214] netlink: 'syz.2.1988': attribute type 12 has an invalid length. [ 371.036493][T13214] netlink: 190976 bytes leftover after parsing attributes in process `syz.2.1988'. [ 371.494044][T13238] Unknown options in mask b7f2 [ 371.531469][T13240] tipc: Enabling of bearer rejected, failed to enable media [ 371.563865][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 371.581925][T13240] netlink: 'syz.3.1996': attribute type 2 has an invalid length. [ 371.601834][T13240] netlink: 'syz.3.1996': attribute type 2 has an invalid length. [ 371.700665][T13249] xt_TPROXY: Can be used only with -p tcp or -p udp [ 371.781750][T13255] netlink: 'syz.4.1999': attribute type 12 has an invalid length. [ 372.043872][T13272] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 372.398989][T13288] veth1_macvtap: entered allmulticast mode [ 372.461688][T13288] veth1_macvtap (unregistering): left allmulticast mode [ 372.939803][T13315] IPv6: NLM_F_CREATE should be specified when creating new route [ 372.967736][T13315] veth1_to_team: entered promiscuous mode [ 372.978446][T13315] gretap0: entered promiscuous mode [ 372.992833][T13315] debugfs: 'hsr1' already exists in 'hsr' [ 373.001013][T13315] Cannot create hsr debugfs directory [ 373.006512][T13315] hsr1: entered promiscuous mode [ 373.291465][T13335] xt_TPROXY: Can be used only with -p tcp or -p udp [ 373.466830][T13343] __nla_validate_parse: 9 callbacks suppressed [ 373.466852][T13343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2025'. [ 373.492964][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 373.495606][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2026'. [ 373.684772][T13356] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2029'. [ 373.882380][T13364] netlink: 'syz.2.2030': attribute type 3 has an invalid length. [ 373.911231][T13368] sctp: [Deprecated]: syz.1.2033 (pid 13368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.911231][T13368] Use struct sctp_sack_info instead [ 374.843451][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 374.864165][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 375.017908][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2055'. [ 375.174978][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 375.249636][T13448] vlan2: entered allmulticast mode [ 375.265872][T13448] bond0: entered allmulticast mode [ 375.289781][T13448] bond_slave_0: entered allmulticast mode [ 375.303588][T13448] bond_slave_1: entered allmulticast mode [ 375.330103][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 375.384830][T13462] netlink: 'syz.4.2062': attribute type 13 has an invalid length. [ 375.421114][T13462] macsec0: entered allmulticast mode [ 375.734427][T13474] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2067'. [ 375.802434][T13486] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 375.843340][T13489] netlink: 'syz.0.2070': attribute type 1 has an invalid length. [ 375.854702][T13490] netlink: 'syz.0.2070': attribute type 1 has an invalid length. [ 375.866355][T13486] 8021q: adding VLAN 0 to HW filter on device bond12 [ 375.917334][T13489] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.565499][T13519] ipt_REJECT: TCP_RESET invalid for non-tcp [ 376.608455][T13530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.934279][T13549] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 377.170327][T13569] tipc: Enabled bearer , priority 0 [ 377.195802][T13569] tipc: Enabling of bearer rejected, already enabled [ 377.427253][T13589] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 377.682536][T13602] netlink: 'syz.0.2103': attribute type 12 has an invalid length. [ 377.720041][T13602] netlink: 'syz.0.2103': attribute type 29 has an invalid length. [ 377.732066][T13602] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 377.767329][T13602] netlink: 'syz.0.2103': attribute type 2 has an invalid length. [ 377.788767][T13612] syzkaller0: entered promiscuous mode [ 377.806888][T13612] syzkaller0: entered allmulticast mode [ 378.261332][T13641] netlink: zone id is out of range [ 378.273703][T13641] netlink: zone id is out of range [ 378.284117][T13641] netlink: zone id is out of range [ 378.289585][ T29] tipc: Node number set to 1536217653 [ 378.294251][T13641] netlink: zone id is out of range [ 378.317207][T13641] netlink: zone id is out of range [ 378.363138][T13641] netlink: zone id is out of range [ 378.410669][T13641] netlink: zone id is out of range [ 378.435182][T13641] netlink: zone id is out of range [ 378.449626][T13641] netlink: zone id is out of range [ 378.592429][T13661] __nla_validate_parse: 13 callbacks suppressed [ 378.592447][T13661] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2122'. [ 378.607918][T13659] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 378.771837][T13677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 378.793356][T13677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2125'. [ 378.940201][T13686] netem: change failed [ 379.103801][T13695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2130'. [ 379.315984][T13709] netlink: 'syz.2.2135': attribute type 12 has an invalid length. [ 379.340037][T13711] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20004 [ 379.414277][T13716] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 379.591459][T13717] bond10 (unregistering): Released all slaves [ 