last executing test programs: 7.175420173s ago: executing program 3 (id=4818): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x12, 0x80000) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x3}}}, &(0x7f00000003c0)=0x84) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001500)={{r1}, "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"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="4653ebde40983ab8e15b8300000202000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_newneigh={0x30, 0x1c, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0x17}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_LLADDR={0xa, 0x2, @random}]}, 0x30}}, 0x0) (async) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x4, 0x7c, 0x1, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3f}, @remote}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) (async) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e00)=@security={'security\x00', 0x44, 0x4, 0x670, 0xffffffff, 0x0, 0x328, 0x328, 0xffffffff, 0xffffffff, 0x5a0, 0x5a0, 0x5a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff000000, 0xff000000, 0xffffffff, 0xff], @ipv4=@local, [0x0, 0xff, 0xffffffff], 0x7, 0x0, 0xc, 0x1, 0x15, 0x1}, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xff, 0x0, 0x0, 0xff], 0x4d4, 0x3500, 0x11, 0x0, 0x4, 0xab190a4d2f0a78f2}, {@ipv4=@private=0xa010101, [0x0, 0xff000000, 0xffffffff, 0xffffff00], @ipv4=@local, [0xffffff00, 0xff000000, 0xff, 0xffffff00], 0x4d3, 0x0, 0x87, 0x0, 0x8, 0x12}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xffffff00], @ipv4=@local, [0xffffff00, 0xffffff00, 0x0, 0xff000000], 0x4d6, 0x3504, 0x0, 0x0, 0x8, 0x4}], 0x0, 0x4}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {0x0, 0x11}, [@common=@srh={{0x30}, {0x3b, 0x5, 0x1, 0xc7, 0x8c, 0x44, 0x100}}, @common=@hbh={{0x48}, {0x7, 0x1, 0x0, [0x0, 0x2, 0x0, 0x3, 0x4, 0x7, 0x9, 0x100, 0x78dc, 0xfff, 0x558, 0x7f, 0x5, 0xc3b, 0xffff, 0x6], 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1, 0x87, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8040}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000005400128009000100626f6e64000000004400028005001d000000000005000d000100000008000b00", @ANYRES32=0x0, @ANYBLOB="080009000300000008000900000000080000000000000000050001000000000008000200", @ANYRES32, @ANYBLOB="0a000100ff"], 0x88}}, 0x0) (async) r10 = accept4(r3, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80, 0x80000) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x7, 0x10, 0x5}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000200)={r11, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)) 6.535959036s ago: executing program 0 (id=4823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000880) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x100, @private0, 0xc3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0xa0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}}, 0x4000800) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) 6.431103346s ago: executing program 3 (id=4825): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={r2, 0x3}, 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x3}, 0x8) (rerun: 64) r3 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000000c0)=0x100) (async) connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbd7017fadbdf2502"], 0x14}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)={0x38, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbf3}]}]}, 0x38}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000280)=0x4) 6.340704612s ago: executing program 4 (id=4826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0x2, 0x1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1}, 0x40020123) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x1c5a7adcb1c518b3, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffff4e, 0x803, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40002) 6.258963929s ago: executing program 0 (id=4829): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xcc}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) recvfrom(r0, &(0x7f00000005c0)=""/81, 0x51, 0x10002, &(0x7f0000000640)=@rc={0x1f, @none, 0x72}, 0x80) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4170010, r0, 0x5bb1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x0, 0x1b1, {{0x1a, 0x4, 0x3, 0x4, 0x68, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0x8, [{@local, 0x73b0}]}, @timestamp_addr={0x44, 0x14, 0x9e, 0x1, 0x4, [{@empty, 0x7}, {@multicast2}]}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0xb, 0x0, [{0x7, 0x5, "8da6cf"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x9, "4a6631efd03176"}, @timestamp={0x44, 0xc, 0xe5, 0x0, 0x1, [0xea6, 0x1868]}, @timestamp={0x44, 0x8, 0x7f, 0x0, 0x5, [0x1ff]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv6_getnetconf={0x34, 0x52, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x4}, @NETCONFA_FORWARDING={0x8, 0x2, 0x3}]}, 0x34}}, 0x22008000) syz_emit_ethernet(0x78, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60cb653e00423a010000000000000000000dffffac1414bbfc0100002a0000000000000000000001040090780000000160a3000000003300ff0100000000000000000b000000000000000000000000000000ffff7f0000210400000000000000e2ffff03000000000000"], 0x0) 6.091118131s ago: executing program 0 (id=4830): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r5, 0x1824af595dfff9db, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, r5, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x4}, {0x0, 0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0x5}, {}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x2, 0x4}, {0x6}, {0x1, 0x9}, {0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x5, 0x1}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x101, 0x7ff, 0x7, 0x7, 0xa000, 0xfffe, 0x680]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x0, 0x6c, 0x5, 0x48, 0x30, 0x6, 0x6, 0x2, 0x60, 0xc5e9d1f43bad109b, 0x3, 0x1b, 0x48, 0x4, 0x30, 0x6c, 0xc, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0x4c}}, 0x20000011) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 5.991516779s ago: executing program 4 (id=4832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newchain={0x3c, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffff, 0x3}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5d4528bd70a0fedbdf252a4624700c0002000100000000000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c000400f6ffffffffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004000000040000000a00000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000000800020000f2a0e0d018343269010000000000000000000000000001"], 0x38}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r10) sendmsg$NFC_CMD_START_POLL(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010023010000340200400600000008000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0x12) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="794363a9b116cfefecae32bf77268ab99c2393d04460e79092bb89ce155b9e51456f02834babae6b0a5d7966b421e9f785faa0a0952c53293bde46a277119af882bc2d37ece72e89a270a43cc78c6e77c419f90c55cf3ac3e02a36d89f7a13b07de1a1c17953eea25fc50c7d379bf72b306cee8cf110b51f612e2510d3f79eb80d3377137d729296db08d3ba3447b57af6a21fe7f53f22ee7efd6948d5a0ee6ee61135d41dfb248b6560cf0aad956fb40a5dbaca068cdfe81728d49ccf89763af5cb88fc7085cb13b955", @ANYRES32=r7, @ANYBLOB="0000000000000000620afcff00000000bfa200000000000007020000fcffffff8500000001000000550001000000000095000000000000006101000000000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c001580"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.667377494s ago: executing program 4 (id=4834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r5}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x2e) 5.611130157s ago: executing program 2 (id=4835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3b, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00003b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e8f"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000600)={@void, @val={0x1, 0x0, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x1, 0x4, 0x65, 0x64, 0x0, 0x3, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end]}}, {0x4e21, 0x4e23, 0x4d, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x41362f52b360784d}, "cc8eb0946e5e0eb90c30c40c5c76b6d6dcf991cda5867feb5aa63ba5a05f66125bc831fd5452ed61bd3774ac48998c57d940ecaa66bffc18b412c01c05"}}}}, 0x6f) 5.526462596s ago: executing program 0 (id=4836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0xff}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x9, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x1, 0x0, 0xe5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x24004000) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT=r0], 0xfdef) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x3}, {0x8, 0x1b, 0x0, 0x0, 0x4}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$inet6(r7, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 5.047267299s ago: executing program 4 (id=4837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6d002008002611"], 0x60) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x8, 0x0, 0x0}}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6d002008002611"], 0x60) (async) 4.93597087s ago: executing program 3 (id=4838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r1, &(0x7f0000000040)="6f185802044ed08369a5f6b73b791bdb25778914d4c7234fd05e46b3a2eaefc81392de10730edcac2b84fc50f4f1cd2d39368012a8f6d5b38bcda65a1cfc45ed", 0x40, 0x40001, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 4.904085695s ago: executing program 2 (id=4839): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffe000"/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000600)=@udp6}, 0x20) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x5ddc, 0xffffffff, 0x2dfe}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a000001"], 0x26}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65", 0x8}], 0x1}}], 0x1, 0x20008000) shutdown(r4, 0x1) 4.483091448s ago: executing program 1 (id=4840): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, 0xfffffffffffffffc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) r4 = socket$inet(0x2, 0x2, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$nci(r5, &(0x7f0000000100)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x3, {0x9, [{0x2, 0x7f}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x3, 0x6}, {0x3, 0xff}]}}, 0x16) r6 = socket(0x2, 0x80805, 0x0) ioctl$SIOCSIFMTU(r6, 0x8937, &(0x7f0000000340)={'dummy0\x00', 0x10001}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'veth1_virt_wifi\x00'}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000300), 0x6, r3}, 0x38) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0xff01, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x24000000) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x19}, @val={0x1, 0x0, 0x27, 0x0, 0x25}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3f, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x1, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) 