379.634424][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.646837][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2141'. [ 379.772415][T13745] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2138'. [ 379.915507][T13752] Cannot find del_set index 4 as target [ 379.943405][T13727] syzkaller0: entered promiscuous mode [ 379.959592][T13727] syzkaller0: entered allmulticast mode [ 382.498278][T13800] netlink: 'syz.3.2158': attribute type 29 has an invalid length. [ 382.519298][ T30] audit: type=1804 audit(1779685932.696:6): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2159" name="/newroot/425/cgroup.controllers" dev="tmpfs" ino=2174 res=1 errno=0 [ 382.558289][T13807] bond0: option ad_select: unable to set because the bond device is up [ 382.580742][ T30] audit: type=1800 audit(1779685932.696:7): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2159" name="cgroup.controllers" dev="tmpfs" ino=2174 res=0 errno=0 [ 382.672637][T13811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2162'. [ 382.716814][T13811] net_ratelimit: 4 callbacks suppressed [ 382.716832][T13811] openvswitch: netlink: Flow key attr not present in new flow. [ 382.725266][T13813] netlink: 'syz.4.2163': attribute type 2 has an invalid length. [ 382.749879][T13813] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2163'. [ 382.873262][T13823] tipc: MTU too low for tipc bearer [ 383.097045][T13830] tunl0: entered promiscuous mode [ 383.112238][T13830] netlink: 'syz.4.2167': attribute type 3 has an invalid length. [ 383.138957][T13830] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2167'. [ 383.308950][T13848] netlink: 'syz.1.2170': attribute type 1 has an invalid length. [ 383.526233][T13848] bond10: entered promiscuous mode [ 383.532445][T13848] 8021q: adding VLAN 0 to HW filter on device bond10 [ 383.844705][T13889] blkio.reset_stats is deprecated [ 383.998481][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'. [ 384.183763][T13902] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 384.190329][T13909] block nbd3: not configured, cannot reconfigure [ 384.323049][T13915] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2181'. [ 384.346172][T13918] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 384.376815][T13923] siw: device registration error -23 [ 384.383492][T13918] bond11: entered promiscuous mode [ 384.392247][T13922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2183'. [ 384.402089][T13922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2183'. [ 384.464270][T13923] »»»»»»: renamed from lo [ 384.468451][T13926] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2184'. [ 384.483583][T13927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2183'. [ 384.494366][T13927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2183'. [ 384.944451][T13959] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 384.995752][T13956] netlink: 'syz.3.2191': attribute type 1 has an invalid length. [ 385.007531][T13959] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.166421][T13964] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 385.463164][T13987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2200'. [ 385.482304][T13984] openvswitch: netlink: Message has 233 unknown bytes. [ 385.538303][T13993] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 385.568391][T13987] netlink: 'syz.1.2200': attribute type 1 has an invalid length. [ 385.621838][T13998] xt_SECMARK: invalid mode: 9 [ 385.631444][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.669843][T13993] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.2203'. [ 385.693035][T13993] openvswitch: netlink: Message has 6 unknown bytes. [ 385.722042][T13999] bond22: (slave gretap2): making interface the new active one [ 385.731301][T13999] bond22: (slave gretap2): Enslaving as an active interface with an up link [ 385.894800][T14014] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2209'. [ 385.925433][T14014] openvswitch: netlink: Flow key attr not present in new flow. [ 386.213780][T14042] netlink: 'syz.3.2215': attribute type 3 has an invalid length. [ 386.268710][T14044] x_tables: duplicate underflow at hook 1 [ 386.296395][T14048] netlink: 'syz.0.2217': attribute type 10 has an invalid length. [ 386.554448][T14048] ipvlan0: entered allmulticast mode [ 386.563413][T14048] veth0_vlan: entered allmulticast mode [ 386.612316][T14048] team0: Device ipvlan0 failed to register rx_handler [ 386.665124][T14068] syzkaller0: entered promiscuous mode [ 386.672906][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.681103][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.693592][T14068] syzkaller0: entered allmulticast mode [ 387.196334][T14076] openvswitch: netlink: IP tunnel dst address not specified [ 387.397247][T14099] netlink: 'syz.0.2232': attribute type 1 has an invalid length. [ 387.428581][T14099] netlink: 'syz.0.2232': attribute type 2 has an invalid length. [ 387.441888][T14099] netlink: 'syz.0.2232': attribute type 1 has an invalid length. [ 387.710864][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.576860][T14163] Unsupported ieee802154 address type: 0 [ 388.773004][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.055234][T14193] __nla_validate_parse: 14 callbacks suppressed [ 389.055255][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2259'. [ 389.134634][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'. [ 389.250214][T14204] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 389.331728][T14204] ip6gre1: entered allmulticast mode [ 389.340459][T14204] team0: Device ip6gre1 is of different type [ 389.468235][T14213] vlan4: entered promiscuous mode [ 389.483852][T14213] geneve1: entered promiscuous mode [ 389.501365][T14213] vlan4: entered allmulticast mode [ 389.506809][T14213] geneve1: entered allmulticast mode [ 389.524822][T14216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2268'. [ 389.542470][T14216] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 389.553830][T14216] gretap1: entered promiscuous mode [ 389.559973][T14216] gretap1: entered allmulticast mode [ 389.631659][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 389.674094][T14219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 389.709332][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.765281][T14223] vlan3: entered allmulticast mode [ 389.790176][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.872173][T11077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.883598][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.895285][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.073917][T14240] syz_tun: refused to change device tx_queue_len [ 390.125018][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2276'. [ 390.288951][T14257] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2278'. [ 390.468717][T14272] validate_nla: 6 callbacks suppressed [ 390.468736][T14272] netlink: 'syz.2.2282': attribute type 1 has an invalid length. [ 390.499412][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2283'. [ 390.538609][T14277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2282'. [ 390.604502][T14272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 390.813587][T14290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 390.830492][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.908562][T14290] 8021q: adding VLAN 0 to HW filter on device bond8 [ 390.924789][T14291] tc_dump_action: action bad kind [ 390.989661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.999180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.056666][T14302] netlink: 'syz.3.2290': attribute type 21 has an invalid length. [ 391.079171][T14302] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 391.125025][T14304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2292'. [ 391.177610][T14307] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.401968][T14316] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 391.474096][T14324] netlink: 'syz.2.2300': attribute type 39 has an invalid length. [ 391.606129][T14331] sch_fq: defrate 0 ignored. [ 391.722243][T14341] bridge_slave_0: invalid flags given to default FDB implementation [ 392.049402][T14359] netlink: 'syz.0.2310': attribute type 15 has an invalid length. [ 392.138823][T14359] netlink: 'syz.0.2310': attribute type 15 has an invalid length. [ 392.148982][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 392.169552][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 392.187049][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 392.203130][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 392.469511][T14389] syzkaller1: entered promiscuous mode [ 392.494243][T14389] syzkaller1: entered allmulticast mode [ 393.204523][T14425] netlink: 'syz.0.2322': attribute type 58 has an invalid length. [ 393.708217][T14454] bond23: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 393.736705][T14454] bond23 (unregistering): Released all slaves [ 393.932364][T14467] syzkaller1: entered promiscuous mode [ 393.949932][ T29] net_ratelimit: 5 callbacks suppressed [ 393.949951][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.951874][T14467] syzkaller1: entered allmulticast mode [ 394.061880][T14469] __nla_validate_parse: 14 callbacks suppressed [ 394.061901][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 394.104360][T14469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2332'. [ 394.298973][T14490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2339'. [ 394.349378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.543742][T14504] vlan2: entered allmulticast mode [ 394.564672][T14504] bond0: entered allmulticast mode [ 394.581368][T14504] bond_slave_0: entered allmulticast mode [ 394.595053][T14504] bond_slave_1: entered allmulticast mode [ 394.670043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.680236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.933010][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2348'. [ 394.995938][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.629875][T14021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.642057][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.653717][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.759333][T14586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.862292][T14587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.905475][T14581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.999220][T14594] netlink: 'syz.1.2364': attribute type 29 has an invalid length. [ 396.022261][T14597] netlink: 'syz.1.2364': attribute type 29 has an invalid length. [ 396.032215][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.171670][T14605] netlink: 'syz.1.2366': attribute type 1 has an invalid length. [ 396.197480][T14605] netlink: 