1.82656181s ago: executing program 0 (id=4841): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) r4 = socket$inet(0x2, 0x2, 0x0) listen(r4, 0x3aa) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r4, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000002a00)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000, 0x1, &(0x7f0000001a00)=""/4096, 0x1000}, &(0x7f0000002a40)=0x40) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000380), &(0x7f0000000480)=r3}, 0x20) (rerun: 64) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1.75166512s ago: executing program 2 (id=4842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x33}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) 1.744187644s ago: executing program 1 (id=4843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001000)={{r2, &(0x7f0000000600)='GPL\x00', 0x10040, &(0x7f0000000640)={@_ha_fsid={[0x6, 0x2]}, {0x6, 0x3, 0x80, 0x3}}, 0x1, &(0x7f0000000840), &(0x7f0000000880)=0x1f5}, 0x5, &(0x7f0000000f40)=[{0x2, 0x3, &(0x7f00000008c0)='GPL\x00', &(0x7f0000000900)="16ccaffc2d0568d3eb5a5a5a3e09b8f853db489df872cd319cd5888543c04b12deb0541c862c2838eeff5a06013fcacda9e8f2f8d869736eb86b24051977d76b10dcdcf981286c363cbe310c5fd2f47911a5125551a25d8a0919e6c21e03b009ce3274cf879bbca11b4d6c63bd524a6fafe6ff1801509038449c5394c114bfee8037fee3b4c2655889e2d3e64544f9d1abb9b109e1db40969228c15f081ba2524b439e6565b04ba15683c9aea7cf05bb0de690178e6359be923ac01a26620e0e7afd051aa7dab8aef37230950886d458e88d88c04d47ea", 0xd7, 0x8}, {0x1, 0x80000000, &(0x7f0000000a00)='%\x00', &(0x7f0000000b40)="fdd7f71f376cd115b3de489dea7ef8588dd9eec68cdaea12927f03787fe14247352fbfb34ab05fcbaa35fbe1e073f17b2c344a5d573ca4f19fb81c3a13eef80c88cca17cea9b830e6497c997e0539db2e45d96077b30c1b100ed82335abe2fd7ac154562ab6c77ce56c585d64a70c43a55a817efab534ce92eeb46e8867977f36631ec40508958f4a7b4905aaec1e1fdc130c53a42414db2db69588844e8cfa1eccd0b6db5c551e8534615025fbeb6f938ba746dcc3340221293fd5b7d4b33414ee8e3412dff", 0xc6, 0x8}, {0x3, 0x3, &(0x7f0000000c40)='\x00', &(0x7f0000000c80)="e8580f9a03a3adf8d051e5e9f3fc062411bf44b78e34dfd78790dffdf9a31033f44a75335eafbbbe1db6f97ea639ebf25070a07251287a6684d5ddf33588be34a117f9925360748dca8f441f", 0x4c, 0xa}, {0x2, 0x4, &(0x7f0000000d00)='\x00', &(0x7f0000000d40)="e1a922acb2b86b9fd732498af1007ef499484d66ffb3d0d0f00347f5a0db4a032e852bc3f14e6569f5e9655f3adf5e07ee79c54290b0d54ab9b01fdf155328bd8d31f0b4e81d207e850474cb2c47c489d2178509c77cb291e2a60f975ced8caea7a922be12abb4bc6b468d5da2bbbf3ab2c9aa05efde3188251278216231b32f0adecccabe6f90cb2c2c7abf7a80fb3c0f805cb3c9c9bb1debb0be879276c58368112b62b891288119e83cecd0afc2", 0xaf}, {0x3, 0x3, &(0x7f0000000e00)='\x00', &(0x7f0000000e40)="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", 0xfb}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)=@newqdisc={0x13c, 0x24, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff1, 0x1}, {0xd, 0x2}, {0xfff3, 0x7}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xd}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x59}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x16}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40004) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0x1}], 0x1}}], 0x1, 0x241) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000001c0)={r0, 0x4}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x402, &(0x7f00000002c0)={@_ha_fsid={[0x200, 0xfffffff8]}, {0x4d03, 0xff, 0x5, 0x6}}, 0x3, &(0x7f0000000340)={@_ha_fsid}, &(0x7f00000003c0)=0x10}, {[0x7fffffff, 0x8, 0x0, 0x8]}, 0x81, 0x3d, &(0x7f0000000400)=""/61}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x18, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x1, 0x6, 0xb, 0x5, 0x3fb66070a85d0d32, 0xffffffffffffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000140)=""/85, 0x41100, 0x11, '\x00', 0x0, @cgroup_sock_addr=0xd, r8, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x1, 0x5, 0xf}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000540)=[r2, 0xffffffffffffffff, r2, r2, r2, r7, r2, r9, 0xffffffffffffffff], &(0x7f0000000580)=[{0x2, 0x3, 0x4, 0x3}, {0x1, 0x4, 0xb, 0x5}, {0x5, 0x2, 0x6, 0x8}, {0x2, 0x2, 0xc, 0xb}, {0x1, 0x3, 0x0, 0x1}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0xffff}, 0x94) 1.679426674s ago: executing program 4 (id=4844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) (async) close(r4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000980)={&(0x7f0000000380)="a5d342c9e758a9693d9795d3e33ab53fb7c220c8a868465501713dff89644f45128df28285adbe", &(0x7f00000005c0)=""/80, &(0x7f0000000640)="94a268cc7796fb80784ea7ae59b3d574a2378fa0e9773754151b0184a8a46668424d42a84c6a6055939177292c04f2e93bf8b8262f5bcd62efe588f9bcc3b8ef56300fd617e8db18ec67f6ac607696f959d8cb6748d2372ea63d6d7fac4b9ad064d4ef8aaed3b2e0f7fd877d3f58d97332f41a24080c1dff1879cb47f0405873c56cb7e1ec8932ea70ec4a990df659b90d0c385a30de57c0b342d2ecad20cb8c616c16b305474f2115388baf2eb93de8e1409e28dabe213bca7ba232190f39ccf774ec33", &(0x7f00000007c0)="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", 0xffffffff, r6}, 0x38) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mkdirat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r10, 0x6, 0x1c, 0x0, &(0x7f0000000140)) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000200)={r11, 0x1, 0x3, 0xf7, 0x8, 0x5}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x40000000, 0x200, 0x5, 0x42239, 0xffffffffffffffff, 0xbcae, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000040), &(0x7f0000000300)=r7}, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYRESHEX, @ANYRES32=0x0, @ANYRES8], 0x30}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r8, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa2000000000000ffff17000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.637623684s ago: executing program 3 (id=4845): ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000000c0)=0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7632e3949324a601}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d0, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x58, 0x3, "f9250e9eb58512eda55dd59623f2c9f6de27b0d83a62d0513c5fbc01931850d26f4295300a2c9c27eabf17e2c190d1164c6e74195f08e1a5479953f809d6db45ad5d9ce989585caea29fb4eb8478dbaf937d2321"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@ipmr_delroute={0x90, 0x19, 0x800, 0x70bd28, 0x25dfdbfe, {0x80, 0x30, 0x14, 0x6, 0xfe, 0x3, 0xfe, 0x5, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x73, 0x0, 0x5, r3}}, @RTA_METRICS={0x53, 0x8, 0x0, 0x1, "8723c5e7202a76d0c1dc62f7df6dcc80ee8c319fbb753b472c4a66892172ea9d484b78eebcc9e45507a91aef31911eccba532175871446066d9f471294953748a6592499968e823a7d255aa859dfae"}, @RTA_PRIORITY={0x8, 0x6, 0x101}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x7ff}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x814) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000900)={{'\x00', 0x3}, {0xffffffff}, 0x149, 0x0, 0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)="d10a726394cbddfcac4155946b253d8e5a8cac99b900b97062258c17aa9ca3739643e5b4c8301d0892557185b510aed8dd108eef6f635d1a919a5e49447a4c11c8a82fb27779e5ab4e94acfee63a7427596e253e04cd15c4422f3187dfc237e69111dbb243b12103c43e5a820bda42031287119437b8f0f7d3612265ce3a8b4488f59dacecc96ae055a2f87228c332083f8f71e784eb3d53dd8d64c693f8112d87376dca3eb35fa5046c579538c24350feeefa5b7c78108175ee91b85d532a1a74838df262dd0ad825eaf89a9072bfa0e960ee7e4fca4194affe7b63b52e76", 0xdf, 0x0, &(0x7f0000000740)={0x2, 0x194, {0x0, 0xc, 0xde, "a5331c9983beadfe048a1e5c1a8c215d95b10d1fce3b92b33f1dc4ea93c3d7717e2f1233511dbed435bf1d0d163fb930530073446d9ce6b0779ceb6278b9f979d0d394c05d82c1333ad142d90aa97c47ce1426fc112e8501c57784ff4dd62eafc6887b7c3f988913253701782d8376a7bc6d3a1e10df5422d32a5a830b6b8a6013424754b552fd2bf68dd953302e83a32ea7196d13f4620b149bc42001f4d828775fcc8b54b4657c18d5ecfcd9565d6c0cf73c5d84b9f795e5eabcb2d159984c3d5299f1cf00161a1bd715a761e49a0090c19de4d92316274f75f0ba6436", 0xa9, "c3760b96607b56a69ea208314d7147698724c7567b17674bc6e11571753484bc6989a74393b2ac5c879ba60d29acf9da0300dc767932042c622e562817fc33305f66524d4274a3447de76cbf1a5dd7b22fcde807b949f54c07d4a3f4ab43cc549b8fb3d0e973f8872dab2d2e5914c5150da2f57c6310be882a8153c03f5f7763ef10ea587ae34fad282ee2d4b2ed8a1ea823763dd102056ba5f74173dcc24f54a369af90b37b0491b1"}}, 0x1a0}) recvmsg$can_j1939(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)=""/158, 0x9e}, {&(0x7f0000000a40)=""/191, 0xbf}], 0x2, &(0x7f0000000b40)=""/161, 0xa1}, 0x2020) sendmsg$unix(r0, &(0x7f0000002100)={&(0x7f0000000c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000000cc0)="185a8be95b6af46cbc3f58e1f1d626ad108082cb79afc34d01ade8f059a495bb045400f866e5fe592b62fc024f9bee93a097d82efb2eb5e1ea2798a6de393bb24adc", 0x42}, {&(0x7f0000000d40)="a3db995406708758f91fc21047160b0a27abbd890fd214d768605880086c330cb1f4487c611c5084947443b1d455e306a0c8cd5ef26bf9b17c3be28a54b7e1a249bcb5ecf1359173fa0d0ee84a8d2f339fa16f94a54657ecb6f26b492a3c783b110ec31348de6e4d60bd0d15fc2fb9940c968fcaed187698895e094eba56c85a90d73a2ac30457b295f3a25516ad1c2c992b7c2e9c902fbf163e3c176536c6562c932a72e166db69843f2db6d2bc0eb978cbcb8867f1f8293e201ebebe8438c35fac54e98f5aac9f", 0xc8}, {&(0x7f0000000e40)="af52799cc8af8dc79716c3634d7b373af058d4371d76dab9dbda01181fdd47c4631dc214ecc8f012f4f082fdf627c365f36c222de260abceb7d72472fc3ba547a9873a4b7ac039c18310b842e0f0455d14aa38e60c2042c7959fb633f87168f01a1dec455622d944bd6c1c8086283d37babd6ab55f5c4666706724b86bf9e6c30752aa32f8099582960262aa", 0x8c}, {&(0x7f0000000f00)="7798908e21e2dffb290a3bb27003e591f56c25a1b5aa403d71f16971f56a80901c74674a722e3851137737ac32d46f3c8ed637c2101150dcde0eceb8b09a7fe98f3209e6978f242059275ccaea44852b4cdf0ce299d614b5beabc5a1a63ae0e72f3da02a37f10925f4f96b3ba3e5b45dc84134fb553bc8ca524c2a02366eee799bf55ee22c17cd413ef64e1ddf28b9c008b0592b3f970c177847ac9a08117d7ff38460a7b5ddf1d9d3049f42916e4e5d066eec97f8c611", 0xb7}, {&(0x7f0000000fc0)="35f3d3c3cc7dbea2357095b66e2cf501dcf2a918079e56dd9675b295cf6e43757d9010d78e2d6c451a15532a557b04a6b96e6b1b75bbdecf92ec66e3153d318e090d02f2a7ab319fce1373d6d4a3e9880689baa4e5bac7bfae9c99488d9d8538dc4f89d8633e11fdd858ad679f88bad30dbaf58adfc442f1c94b5013f605af06e2315eaf1052c7e28e18645acd05c8cf44602baba88ed2d9c0381a363194b5fe6eb3b7a036f175761b851eaae5d7c8", 0xaf}, {&(0x7f0000001080)="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", 0x1000}], 0x6, 0x0, 0x0, 0x8041}, 0x40881) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4c010) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x70, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xab}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x7fffffff}}, @NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x4092) sendmsg$nl_route_sched(r1, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)=@deltfilter={0x34, 0x2d, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0x10, 0xffff}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x40448c6) r4 = accept$unix(r0, 0x0, &(0x7f0000002480)) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f00000024c0)={0x80000001, 0x2, 0x80, 