'syz.1.2366': attribute type 178 has an invalid length. [ 396.614237][T14632] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2374'. [ 397.278292][T14661] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2385'. [ 397.360945][T14666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2387'. [ 397.675701][T14679] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 397.685685][T14679] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 397.878611][T14700] netlink: 'syz.2.2397': attribute type 64 has an invalid length. [ 397.888028][T14700] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2397'. [ 398.006777][T14706] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2400'. [ 398.186662][T14716] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 398.187407][T14717] netlink: 'syz.4.2406': attribute type 1 has an invalid length. [ 398.209500][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2405'. [ 398.268170][T14717] 8021q: adding VLAN 0 to HW filter on device bond23 [ 398.376259][T14729] netlink: 'syz.4.2408': attribute type 10 has an invalid length. [ 398.378483][T14730] netlink: 'syz.1.2407': attribute type 11 has an invalid length. [ 398.397479][T14729] team0: Port device dummy0 added [ 398.451645][T14730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.471900][T14730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.485774][T14730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.506606][T14730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.618651][T14742] netlink: 'syz.3.2413': attribute type 1 has an invalid length. [ 398.655245][T14742] netlink: 'syz.3.2413': attribute type 1 has an invalid length. [ 398.711810][T14747] syzkaller1: entered promiscuous mode [ 398.724659][T14747] syzkaller1: entered allmulticast mode [ 398.833937][T14756] tipc: Can't bind to reserved service type 2 [ 399.151380][ T29] net_ratelimit: 3 callbacks suppressed [ 399.151401][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.205031][T14778] netlink: 'syz.4.2424': attribute type 1 has an invalid length. [ 399.242412][T14778] __nla_validate_parse: 1 callbacks suppressed [ 399.242432][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2424'. [ 399.311432][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2424'. [ 399.321413][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'. [ 399.356668][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2424'. [ 399.392175][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2424'. [ 399.403244][T14786] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2429'. [ 399.545674][T14799] syzkaller0: left promiscuous mode [ 399.551985][T14799] syzkaller0: left allmulticast mode [ 399.967034][T14822] openvswitch: netlink: IPv4 tun info is not correct [ 400.203127][T14835] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2448'. [ 400.217649][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'. [ 400.222251][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.297289][T14839] veth11: entered allmulticast mode [ 400.407861][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2449'. [ 400.662085][T14852] macvlan0: entered promiscuous mode [ 400.750971][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.778630][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.790326][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.867754][T14863] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 400.882926][T14863] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 400.893804][T14863] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 400.928973][T14867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2457'. [ 401.168142][T14885] validate_nla: 4 callbacks suppressed [ 401.168161][T14885] netlink: 'syz.3.2463': attribute type 1 has an invalid length. [ 401.211925][T14885] netlink: 'syz.3.2463': attribute type 11 has an invalid length. [ 401.225132][T14891] netlink: 'syz.4.2465': attribute type 49 has an invalid length. [ 401.238547][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.298269][T14896] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 401.331634][T14896] batman_adv: batadv0: Adding interface: wlan0 [ 401.340062][T14896] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.367718][T14896] batman_adv: batadv0: Interface activated: wlan0 [ 401.385507][T14899] netlink: 'syz.1.2467': attribute type 1 has an invalid length. [ 401.470305][T14899] bond13: (slave bridge6): Enslaving as a backup interface with an up link [ 401.503085][T14899] macvlan2: entered promiscuous mode [ 401.509295][T14899] macvlan2: entered allmulticast mode [ 401.515299][T14899] bond13: (slave macvlan2): Error -98 calling set_mac_address [ 401.868647][T14919] bridge0: port 3(syz_tun) entered disabled state [ 401.906910][T14922] netlink: 'syz.0.2472': attribute type 16 has an invalid length. [ 401.942265][T14919] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.947596][T14922] netlink: 'syz.0.2472': attribute type 17 has an invalid length. [ 401.973371][T14919] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.087227][T14935] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.185991][T14941] netlink: 'syz.1.2479': attribute type 39 has an invalid length. [ 402.246508][T14922] bridge0: port 3(syz_tun) entered blocking state [ 402.253191][T14922] bridge0: port 3(syz_tun) entered listening state [ 402.271204][T14922] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.274513][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.278555][T14922] bridge0: port 1(bridge_slave_0) entered listening state [ 402.293640][T14948] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 402.304207][T14922] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.312178][T14922] bridge0: port 2(bridge_slave_1) entered listening state [ 402.337678][T14922] macvlan0: left promiscuous mode [ 402.347916][T14922] ipvlan0: left allmulticast mode [ 402.356968][T14922] veth0_vlan: left allmulticast mode [ 402.372161][T14922] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 402.394810][T14922] bond3: left promiscuous mode [ 402.405088][T14922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.412725][T14952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.418303][T14922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 402.435191][T14922] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 402.443753][T14922] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 402.463435][ T29] hsr0 speed is unknown, defaulting to 1000 [ 402.505185][T14943] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 402.547961][T14943] netlink: 'syz.2.2480': attribute type 2 has an invalid length. [ 402.602619][T14948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 402.612325][ T9] hsr0 speed is unknown, defaulting to 1000 [ 402.692247][T14950] bond8: (slave veth7): Enslaving as an active interface with a down link [ 402.703213][ T134] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 402.730803][T14952] bond8: (slave veth0_to_bond): making interface the new active one [ 402.741317][T14952] veth0_to_bond: entered promiscuous mode [ 402.747660][T14952] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 402.781729][ T134] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 402.857767][ T134] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 402.882314][ T134] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 402.976323][ T63] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 403.022412][ T63] bond1: (slave veth3): making interface the new active one [ 403.047230][ T63] bond1: active interface up! [ 403.342072][ T30] audit: type=1800 audit(1779685953.526:8): pid=14994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2491" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2556 res=0 errno=0 [ 403.561268][T15007] xt_hashlimit: size too large, truncated to 1048576 [ 404.355251][ T5761] net_ratelimit: 26 callbacks suppressed [ 404.355270][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.477320][T15075] vlan1: left allmulticast mode [ 404.502360][T15075] veth0_vlan: left allmulticast mode [ 404.598851][T15078] __nla_validate_parse: 9 callbacks suppressed [ 404.598870][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2511'. [ 404.664430][T15082] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2512'. [ 404.724287][T15078] bond24: Setting coupled_control to off (0) [ 405.044576][T15108] netlink: 4240 bytes leftover after parsing attributes in process `syz.2.2519'. [ 405.087184][T15111] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2520'. [ 405.090224][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 405.151652][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 405.403717][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.515965][T15133] bond13 (unregistering): Released all slaves [ 406.016166][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 406.018033][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 406.358949][T15187] syzkaller1: left promiscuous mode [ 406.376830][T15187] syzkaller1: left allmulticast mode [ 406.402907][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2540'. [ 406.442033][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.510659][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.519797][ T9018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.532165][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.622700][T15202] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2544'. [ 407.085747][T15221] ieee802154 phy1 wpan1: encryption failed: -22 [ 407.416455][T15231] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 407.478773][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.577343][T15248] xt_hashlimit: max too large, truncated to 1048576 [ 407.680275][T15253] validate_nla: 4 callbacks suppressed [ 407.680300][T15253] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 407.819605][T15261] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 407.962397][T15258] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 407.980832][T15258] bond14: (slave vxcan5): Error -95 calling set_mac_address [ 408.085985][T15265] bond14: (slave bridge7): Enslaving as an active interface with a down link [ 408.115405][T15253] bond14: (slave gretap3): making interface the new active one [ 408.126924][T15253] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 408.434093][T15289] netlink: 'syz.3.2561': attribute type 1 has an invalid length. [ 408.534913][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.617397][T15307] openvswitch: netlink: Invalid VLAN frame [ 408.626098][T15289] 8021q: adding VLAN 0 to HW filter on device bond13 [ 408.667417][T15307] openvswitch: netlink: Multiple metadata blocks provided [ 408.705183][T15290] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 409.340855][T15346] netlink: 