0x4, 0x2}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000002500), &(0x7f0000002540)=0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x68, 0x140f, 0x8, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4015) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f00000026c0)=0x59d, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000002740), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000027c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r7, &(0x7f0000002880)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x34, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xc4}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7af}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002940)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002980)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000029c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000002b00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x64, r11, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1004}, 0x100) 1.350469982s ago: executing program 3 (id=4846): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f00000002c0), 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x164, 0x24, 0xf0b, 0x70bc25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffab}, {0xffff, 0xffff}}, [@TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x6f, 0x2, 0xc4, 0x2, 0xff, 0x4cbc5005, 0x2}}, {0x8, 0x2, [0x3ff, 0x400]}}, {{0x1c, 0x1, {0x81, 0x8, 0x5, 0x2, 0x2, 0x9, 0x6, 0x5}}, {0xe, 0x2, [0x81, 0x2, 0x3, 0x6, 0xff]}}, {{0x1c, 0x1, {0x4, 0x6a, 0xac0f, 0x31b, 0x0, 0xf99e, 0x7ff, 0x4}}, {0xc, 0x2, [0x7ff, 0x2380, 0x1000, 0x0]}}, {{0x1c, 0x1, {0x6, 0x60, 0x7f, 0x2, 0x0, 0x0, 0x6, 0x3}}, {0xa, 0x2, [0xe000, 0x3, 0x1]}}, {{0x1c, 0x1, {0xd, 0xd, 0x9, 0xc8, 0x0, 0xd87, 0x5, 0x2}}, {0x8, 0x2, [0x7fff, 0x0]}}, {{0x1c, 0x1, {0xf, 0x5, 0x9, 0x100, 0x2, 0xa4f, 0xc, 0x3}}, {0xa, 0x2, [0x9, 0x4, 0xfbaf]}}, {{0x1c, 0x1, {0x7, 0x9, 0x4e19, 0x3, 0x0, 0x8, 0xf699, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0x3, 0x8, 0x3, 0x7, 0x0, 0xffffff7f, 0x4, 0x5}}, {0xe, 0x2, [0x5, 0x0, 0x5, 0x1, 0x4]}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async, rerun: 64) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0800080007000000000016"], 0x72) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) (async, rerun: 64) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1f4) (rerun: 64) 1.346553588s ago: executing program 1 (id=4847): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x21, 0x800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', r3, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYRESDEC], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x7, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.275314932s ago: executing program 2 (id=4848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000002f40)={0xff, 0x4, 0x8, 0x1}, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='8\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)={0x14, 0x38, 0x301, 0x70bd27, 0xfffffffc, {0x4, 0x0, 0xec0}}, 0x14}, 0x1, 0x1000000, 0x0, 0x448d3}, 0x400c000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000002f00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002c80)={0x204, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x97}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xeb7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4cf5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x984}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc00000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1604}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) sendmmsg$inet_sctp(r1, &(0x7f0000002c00)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000080)="80c83425", 0x4}, {&(0x7f00000000c0)="bbbe", 0x2}, {&(0x7f0000000200)="6daeb9fbc4fcfa2d0ded364c63bd9cbcb8b17f2ec76327cd4eb6f4575db517d7d4cb8ff7668c2adae6978691a8d77c42ff6bfce10b0c83819555b82527fdc3320b811fccd73165ac668e884054cd5c23a51e4bb8c95c55c9b22239c5a94feb939a982717a4716674f02437109a462d477efea64d3ac0599c887902722fe7959a670c7ceb42d22e7e1d", 0x89}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="d3c2670e5401f97c2809baeb6a4c3f51fe3f72292b2bee56b5372be8a9127bf0587ecd16c1d44b04b7b1655acb01e1235b7315de3c0f2a7d39dff4c80236c059041f5361fe17c46b0d7020192f1a783144a2889b7db9ba46801152fb9a22acf1ca8145194e39bfc991f99543a0b036bde7e58e200225323f9917d2fa4151a0ec6dac3448b1f67c70530e92d36d1d7d04e8a81fcc15631d69fc1aba218b22bd7e9140a88e31082908357c0a", 0xab}, {&(0x7f0000001580)="862b3b7fa768e3238504b92077634729f61947c361887e13f0eb12a39f2662d606759156fff1b408f94cf28cb7befb4503", 0x31}, {&(0x7f00000015c0)="54af52c0f765d08d5aede3d5fcd6767542b69e10e962733882696455fca0c258f378ff062d86a56e750ab225f72c2248558a86e1216f4624bc44ee6ef9c8385db59cfc3fc6435c2b982d826b8947b37438633ab188d6f3d8a20605280e5c57e6cce3f2cd6fdd5918a50c52fd0a8faba03e44e7f71f49582ed1b80128331b16e97b5feee1485eea31edad4371d7f4f62c8285c3e226f3df18769d", 0x9a}, {&(0x7f0000001680)="654157f2ec9bba5595bdac4b7d030fa7a5b0711fca364b336a23308b080ba6230e84f2ff75616c804f1f3056a29f1d9dda6f2fe76e1fc38a2e94d2b890513386dc64fce0d5c906fb45f0d2d51c3bdbf3c9dfa1ac7e47c97fe8c00945877875", 0x5f}, {&(0x7f0000001700)="ff84d7c321eabbde3cbca918477c0b552a8521d3076fee5d8a8cc8b44086788056667885bf1e27acd3008fdfb04ea1c8203533724a22d95d9843874790cff48b4f5de258a53378c48f7273c4a8ca9106aa663f88d7acc0666ea71a646537ef17167bbb1b9704118bedadd07ab21dd2541a1785f18318a538278e7b71bfa9de52", 0x80}], 0x9, 0x0, 0x0, 0x48000}, {&(0x7f0000001840)=@in6={0xa, 0x4e20, 0x192a, @empty, 0x8}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000001880)="b0bbd856362ffcc6388e74b1744eb4c469abc403d21de2fbb740da434aba2283d767b10c8e7d2f1bb20160712cf1c44b0e685cb44836a8df8d1c272a16594087f06ec1f21ce3fbfc45945dc3cc176ddcc8607514e95e74c439d2f653dcb3a4f57a6ff29fcb9a3ae18ae6d5985d48cbd6c50e4bfeb8b729fc0fa46a685a72fa3b6bc2f828be499b0bc4d847243747b8d6c9966529a9b4476236357cfcbfa65e4d06614a8a4111eb51f125057b4d6db9c8fba32c5b59b9ff803c7c4ec05c8bef603cad6459cd19cb05f978490e56", 0xcd}, {&(0x7f0000001980)="52df2a4892168b1e09be14ad3240a168ebcc26a79d35756750ba6c0e5608abfd09b28f0f250ee6502094292f449d01480615a4ab277cf5e2e5dbb6464c786aae2a07a1a53a28fc6ba491a71abec74cbe54144b0348ba1401440f6fabfb4be2569fed502d6c7c5e777a9d324d1e70639c3f0594df390b18", 0x77}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="87c1206d60daedbf091dfac6a71f83f7427da40f7a6b562cce5daa2981f3723463758d60bfcb4205bf47146776ace818cc05c6af71f06d4f8c1af4d61521", 0x3e}, {&(0x7f0000002a40)="1e248c6d4b633ba0ba87d1a43d1da3397d5e961cb7cd5ae35a8a038d728267bc0567b5f9d67d3836e2655024f5ca390ca45f796dfadd85a194081c7e2460de47a54f2e908b2b2690c38413999d6222", 0x4f}, {&(0x7f0000002ac0)="a69e5c57c062ac18b1919441831956b67025fc34f7a6e5f277b4e058393a3b5de94e6db960a07c1ea2de44f3d80bdf2489a28c271bdd94096010af0766ead8d2b4b4f7497b182818067388592c", 0x4d}], 0x6, &(0x7f0000002bc0)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}, @init={0x18, 0x84, 0x0, {0x5, 0xa826, 0xf1, 0x81}}], 0x38, 0xc800}], 0x2, 0x4000) write(r0, &(0x7f0000000000)="0af1dabed401284834ba753855a3a6430fd9923e610b", 0x16) 1.005044033s ago: executing program 1 (id=4849): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000180)={0x7, 0x0, 0x7fffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x4000000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x4, 0x68, 0x8}]}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x6c, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r7, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x800}, 0x8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x2, 0x8, 0x9, 0xc, 0x0, 0x70bd2c, 0x4, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x73, 0x2}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@loopback, 0x2, 0x14, 0x14}]}, 0x60}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, 0x0, &(0x7f0000000040)=0x5d) 674.484003ms ago: executing program 2 (id=4850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r3 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x12, 0x0, 0x2000000, 0x1, 0x2700}}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000010c0)={r5, 0x7}, &(0x7f0000001140)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x26}, 0x5}}}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "31f7a431c67b781249c8b5508ea46607"}]}, 0x30}}, 0x10000010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574000014000280080002400000000108000140000000c508000b40000000000900010073797a3000"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 539.578279ms ago: executing program 0 (id=4851): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000000700000000000002000900080000005300000000000000030006000000000002001000000000000000000000000000020001000000000000000a0d00000000030005000000000002000000ac1414000000000000000000ea3bd732b845185bd3f0a522e68e7ecc755ec9e988ce324151239b3c3ecb86840bbb324cb3777bf6944b8729141a1ebb688db41334ba2acfdd4963d6b532a9170076d06275b60717fecf86dca1f92fbfff"], 0x60}, 0x1, 0x7}, 0x0) recvmmsg(r0, &(0x7f0000006200)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000140)=""/181, 0xb5}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/179, 0xb3}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/237, 0xed}], 0x6, &(0x7f0000001740)=""/51, 0x33}, 0x7f}, {{&(0x7f0000001780)=@generic, 0x80, &(0x7f0000001840)=[{&(0x7f0000001800)=""/43, 0x2b}], 0x1, &(0x7f0000001880)=""/48, 0x30}}, {{&(0x7f00000018c0)=@in6, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001940)=""/126, 0x7e}, {&(0x7f00000019c0)=""/207, 0xcf}, {&(0x7f0000001ac0)=""/2, 0x2}, {&(0x7f0000001b00)=""/46, 0x2e}, {&(0x7f0000001b40)=""/71, 0x47}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/18, 0x12}], 0x7}, 0x9}, {{&(0x7f0000002c80)=@ethernet, 0x80, &(0x7f0000004240)=[{&(0x7f0000002d00)=""/130, 0x82}, {&(0x7f0000002dc0)=""/25, 0x19}, {&(0x7f0000002e00)=""/143, 0x8f}, {&(0x7f0000002ec0)=""/19, 0x13}, {&(0x7f0000002f00)=""/34, 0x22}, {&(0x7f0000002f40)=""/196, 0xc4}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/206, 0xce}, {&(0x7f0000004140)=""/14, 0xe}, {&(0x7f0000004180)=""/146, 0x92}], 0xa, &(0x7f0000004300)=""/80, 0x50}, 0x4}, {{&(0x7f0000004380)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004400)=""/70, 0x46}, {&(0x7f0000004480)=""/15, 0xf}, {&(0x7f00000044c0)=""/110, 0x6e}, {&(0x7f0000004540)=""/139, 0x8b}], 0x4, &(0x7f0000004640)=""/28, 0x1c}, 0x5}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004680)=""/43, 0x2b}, {&(0x7f00000046c0)=""/6, 0x6}], 0x2, &(0x7f0000004740)=""/96, 0x60}, 0x2}, {{&(0x7f00000047c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004840)=""/100, 0x64}, {&(0x7f00000048c0)=""/6, 0x6}, {&(0x7f0000004900)=""/114, 0x72}, {&(0x7f0000004980)=""/208, 0xd0}, {&(0x7f0000004a80)}, {&(0x7f0000004ac0)=""/227, 0xe3}, {&(0x7f0000004bc0)=""/177, 0xb1}, {&(0x7f0000004c80)=""/28, 0x1c}, {&(0x7f0000004cc0)=""/231, 0xe7}], 0x9, &(0x7f0000004e80)=""/128, 0x80}, 0x8}, {{&(0x7f0000004f00)=@nl, 0x80, &(0x7f0000006180)=[{&(0x7f0000004f80)=""/229, 0xe5}, {&(0x7f0000005080)=""/8, 0x8}, {&(0x7f00000050c0)=""/104, 