'syz.3.2574': attribute type 14 has an invalid length. [ 409.382769][T15346] netlink: 'syz.3.2574': attribute type 13 has an invalid length. [ 409.491642][T15354] netlink: 'syz.1.2576': attribute type 61 has an invalid length. [ 409.550136][ T9018] net_ratelimit: 1 callbacks suppressed [ 409.550155][ T9018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.574935][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.770803][T15360] bond15: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 409.857592][T15360] bond15 (unregistering): Released all slaves [ 409.919157][T15339] netlink: 'syz.4.2571': attribute type 21 has an invalid length. [ 409.953872][T15375] veth0: entered promiscuous mode [ 409.977652][T15339] __nla_validate_parse: 9 callbacks suppressed [ 409.977672][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 410.085286][T15385] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 410.112228][T15378] veth0: left promiscuous mode [ 410.306281][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'. [ 410.338469][T15394] netlink: 'syz.0.2586': attribute type 5 has an invalid length. [ 410.372611][T15394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2586'. [ 410.373821][T15398] 8021q: VLANs not supported on ip6tnl0 [ 410.503509][T15394] syz_tun: left allmulticast mode [ 410.522385][T15394] syz_tun: left promiscuous mode [ 410.547549][T15394] bridge0: port 3(syz_tun) entered disabled state [ 410.595950][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.597841][T15394] bridge_slave_0: left allmulticast mode [ 410.625286][T15394] bridge_slave_0: left promiscuous mode [ 410.635135][T15394] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.648239][T15394] bridge_slave_1: left allmulticast mode [ 410.654287][T15394] bridge_slave_1: left promiscuous mode [ 410.662071][T15394] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.686937][T15394] bond0: (slave bond_slave_0): Releasing backup interface [ 410.724528][T15394] bond0: (slave bond_slave_1): Releasing backup interface [ 410.760364][T15394] team0: Port device team_slave_0 removed [ 410.774069][T15394] team0: Port device team_slave_1 removed [ 410.784063][T15394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 410.786178][T15427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2593'. [ 411.069957][T15437] netlink: 'syz.4.2597': attribute type 20 has an invalid length. [ 411.078977][T15437] IPv6: NLM_F_CREATE should be specified when creating new route [ 411.183531][T15442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.203875][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2600'. [ 411.243323][T15448] syzkaller0: entered promiscuous mode [ 411.257739][T15448] syzkaller0: entered allmulticast mode [ 411.265233][T15449] netem: unknown loss type 8 [ 411.265691][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 411.270109][T15449] netem: change failed [ 411.403536][T15463] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 411.634360][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.692836][T15483] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2609'. [ 411.862354][T15490] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 411.870306][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2612'. [ 411.881385][T15491] Cannot find set identified by id 4 to match [ 411.891439][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2612'. [ 411.932880][T15489] erspan0: entered promiscuous mode [ 411.959970][T15489] erspan0: left promiscuous mode [ 411.996950][T15498] openvswitch: netlink: Missing valid actions attribute. [ 412.012170][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2617'. [ 412.016789][T15498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.270361][T11077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.466921][T15525] netlink: 'syz.3.2624': attribute type 4 has an invalid length. [ 412.522910][T15533] netlink: 'syz.3.2624': attribute type 4 has an invalid length. [ 412.595545][T15535] ieee802154 phy1 wpan1: encryption failed: -22 [ 412.706814][ T9] lo speed is unknown, defaulting to 1000 [ 412.706827][ T5761] lo speed is unknown, defaulting to 1000 [ 413.829693][ T13] veth0_to_bond: left promiscuous mode [ 414.752063][ T29] net_ratelimit: 4 callbacks suppressed [ 414.752084][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.310044][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.792120][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.832542][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.872114][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.029801][T14021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.038626][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.047948][ T9018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.669513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.912048][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.952962][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.589628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.993361][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.069920][ T9018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.034676][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.072245][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.110727][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.118872][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.152165][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.193393][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.149409][ T9018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.232043][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.273896][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.312720][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.191364][ T9018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.352051][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.392464][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.432367][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.229559][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.472562][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.512316][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.025460][T15593] __nla_validate_parse: 6 callbacks suppressed [ 435.025484][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 435.068466][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2638'. [ 435.094835][T15593] netlink: 'syz.3.2636': attribute type 5 has an invalid length. [ 435.108911][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2638'. [ 435.124383][ T134] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 435.137680][T15584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.138717][T15593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2636'. [ 435.168736][T15584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.228158][T15584] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 435.245658][T14021] bond2: (slave bridge2): link status up again after 0 ms [ 435.257305][T15609] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2641'. [ 435.270982][T14021] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 435.290342][T14021] bond2: (slave bridge2): link status up again after 0 ms [ 435.312027][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.345875][T15593] geneve4: entered promiscuous mode [ 435.354074][T15593] geneve4: entered allmulticast mode [ 435.359976][T14021] bond2: (slave bridge2): link status up again after 0 ms [ 435.372679][T11077] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 435.391725][T11077] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 435.414214][T14021] bond2: (slave bridge2): link status up again after 0 ms [ 435.422098][T11077] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 435.460443][ T134] bond2: (slave bridge2): link status up again after 0 ms [ 435.462938][T11077] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 435.501156][ T134] bond2: (slave bridge2): link status up again after 0 ms [ 435.532469][ T134] bond2: (slave bridge2): failed to get link speed/duplex [ 435.596532][T15620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2645'. [ 435.610498][T15621] netlink: 'syz.4.2644': attribute type 6 has an invalid length. [ 435.634819][T15624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2648'. [ 435.648075][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 435.708732][T15624] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 435.754082][T15624] gretap2: entered promiscuous mode [ 435.775313][T15624] gretap2: entered allmulticast mode [ 435.921825][T15641] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2650'. [ 435.936065][T15643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2651'. [ 436.231242][T15659] erspan0: entered promiscuous mode [ 436.246778][T15659] erspan0: entered allmulticast mode [ 436.381613][T15672] veth0_to_bond: default FDB implementation only supports local addresses [ 436.410770][T15675] SET target dimension over the limit! [ 436.481767][T15677] xt_limit: Overflow, try lower: 271964/0 [ 436.754163][T15690] bond15: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 436.771750][T15690] bond15: (slave lo): Enslaving as an active interface with an up link [ 436.824100][T15694] gretap0: left allmulticast mode [ 436.830513][T15694] gretap0: left promiscuous mode [ 436.835862][T15694] bridge0: port 4(gretap0) entered disabled state [ 436.846276][T15694] batadv1: left allmulticast mode [ 436.851887][T15694] batadv1: left promiscuous mode [ 436.857468][T15694] bridge0: port 3(batadv1) entered disabled state [ 436.867174][T15694] bridge_slave_1: left promiscuous mode [ 436.879374][T15694] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.891807][T15694] bridge_slave_0: left allmulticast mode [ 436.897818][T15694] bridge_slave_0: left promiscuous mode [ 436.906699][T15694] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.968141][T15705] netlink: 'syz.1.2673': attribute type 3 has an invalid length. [ 437.307534][T15725] netlink: 'syz.2.2681': attribute type 1 has an invalid length. [ 437.341541][T15724] netlink: 'syz.2.2681': attribute type 1 has an invalid length. [ 437.372757][T15719] bond16: entered promiscuous mode [ 437.404501][T15719] bond16: entered allmulticast mode [ 437.437750][T15719] 8021q: adding VLAN 0 to HW filter on device bond16 [ 437.478891][T15724] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 437.480710][T15725] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 437.653268][T15750] netlink: 'syz.1.2689': attribute type 28 has an invalid length. [ 437.671304][T15750] netlink: 'syz.1.2689': attribute type 3 has an invalid length. [ 437.688105][T15748] netlink: 'syz.3.2686': attribute type 12 has an invalid length. [ 