0x68}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/22, 0x16}], 0x5}, 0x3}], 0x8, 0x42, &(0x7f0000006400)={0x0, 0x989680}) 257.695474ms ago: executing program 1 (id=4852): r0 = socket(0x15, 0x5, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x311, 0x6, 0x81, 0x6, 0x4f, @random="0afbf5013979"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) 193.619513ms ago: executing program 4 (id=4853): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x24, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000001800)=ANY=[@ANYRES8=r6], 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="ceebbeee5be861d9380000005400010326bd70007ddbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="01010100e000000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040040) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1d0f0000001341d070c31662d6dc9b0000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r10 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r10, 0x0, 0x40, 0x0, &(0x7f0000000300)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c) 42.833983ms ago: executing program 2 (id=4854): sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x41) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000480)={0x9, {0x2, 0x2, 0x1ff, 0x6, 0x8000000000000000}}) sendmsg$nl_route_sched(r5, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40005) bind$rds(r4, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004500)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f00)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r7, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) r8 = socket$rds(0x15, 0x5, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r9, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10001, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}}], 0x48, 0xc800}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 11.738682ms ago: executing program 3 (id=4855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0x8845) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 0s ago: executing program 1 (id=4856): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000001f0f000000000300060000000e0002000000e0000009000c000000000000020001000029648fc000000200000100030005000000000002000000e10000010000"], 0x50}}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x190) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0xb7, 0x2}, &(0x7f0000000740)=0x8) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r6 = accept$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000390423bd7000fbdbdf25000000000104d121ff7837325fd6159eb04a71e7827109d050db7f104553860b4c9c97f5f657e5f92177cdef98d0edaa0bf564808bdd2953fc1279bb617344d8b9937a9c6776a9f1f2d14e0e0d940384d1fe994ba0b5c79ea369a49ae3e2a076886b7d0a9c0000", @ANYRES32=r7, @ANYBLOB="81b8000000000000200012800b000100697036677265000010000280040012000600020009000000"], 0x40}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) socket$kcm(0x29, 0x7, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r3) sendto$packet(r0, &(0x7f0000000840)="e8f401f65b1b756dbba7104182d161162774b3f1c5a085fa8e5fb8ce3123a5934e80065548b74f7d1a00828e7bc6b8f19c5db5620ee946a22869e8b9c486dcfe9f90b20fa7e15418988d5aa2ecff66ed9c1011990400000000000000aa5320ba6d54cbe4fad129640fb65c454b0000000000000000a4ae673a84a8393b2195004535e0ec0e9e92c0323f03ed2a20eae96a2b93bdac6280e2a6b9f2f8e1e38cc082d276294aef70742b466acc1268d9b24592ba4669355c79bcd284aabc6593ab032fb93e816204e33b853ab8bd837042895d9c187870594d68fd5732ddd3810e7e11d1466fef69a6639e801b10bb27079f6414a5bfd4d0b3c1ac93128a8cf3f1c0cad6ca9df060f978eed260debc75213f807ec05d26cb8728346f50eba7d8b4ad15dcaca6c717fe73cafad2332ac5c10a78994ca8a6b5acb1b924090000000000000022601fbec9ae018f868e60383269ae5a1a2331c5080be6", 0x15a, 0x24004805, &(0x7f0000000200)={0x11, 0x5, r7, 0x1, 0x0, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): vsim netdevsim0 netdevsim1: renamed from eth1 [ 334.892807][T17086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.931171][T17086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.956465][T17086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.957209][T17086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.961008][T17086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.126862][T17086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.167613][T17086] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.185107][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.185199][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.220942][ T9196] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.221072][ T9196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.349827][T17325] syzkaller1: entered promiscuous mode [ 335.349851][T17325] syzkaller1: entered allmulticast mode [ 335.381834][T17325] IPv6: addrconf: prefix option has invalid lifetime [ 336.184466][ T5626] Bluetooth: hci2: command tx timeout [ 336.184966][T17086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.293471][T17086] veth0_vlan: entered promiscuous mode [ 336.310533][T17086] veth1_vlan: entered promiscuous mode [ 336.358155][T17086] veth0_macvtap: entered promiscuous mode [ 336.363477][T17086] veth1_macvtap: entered promiscuous mode [ 336.393140][T17086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.422344][T17086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.456557][ T9196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.456751][ T9196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.456891][ T9196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.489205][T17359] netlink: 'syz.4.3053': attribute type 1 has an invalid length. [ 336.684555][T12030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.690976][ T9196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.690997][ T9196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.884239][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.884261][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.061977][T17374] __nla_validate_parse: 5 callbacks suppressed [ 337.061997][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3059'. [ 337.062016][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3059'. [ 337.253677][T17383] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3062'. [ 337.282587][T17383] lwtunnel_input(): recursion limit reached on datapath [ 337.283807][T17383] lwtunnel_input(): recursion limit reached on datapath [ 337.285213][T17383] lwtunnel_input(): recursion limit reached on datapath [ 337.285806][T17383] lwtunnel_input(): recursion limit reached on datapath [ 337.286428][T17383] lwtunnel_input(): recursion limit reached on datapath [ 337.287583][T17383] lwtunnel_input(): recursion limit reached on datapath [ 337.288216][T17383] lwtunnel_input(): recursion limit reached on datapath [ 337.289407][T17383] lwtunnel_input(): recursion limit reached on datapath [ 337.290009][T17383] lwtunnel_input(): recursion limit reached on datapath [ 337.723819][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3064'. [ 338.266641][ T5626] Bluetooth: hci2: command tx timeout [ 338.452510][T17402] nbd: couldn't find device at index 15663104 [ 338.841740][T17413] gretap0: entered promiscuous mode [ 338.954637][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.959386][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.963562][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.004215][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.006721][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.117550][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3073'. [ 339.117576][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3073'. [ 339.620406][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'. [ 339.620432][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3076'. [ 340.058311][T17457] bond11 (unregistering): Released all slaves [ 340.196776][T17463] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 340.197423][T17463] team0: Device ipvlan2 is already an upper device of the team interface [ 340.297950][T17463] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 340.298419][T17463] team0: Device ipvlan2 is already an upper device of the team interface [ 340.412595][T17463] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 340.413155][T17463] team0: Device ipvlan2 is already an upper device of the team interface [ 340.557111][T17463] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 340.557748][T17463] team0: Device ipvlan2 is already an upper device of the team interface [ 340.715021][T17463] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 340.715617][T17463] team0: Device ipvlan2 is already an upper device of the team interface [ 341.064266][ T5626] Bluetooth: hci4: command tx timeout [ 341.202006][T17495] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3090'. [ 341.378426][ T32] audit: type=1107 audit(1791412079.920:6): pid=17494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¸ ÚH™ (ìÛ¯!@ ˜º …ká¸8±é£Ä+ u¼_ÖñcIɤ:>ëBªýÆE­ß!éý†¥*×®VEÛÈÃÖl ®,¨ÈÌ«UíRÕÇz›f²Ô‹„¨3³~±& 1ø™OdÅ!r–%Õ [ 341.378426][ T32] a•6QZ§.·zU‘”¨¢ÀJyl1ßL¡' [ 341.490477][T17511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3094'. [ 342.015106][T17533] ÿÿÿÿÿÿ: renamed from veth0_virt_wifi (while UP) [ 342.385420][T17423] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.385620][T17548] __nla_validate_parse: 4 callbacks suppressed [ 342.385638][T17548] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3098'. [ 342.387117][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.387514][T17423] bridge_slave_0: entered allmulticast mode [ 342.397518][T17423] bridge_slave_0: entered promiscuous mode [ 342.462695][T17548] 8021q: VLANs not supported on gre0 [ 342.470785][T17423] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.470924][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.471057][T17423] bridge_slave_1: entered allmulticast mode [ 342.499586][T17423] bridge_slave_1: entered promiscuous mode [ 342.564005][T17423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.578597][T17423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.633695][T17423] team0: Port device team_slave_0 added [ 342.643368][T17423] team0: Port device team_slave_1 added [ 342.705929][T17423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.705948][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.705977][T17423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.709027][T17423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.709042][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.709098][T17423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.022295][T17423] hsr_slave_0: entered promiscuous mode [ 343.023897][T17423] hsr_slave_1: entered promiscuous mode [ 343.041353][T17423] debugfs: 'hsr0' already exists in 'hsr' [ 343.042445][T17423] Cannot create hsr debugfs directory [ 343.144441][ T5626] Bluetooth: hci4: command tx timeout [ 343.214694][T17565] netlink: 'syz.3.3104': attribute type 23 has an invalid length. [ 343.289756][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3099'. [ 343.787083][T17583] netlink: 'syz.4.3107': attribute type 21 has an invalid length. [ 343.787112][T17583] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.849270][T17586] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3110'. [ 343.970785][T17423] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.100537][T17423] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.151933][T17590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3111'. [ 344.272564][T17596] netlink: 'syz.4.3114': attribute type 1 has an invalid length. [ 344.335284][T17423] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.476572][T17423] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.692806][T17616] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 344.722983][T17608] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 344.909653][T17423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.011475][T17423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.012300][T17423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.039136][T17622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3120'. [ 345.082631][T17423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.121871][T17622] tipc: Started in network mode [ 345.121910][T17622] tipc: Node identity ac14140f, cluster identity 4711 [ 345.122173][T17622] tipc: New replicast peer: 255.255.255.255 [ 345.122826][T17622] tipc: Enabled bearer , priority 10 [ 345.122911][T17423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.189697][T17423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.203317][T17630] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3120'. [ 345.271876][ T5626] Bluetooth: hci4: command tx timeout [ 345.272427][T17423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.312671][T17423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.388412][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3123'. [ 345.439281][T17638] netlink: 'syz.4.3123': attribute type 16 has an invalid length. [ 345.637653][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3125'. [ 345.724449][T17653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3125'. [ 345.820419][T17423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.852438][T17423] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.919393][T12039] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.919498][T12039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.967015][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.967118][T12039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.248036][T17667] netlink: 'syz.0.3128': attribute type 10 has an invalid length. [ 346.248060][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'. [ 346.278941][T17669] netlink: 'syz.0.3128': attribute type 10 has an invalid length. [ 346.307831][ T5753] tipc: Node number set to 2886997007 [ 346.600829][T17679] xt_TCPMSS: Only works on TCP SYN packets [ 347.315643][ T5626] Bluetooth: hci4: command tx timeout [ 347.400718][T17706] netlink: 'syz.0.3136': attribute type 9 has an invalid length. [ 347.753907][T17721] __nla_validate_parse: 2 callbacks suppressed [ 347.753948][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3141'. [ 347.753978][T17721] netlink: 'syz.0.3141': attribute type 10 has an invalid length. [ 347.753995][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3141'. [ 347.854310][T17721] geneve2: entered promiscuous mode [ 347.854631][T17721] geneve2: entered allmulticast mode [ 347.957540][T17726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3140'. [ 348.037292][T17717] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 348.429974][T17738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3144'. [ 348.457889][T17423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.459254][T17738] syzkaller1: entered promiscuous mode [ 348.459274][T17738] syzkaller1: entered allmulticast mode [ 348.754918][T17423] veth0_vlan: entered promiscuous mode [ 348.794023][T17423] veth1_vlan: entered promiscuous mode [ 348.831744][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3147'. [ 349.012634][T17423] veth0_macvtap: entered promiscuous mode [ 349.065228][T17423] veth1_macvtap: entered promiscuous mode [ 349.163467][T17423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.212415][T17423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.324055][T17768] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.389632][T17768] bond1: (slave lo): Enslaving as an active interface with an up link [ 349.436515][T17768] net_ratelimit: 120 callbacks suppressed [ 349.436610][T17768] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 349.665295][T12032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.665347][T12032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.665385][T12032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.686945][T12032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.937253][ T9198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.937277][ T9198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.184159][ T9198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.184181][ T9198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.299103][T17801] netlink: 'syz.2.3159': attribute type 2 has an invalid length. [ 350.299127][T17801] netlink: 'syz.2.3159': attribute type 2 has an invalid length. [ 350.533172][T17810] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 350.696656][T17815] netlink: 'syz.0.3162': attribute type 21 has an invalid length. [ 350.696770][T17815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3162'. [ 350.919700][T17827] sctp: [Deprecated]: syz.0.3167 (pid 17827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.919700][T17827] Use struct sctp_sack_info instead [ 351.232626][T17836] TCP: TCP_TX_DELAY enabled [ 351.249669][T17836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3169'. [ 351.249694][T17836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3169'. [ 351.274067][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'. [ 351.577937][T17845] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 351.697520][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.702744][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.714750][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.736656][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.738182][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.802893][T17856] smc: net device lo applied user defined pnetid SYZ0 [ 352.305267][ T5615] bond0: (slave syz_tun): Releasing active interface [ 352.524064][T17873] pim6reg527: entered allmulticast mode [ 352.843603][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3180'. [ 353.324904][T17912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3185'. [ 353.428702][T17914] netlink: 'syz.4.3188': attribute type 1 has an invalid length. [ 353.428745][T17914] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3188'. [ 353.730249][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3191'. [ 353.784406][ T5632] Bluetooth: hci3: command tx timeout [ 354.680960][T17960] IPv6: NLM_F_REPLACE set, but no existing node found! [ 355.085980][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 355.091645][T17967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3202'. [ 355.093262][T17967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3202'. [ 355.296051][T17851] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.297387][T17851] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.297526][T17851] bridge_slave_0: entered allmulticast mode [ 355.328140][T17851] bridge_slave_0: entered promiscuous mode [ 355.341123][T17980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3203'. [ 355.354917][T17851] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.355100][T17851] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.355236][T17851] bridge_slave_1: entered allmulticast mode [ 355.358918][T17851] bridge_slave_1: entered promiscuous mode [ 355.437288][T17851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.441119][T17851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.467220][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3205'. [ 355.865827][ T5632] Bluetooth: hci3: command tx timeout [ 355.957363][T17851] team0: Port device team_slave_0 added [ 355.987648][T17851] team0: Port device team_slave_1 added [ 356.087364][T17851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.087384][T17851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.087414][T17851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.129798][T17851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.129815][T17851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.129870][T17851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.300134][T17851] hsr_slave_0: entered promiscuous mode [ 356.302796][T17851] hsr_slave_1: entered promiscuous mode [ 356.317606][T17851] debugfs: 'hsr0' already exists in 'hsr' [ 356.317628][T17851] Cannot create hsr debugfs directory [ 356.379251][T18007] xt_limit: Overflow, try lower: 536871034/0 [ 357.252661][T17851] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.647998][T12030] IPVS: starting estimator thread 0... [ 357.648395][T18040] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 357.671334][T17851] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.687881][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 357.744348][T18044] IPVS: using max 29 ests per chain, 69600 per kthread [ 357.965831][ T5632] Bluetooth: hci3: command tx timeout [ 358.077570][T17851] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.240062][T17851] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.482419][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3226'. [ 358.483214][T18064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3226'. [ 358.483346][T18064] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 358.634669][T17851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.702941][T17851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.703869][T17851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.758070][T17851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 358.762882][T17851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.855478][T17851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.856297][T17851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.889056][T18075] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 358.912609][T17851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.048448][T18075] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 359.198129][T18092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3230'. [ 359.218159][T18092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3230'. [ 359.222722][T18092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3230'. [ 359.251260][T18092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3230'. [ 359.311893][T18092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3230'. [ 