437.754953][T15759] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN PTI [ 437.766891][T15759] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 437.775317][T15759] CPU: 0 UID: 0 PID: 15759 Comm: syz.4.2690 Not tainted syzkaller #0 PREEMPT(full) [ 437.784679][T15759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.794828][T15759] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 437.800658][T15759] Code: 52 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 57 e1 bd f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 3a e1 bd f8 4d 8b 1f 4c 89 f7 89 [ 437.820352][T15759] RSP: 0018:ffffc9000c9a70a8 EFLAGS: 00010202 [ 437.826430][T15759] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff88804dc10000 [ 437.834386][T15759] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888076d02a40 [ 437.842344][T15759] RBP: 0000000000000002 R08: ffffc9000c9a6ea7 R09: 1ffff92001934dd4 [ 437.850301][T15759] R10: dffffc0000000000 R11: fffff52001934dd5 R12: dffffc0000000000 [ 437.858259][T15759] R13: dffffc0000000000 R14: ffff888076d02a40 R15: 0000000000000068 [ 437.866413][T15759] FS: 00007fcf049f66c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 437.875344][T15759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.881929][T15759] CR2: 0000555569a79a38 CR3: 00000000542c2000 CR4: 00000000003526f0 [ 437.889892][T15759] Call Trace: [ 437.893174][T15759] [ 437.896093][T15759] udp_tunnel_sock_release+0x6f/0x80 [ 437.901383][T15759] rxe_net_del+0x121/0x2e0 [ 437.905792][T15759] rxe_dellink+0x15/0x20 [ 437.910021][T15759] nldev_dellink+0x304/0x3d0 [ 437.914603][T15759] ? __pfx_nldev_dellink+0x10/0x10 [ 437.919745][T15759] ? apparmor_capable+0x126/0x170 [ 437.924843][T15759] ? bpf_lsm_capable+0x9/0x20 [ 437.929505][T15759] ? security_capable+0x7e/0x2c0 [ 437.934438][T15759] ? __pfx_nldev_dellink+0x10/0x10 [ 437.939537][T15759] rdma_nl_rcv+0x6d1/0xa10 [ 437.943949][T15759] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 437.948877][T15759] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.954349][T15759] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.959580][T15759] netlink_unicast+0x75c/0x8e0 [ 437.964366][T15759] netlink_sendmsg+0x813/0xb40 [ 437.969176][T15759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.974472][T15759] ? aa_sock_msg_perm+0xf1/0x1b0 [ 437.979403][T15759] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.984699][T15759] ____sys_sendmsg+0x972/0x9f0 [ 437.989481][T15759] ? __might_fault+0xaf/0x130 [ 437.994161][T15759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.999460][T15759] ? import_iovec+0x73/0xa0 [ 438.003972][T15759] ___sys_sendmsg+0x2a5/0x360 [ 438.008645][T15759] ? __lock_acquire+0x6b5/0x2cf0 [ 438.013589][T15759] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.018794][T15759] ? futex_wait+0x2a2/0x390 [ 438.023302][T15759] ? __fget_files+0x2a/0x420 [ 438.027883][T15759] ? __fget_files+0x3a0/0x420 [ 438.032555][T15759] __x64_sys_sendmsg+0x1bd/0x2a0 [ 438.037491][T15759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.042947][T15759] ? rcu_is_watching+0x15/0xb0 [ 438.047711][T15759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.053764][T15759] do_syscall_64+0x15f/0xf80 [ 438.058351][T15759] ? trace_irq_disable+0x3b/0x140 [ 438.063453][T15759] ? clear_bhb_loop+0x40/0x90 [ 438.068139][T15759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.074048][T15759] RIP: 0033:0x7fcf0679ce59 [ 438.078473][T15759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.098162][T15759] RSP: 002b:00007fcf049f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.106669][T15759] RAX: ffffffffffffffda RBX: 00007fcf06a16090 RCX: 00007fcf0679ce59 [ 438.114635][T15759] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000006 [ 438.122594][T15759] RBP: 00007fcf06832d6f R08: 0000000000000000 R09: 0000000000000000 [ 438.130553][T15759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.138506][T15759] R13: 00007fcf06a16128 R14: 00007fcf06a16090 R15: 00007fff1e29d908 [ 438.146472][T15759] [ 438.149491][T15759] Modules linked in: [ 438.154348][T15759] ---[ end trace 0000000000000000 ]--- [ 438.177420][T15758] smc: removing ib device syz0 [ 438.208173][T15758] smbdirect: ib_dev[syz0] removed [ 438.215552][T15759] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 438.222359][T15759] Code: 52 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 57 e1 bd f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 3a e1 bd f8 4d 8b 1f 4c 89 f7 89 [ 438.244653][T15759] RSP: 0018:ffffc9000c9a70a8 EFLAGS: 00010202 [ 438.250881][T15759] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff88804dc10000 [ 438.258875][T15759] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888076d02a40 [ 438.267107][T15759] RBP: 0000000000000002 R08: ffffc9000c9a6ea7 R09: 1ffff92001934dd4 [ 438.276812][T15759] R10: dffffc0000000000 R11: fffff52001934dd5 R12: dffffc0000000000 [ 438.285125][T15759] R13: dffffc0000000000 R14: ffff888076d02a40 R15: 0000000000000068 [ 438.293216][T15759] FS: 00007fcf049f66c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 438.302300][T15759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.308884][T15759] CR2: 0000000000000000 CR3: 00000000542c2000 CR4: 00000000003526f0 [ 438.316966][T15759] Kernel panic - not syncing: Fatal exception [ 438.323494][T15759] Kernel Offset: disabled [ 438.327808][T15759] Rebooting in 86400 seconds..