359.312886][T18092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3230'. [ 359.313831][T18092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3230'. [ 359.339159][T18092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3230'. [ 359.597360][T17851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.630270][T17851] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.646162][T12032] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.646264][T12032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.680736][T12030] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.680847][T12030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.028474][ T5632] Bluetooth: hci3: command tx timeout [ 360.401814][T17851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.476691][T17851] veth0_vlan: entered promiscuous mode [ 360.490471][T17851] veth1_vlan: entered promiscuous mode [ 360.541785][T17851] veth0_macvtap: entered promiscuous mode [ 360.557185][T17851] veth1_macvtap: entered promiscuous mode [ 360.587057][T17851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.612492][T17851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.675076][ T9196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.676261][ T9196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.676305][ T9196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.676346][ T9196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.783785][T12043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.783802][T12043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.849597][ T9198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.849619][ T9198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.196588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.428706][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.887287][T18119] netlink: 'syz.2.3233': attribute type 10 has an invalid length. [ 383.887584][T18119] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.888182][T18119] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.935526][T18119] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.935728][T18119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.936086][T18119] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.936228][T18119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.015389][T18119] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 384.100479][T18119] __nla_validate_parse: 26 callbacks suppressed [ 384.100502][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3233'. [ 384.100584][T18119] bridge_slave_1: left allmulticast mode [ 384.100981][T18119] bridge_slave_1: left promiscuous mode [ 384.102196][T18119] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.172326][T18119] bridge_slave_0: left allmulticast mode [ 384.178644][T18119] bridge_slave_0: left promiscuous mode [ 384.189693][T18119] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.233997][T18130] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3231'. [ 384.294047][T18119] bond0: (slave bridge0): Releasing backup interface [ 384.852536][T18155] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3243'. [ 384.902422][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'. [ 385.021475][T18162] nbd: must specify a size in bytes for the device [ 385.279270][T18174] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 385.322362][T18175] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 385.374775][T18179] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 385.516917][T18184] openvswitch: netlink: VLAN attribute unexpected. [ 385.880397][T18193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3256'. [ 386.548277][T18225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3259'. [ 386.611499][T18224] Bluetooth: hci0: unsupported parameter 5161 [ 386.611523][T18224] Bluetooth: hci0: unsupported parameter 8192 [ 386.611562][T18224] Bluetooth: hci0: unsupported parameter 5161 [ 386.611576][T18224] Bluetooth: hci0: unsupported parameter 8192 [ 386.666948][T18224] ip_tables: iptables: counters copy to user failed while replacing table [ 386.788313][T18229] syzkaller1: entered promiscuous mode [ 386.789126][T18229] syzkaller1: entered allmulticast mode [ 386.843815][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 386.861376][T18234] netlink: 'syz.1.3262': attribute type 1 has an invalid length. [ 386.892723][T18229] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.901775][T18234] netlink: 'syz.1.3262': attribute type 1 has an invalid length. [ 386.902009][T18234] netlink: 'syz.1.3262': attribute type 1 has an invalid length. [ 386.902221][T18234] netlink: 'syz.1.3262': attribute type 1 has an invalid length. [ 387.133557][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3264'. [ 387.277339][T18242] vxcan2: entered promiscuous mode [ 387.476751][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'. [ 387.476775][T18245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3268'. [ 387.595214][T18248] x_tables: duplicate underflow at hook 1 [ 388.329329][T18272] netlink: 'syz.2.3278': attribute type 1 has an invalid length. [ 388.865638][T18293] netlink: 'syz.2.3283': attribute type 3 has an invalid length. [ 388.940352][T18285] bond2: entered promiscuous mode [ 388.940565][T18285] bond2: entered allmulticast mode [ 388.956867][T18285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.860542][T18326] netlink: 'syz.2.3292': attribute type 4 has an invalid length. [ 390.071983][T18332] netlink: 'syz.1.3293': attribute type 12 has an invalid length. [ 390.164871][T18335] __nla_validate_parse: 7 callbacks suppressed [ 390.164892][T18335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3295'. [ 390.292538][T18345] netlink: 'syz.1.3298': attribute type 1 has an invalid length. [ 390.416195][T18338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.652236][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3295'. [ 390.797937][T18335] syzkaller1: entered promiscuous mode [ 390.797962][T18335] syzkaller1: entered allmulticast mode [ 391.421907][T18382] macvlan0: entered promiscuous mode [ 391.773996][T18392] lwtunnel_output(): recursion limit reached on datapath [ 391.793139][T18392] netlink: 'syz.4.3307': attribute type 1 has an invalid length. [ 391.793368][T18392] netlink: 'syz.4.3307': attribute type 3 has an invalid length. [ 391.793383][T18392] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3307'. [ 392.899109][T18422] netlink: 'syz.2.3318': attribute type 39 has an invalid length. [ 393.046710][T18424] tipc: Enabling of bearer rejected, media not registered [ 393.462818][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3324'. [ 393.579912][T18434] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 393.579950][T18434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.891865][T18447] syzkaller0: entered promiscuous mode [ 393.891890][T18447] syzkaller0: entered allmulticast mode [ 393.922885][T18447] tipc: Started in network mode [ 393.922918][T18447] tipc: Node identity 123ce87d98ea, cluster identity 4711 [ 393.923155][T18447] tipc: Enabled bearer , priority 0 [ 394.205873][T18451] bridge1: entered promiscuous mode [ 394.205899][T18451] bridge1: entered allmulticast mode [ 394.315996][T18458] tipc: Resetting bearer [ 394.399643][T18446] tipc: Resetting bearer [ 394.590981][T18446] tipc: Disabling bearer [ 394.973953][T18493] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3336'. [ 395.068177][T18496] syzkaller1: entered promiscuous mode [ 395.068200][T18496] syzkaller1: entered allmulticast mode [ 395.177956][T18498] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 396.315106][T18516] pim6reg: entered allmulticast mode [ 396.418577][T18519] syzkaller0: entered promiscuous mode [ 396.418601][T18519] syzkaller0: entered allmulticast mode [ 397.483034][T18474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.788531][T18529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3346'. [ 398.288363][T18548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3352'. [ 398.396393][T18556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.541143][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3354'. [ 398.605279][T18557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.063790][T18553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3353'. [ 399.170715][T18569] netlink: 'syz.0.3358': attribute type 10 has an invalid length. [ 399.182700][T18569] veth1_macvtap: left promiscuous mode [ 399.207562][T18569] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 399.863414][T18583] xt_hashlimit: size too large, truncated to 1048576 [ 399.982839][T18584] 8021q: VLANs not supported on lo [ 400.111330][T18588] syzkaller0: entered promiscuous mode [ 400.111546][T18588] syzkaller0: entered allmulticast mode [ 400.221110][T18593] netlink: zone id is out of range [ 400.221128][T18593] netlink: zone id is out of range [ 400.221138][T18593] netlink: zone id is out of range [ 400.221148][T18593] netlink: zone id is out of range [ 400.221157][T18593] netlink: zone id is out of range [ 400.221167][T18593] netlink: zone id is out of range [ 400.221453][T18593] netlink: zone id is out of range [ 400.221465][T18593] netlink: zone id is out of range [ 400.221473][T18593] netlink: zone id is out of range [ 400.314646][T18598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3367'. [ 400.502839][T18607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3368'. [ 400.704559][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 401.250740][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3374'. [ 401.326449][T18628] netlink: 'syz.2.3376': attribute type 1 has an invalid length. [ 401.326473][T18628] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3376'. [ 401.718114][T18640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3380'. [ 401.797754][T18641] sctp: [Deprecated]: syz.3.3380 (pid 18641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.797754][T18641] Use struct sctp_sack_info instead [ 401.833932][T18642] netlink: 'syz.3.3380': attribute type 10 has an invalid length. [ 402.012767][T18642] team0: Port device dummy0 added [ 402.167363][T18648] macsec1: entered promiscuous mode [ 402.996323][T18692] __nla_validate_parse: 1 callbacks suppressed [ 402.996343][T18692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3387'. [ 403.255993][T18702] SET target dimension over the limit! [ 403.263295][T18702] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.3389'. [ 403.263317][T18702] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.3389'. [ 403.677483][T18723] netlink: 'syz.1.3396': attribute type 1 has an invalid length. [ 403.708299][T18722] syzkaller1: entered promiscuous mode [ 403.708479][T18722] syzkaller1: entered allmulticast mode [ 403.738567][T18722] veth0: entered promiscuous mode [ 403.832739][T18728] netlink: 'syz.1.3396': attribute type 1 has an invalid length. [ 403.847944][T18719] veth0: left promiscuous mode [ 404.104003][T18735] syzkaller0: entered promiscuous mode [ 404.104028][T18735] syzkaller0: entered allmulticast mode [ 404.172290][T18739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3403'. [ 404.692301][T18757] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3410'. [ 404.712001][T18759] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 405.221411][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 405.221451][T18776] netlink: 'syz.3.3415': attribute type 30 has an invalid length. [ 405.310604][T18778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 405.310640][T18778] netlink: 'syz.3.3415': attribute type 30 has an invalid length. [ 405.715031][T12028] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.715081][T12028] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.715119][T12028] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.715156][T12028] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.798523][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'. [ 405.798559][T18781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3416'. [ 405.826533][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'. [ 405.871739][ T9194] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.873381][ T9194] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.873448][ T9194] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.873485][ T9194] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.172411][T18795] net_ratelimit: 2 callbacks suppressed [ 406.172445][T18795] IPVS: sh: FWM 3 0x00000003 - no destination available [ 406.333687][T18800] netlink: 'syz.4.3421': attribute type 23 has an invalid length. [ 406.625556][T18808] netlink: 'syz.1.3423': attribute type 1 has an invalid length. [ 407.226763][T18833] openvswitch: netlink: Message has 4 unknown bytes. [ 407.226796][T18833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.281424][T18877] xt_nat: multiple ranges no longer supported [ 408.433462][T18890] __nla_validate_parse: 8 callbacks suppressed [ 408.433481][T18890] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3441'. [ 408.627872][T18889] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3440'. [ 409.012877][T18906] netlink: 'syz.4.3449': attribute type 2 has an invalid length. [ 409.429778][T18913] syzkaller0: entered promiscuous mode [ 409.429803][T18913] syzkaller0: entered allmulticast mode [ 429.630691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.704459][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 434.046996][T18937] ip_tables: iptables: counters copy to user failed while replacing table [ 434.047330][T18938] C: renamed from lo (while UP) [ 434.049792][T18938] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 434.335602][T18949] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3455'. [ 434.689731][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3462'. [ 434.961569][T18971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.013666][T18984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3459'. [ 435.548629][T18985] syzkaller0: entered promiscuous mode [ 435.548652][T18985] syzkaller0: entered allmulticast mode [ 435.603545][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 435.620567][T19000] netlink: 'syz.0.3468': attribute type 3 has an invalid length. [ 435.620586][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 435.778456][T19008] netlink: 'syz.0.3468': attribute type 8 has an invalid length. [ 435.778479][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'. [ 435.847446][T19015] netlink: NAT attribute has 1 unknown bytes [ 435.847481][T19015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.051445][T19020] ip_tables: iptables: counters copy to user failed while replacing table [ 438.737591][T19008] veth1_to_team: entered promiscuous mode [ 438.756641][T19008] veth1_to_team: left promiscuous mode [ 438.859357][T19039] netlink: NAT attribute has 1 unknown bytes [ 438.859392][T19039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.862419][T19039] netlink: NAT attribute has 1 unknown bytes [ 438.862447][T19039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.080080][T19049] netlink: 'syz.2.3481': attribute type 3 has an invalid length. [ 439.082641][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3481'. [ 439.109246][T19046] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3477'. [ 439.295205][T19046] syzkaller1: entered promiscuous mode [ 439.295386][T19046] syzkaller1: entered allmulticast mode [ 439.383994][T19059] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3482'. [ 439.408323][T19062] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 439.446264][T19059] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3482'. [ 439.449945][T19066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3484'. [ 439.476845][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 439.476940][T19062] Bluetooth: ISO socket layer initialized [ 439.502881][T19066] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 439.870205][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.889975][T19069] syzkaller0: entered promiscuous mode [ 439.889998][T19069] syzkaller0: entered allmulticast mode [ 439.991877][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3486'. [ 440.250525][T19094] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 442.931995][T19112] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3497'. [ 443.179622][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3500'. [ 443.500869][T19145] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 443.648516][T19142] syzkaller0: entered promiscuous mode [ 443.648541][T19142] syzkaller0: entered allmulticast mode [ 443.753107][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3506'. [ 443.915759][T19157] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 444.112149][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3508'. [ 446.832532][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 447.180309][T19198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3515'. [ 447.205925][T19198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3515'. [ 447.205954][T19198] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 447.541940][T19201] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3516'. [ 447.541968][T19201] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3516'. [ 447.634491][T19212] syzkaller0: entered promiscuous mode [ 447.634520][T19212] syzkaller0: entered allmulticast mode [ 447.739969][T19206] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 450.642030][T19234] ipt_ah: unknown flags FF [ 450.886747][T19246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'. [ 451.003971][T19251] tipc: Enabling of bearer rejected, failed to enable media [ 451.139180][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3533'. [ 451.209544][T19257] netlink: 'syz.0.3534': attribute type 2 has an invalid length. [ 451.673106][T19274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3539'. [ 452.069813][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3544'. [ 452.092088][T19284] netlink: 'syz.3.3543': attribute type 1 has an invalid length. [ 452.092109][T19284] netlink: 'syz.3.3543': attribute type 268 has an invalid length. [ 452.092126][T19284] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3543'. [ 452.257904][T19294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3542'. [ 452.338100][T19300] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 452.425909][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3547'. [ 452.425944][T19300] netlink: 'syz.0.3547': attribute type 30 has an invalid length. [ 452.500893][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3547'. [ 452.500930][T19302] netlink: 'syz.0.3547': attribute type 30 has an invalid length. [ 453.233454][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 453.455524][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3558'. [ 453.792836][T19358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3565'. [ 453.908093][T19361] netlink: 'syz.4.3566': attribute type 9 has an invalid length. [ 453.996161][T19365] ip_tables: iptables: counters copy to user failed while replacing table [ 454.216282][T19369] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 454.220975][T19369] bond5 (unregistering): Released all slaves [ 454.498993][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3567'. [ 454.729251][T19386] xt_addrtype: ipv6 does not support BROADCAST matching [ 454.746953][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3567'. [ 455.180131][T19399] netlink: 'syz.3.3579': attribute type 39 has an invalid length. [ 455.217495][T19396] netlink: 'syz.2.3577': attribute type 1 has an invalid length. [ 455.431911][T19407] netlink: 'syz.1.3581': attribute type 84 has an invalid length. [ 455.470110][T19387] syzkaller0: entered promiscuous mode [ 455.470133][T19387] syzkaller0: entered allmulticast mode [ 455.720957][T19412] netlink: 'syz.4.3583': attribute type 11 has an invalid length. [ 456.595551][T19435] tipc: Enabling of bearer rejected, media not registered [ 456.709475][T19446] Unsupported ieee802154 address type: 0 [ 456.742230][T19435] syz_tun: entered promiscuous mode [ 457.402873][T19470] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.430788][T19472] lo: entered promiscuous mode [ 457.517721][T19472] tunl0: entered promiscuous mode [ 457.585504][T19472] gre0: entered promiscuous mode [ 457.690359][T19472] gretap0: entered promiscuous mode [ 457.730596][T19472] erspan0: entered promiscuous mode [ 457.747519][T19472] ip_vti0: entered promiscuous mode [ 458.641827][T19510] __nla_validate_parse: 5 callbacks suppressed [ 458.641849][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'. [ 458.641868][T19510] netlink: 'syz.4.3610': attribute type 3 has an invalid length. [ 458.717991][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3610'. [ 458.718559][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 458.833384][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'. [ 458.833407][T19521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3614'. [ 458.886878][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'. [ 459.122060][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 459.122235][T19526] : renamed from bond0 (while UP) [ 459.182664][T19533] No such timeout policy "syz0" [ 459.200706][T19536] netlink: 'syz.3.3615': attribute type 1 has an invalid length. [ 459.403602][T19546] netlink: 'syz.0.3618': attribute type 32 has an invalid length. [ 459.741157][T19558] ip6erspan0: entered promiscuous mode [ 459.752090][T19555] tipc: Started in network mode [ 459.752120][T19555] tipc: Node identity faa2ddf944bc, cluster identity 4711 [ 459.753160][T19555] tipc: Enabled bearer , priority 0 [ 459.757797][T19555] syzkaller0: entered promiscuous mode [ 459.758239][T19555] syzkaller0: entered allmulticast mode [ 459.952019][T19555] tipc: Resetting bearer [ 459.989582][T19563] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 460.020841][T19563] bond3 (unregistering): Released all slaves [ 460.111937][T19553] tipc: Resetting bearer [ 460.208964][T19553] tipc: Disabling bearer [ 460.517609][T19576] syzkaller0: entered promiscuous mode [ 460.517633][T19576] syzkaller0: entered allmulticast mode [ 460.541280][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3627'. [ 460.677815][T19578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3627'. [ 460.955291][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3633'. [ 460.989123][T19601] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 461.012895][T19604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.071140][T19606] x_tables: duplicate underflow at hook 2 [ 461.938036][T19640] gretap0: entered promiscuous mode [ 462.027417][T19643] 0ªî{X¹¦: renamed from gretap0 [ 462.055013][T19643] 0ªî{X¹¦: left promiscuous mode [ 462.055051][T19643] 0ªî{X¹¦: entered allmulticast mode [ 462.062870][T19643] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 462.107825][T19656] bond0: ARP target 8.4.0.0 is already present [ 462.107849][T19656] bond0: option arp_ip_target: invalid value (1032) [ 462.318038][T19662] netlink: 'syz.2.3648': attribute type 5 has an invalid length. [ 462.369262][T19662] netlink: 'syz.2.3648': attribute type 83 has an invalid length. [ 462.424198][T19575] Bluetooth: hci2: command 0x0406 tx timeout [ 462.424270][T19575] Bluetooth: hci4: command 0x0406 tx timeout [ 462.789855][T19673] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 463.245958][T19688] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 463.333362][T19699] netlink: 'syz.2.3661': attribute type 12 has an invalid length. [ 464.280650][T19705] netlink: 'syz.1.3659': attribute type 1 has an invalid length. [ 464.741204][T19739] __nla_validate_parse: 6 callbacks suppressed [ 464.741225][T19739] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3669'. [ 464.767178][T19739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3669'. [ 465.353712][T19764] netlink: Failed to add nicvf0 helper -22 [ 465.353764][T19764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.617474][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'. [ 465.635971][T19779] IPVS: length: 30 != 24 [ 465.969741][T19793] sctp: [Deprecated]: syz.3.3683 (pid 19793) Use of int in maxseg socket option. [ 465.969741][T19793] Use struct sctp_assoc_value instead [ 468.138929][T19842] netlink: 'syz.3.3694': attribute type 1 has an invalid length. [ 468.775814][T19855] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3698'. [ 468.962230][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 468.971528][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 468.972209][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 469.782901][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3706'. [ 469.986788][T19914] Cannot find del_set index 4 as target [ 470.325466][T19922] netlink: 'syz.1.3709': attribute type 1 has an invalid length. [ 470.385288][T19922] bond3: entered promiscuous mode [ 470.386144][T19922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.448235][T19931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3712'. [ 470.448269][T19931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3712'. [ 470.556371][T19922] bond3: (slave bridge1): making interface the new active one [ 470.556396][T19922] bridge1: entered promiscuous mode [ 470.562680][T19922] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 470.922987][T19951] netlink: 'syz.4.3716': attribute type 10 has an invalid length. [ 471.375437][T19961] smc: net device lo erased user defined pnetid SYZ0 [ 471.657753][T19974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3724'. [ 471.667351][T19973] netlink: 'syz.2.3723': attribute type 10 has an invalid length. [ 471.667881][T19973] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 471.668398][T19973] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 471.717685][T19979] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3722'. [ 471.808941][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3725'. [ 471.810028][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3725'. [ 474.097868][T20016] SET target dimension over the limit! [ 474.372659][T20018] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 474.412570][T20018] bond0 (unregistering): Released all slaves [ 475.021203][T19984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.671743][T20052] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3747'. [ 475.697379][T20054] netlink: 'syz.3.3742': attribute type 32 has an invalid length. [ 475.697401][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3742'. [ 475.816034][T20054] bond6: option coupled_control: invalid value (192) [ 475.819013][T20054] bond6 (unregistering): Released all slaves [ 476.490646][T20088] ip_tables: iptables: counters copy to user failed while replacing table [ 476.839834][T20098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3757'. [ 476.839876][T20098] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 476.918189][T20107] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 477.035699][ T5714] hid-generic 0005:0008:63AA.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 477.541945][T20110] fido_id[20110]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 478.602758][T20134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3767'. [ 478.603096][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3771'. [ 478.603116][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3771'. [ 478.645251][T20157] netlink: 'syz.3.3771': attribute type 1 has an invalid length. [ 478.881938][T20172] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3775'. [ 479.192908][T20179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3778'. [ 479.295090][T20181] netlink: 'syz.3.3779': attribute type 1 has an invalid length. [ 479.295112][T20181] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3779'. [ 479.771065][T20198] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 479.800002][T20198] bond6 (unregistering): Released all slaves [ 480.691196][T20231] dvmrp1: entered allmulticast mode [ 480.700542][T20231] netlink: 'syz.0.3794': attribute type 8 has an invalid length. [ 481.755647][T20271] 0: reclassify loop, rule prio 0, protocol 03 [ 481.822930][T20279] syzkaller0: entered promiscuous mode [ 481.822955][T20279] syzkaller0: entered allmulticast mode [ 481.840677][T20281] netlink: 'syz.2.3809': attribute type 3 has an invalid length. [ 481.843169][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3808'. [ 481.843190][T20282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3808'. [ 482.148114][T20291] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3814'. [ 482.550097][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 482.550427][T20298] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 482.793829][T20304] netlink: 'syz.1.3819': attribute type 21 has an invalid length. [ 483.242076][T20314] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 483.948228][T20339] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 483.948263][T20339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.080274][T20342] bond0: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 484.082027][T20342] bond0 (unregistering): Released all slaves [ 484.256605][T20353] bond0: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 484.262496][T20353] bond0 (unregistering): Released all slaves [ 484.500166][T20357] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.502264][T20357] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.502437][T20357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.530594][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3832'. [ 484.674494][ T13] wlan1: Trigger new scan to find an IBSS to join [ 484.758324][T20371] netlink: 'syz.3.3834': attribute type 1 has an invalid length. [ 484.873612][T20371] bond6: entered promiscuous mode [ 484.879545][T20382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3835'. [ 484.881747][T20371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 484.992372][T20382] bond0: ARP target 8.4.0.0 is already present [ 484.992397][T20382] bond0: option arp_ip_target: invalid value (1032) [ 485.158481][T20396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3839'. [ 485.158516][T20396] netlink: 'syz.4.3839': attribute type 7 has an invalid length. [ 485.158530][T20396] netlink: 'syz.4.3839': attribute type 8 has an invalid length. [ 485.158542][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'. [ 485.495134][T20404] xt_limit: Overflow, try lower: 536871034/0 [ 485.502626][T20404] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3841'. [ 485.845124][T20411] openvswitch: netlink: Missing key (keys=40, expected=100) [ 485.956516][T20411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3844'. [ 485.986114][ T174] IPVS: starting estimator thread 0... [ 486.075988][T20415] IPVS: using max 26 ests per chain, 62400 per kthread [ 486.110757][T20414] team0: Device xfrm0 is of different type [ 487.141659][T20419] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 487.141684][T20419] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 487.289087][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3854'. [ 487.604964][T20419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 487.604989][T20419] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 487.708297][T12028] wlan1: Trigger new scan to find an IBSS to join [ 487.740543][T20419] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 487.740568][T20419] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 487.898302][T20419] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 487.898326][T20419] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 488.275715][T20474] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 488.469022][T20496] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 488.556030][T20486] tipc: Failed to remove unknown binding: 66,0,0/0:1916826427/1916826428 [ 488.559054][T20486] tipc: Failed to remove unknown binding: 66,0,0/0:1916826427/1916826428 [ 488.663701][T20506] netlink: zone id is out of range [ 488.663718][T20506] netlink: zone id is out of range [ 488.663896][T20506] netlink: zone id is out of range [ 488.767643][T20507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3865'. [ 489.314203][ C0] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 489.531412][T20522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3868'. [ 491.672385][T20535] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 491.776349][T20535] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 492.447738][T20546] ip_tables: iptables: counters copy to user failed while replacing table [ 492.477772][T20540] xt_hashlimit: invalid interval [ 492.478280][T20540] xt_hashlimit: invalid interval [ 492.478724][T20540] xt_hashlimit: invalid interval [ 492.479136][T20540] xt_hashlimit: invalid interval [ 492.483523][T20540] xt_hashlimit: invalid interval [ 492.483937][T20540] xt_hashlimit: invalid interval [ 492.485198][T20540] xt_hashlimit: invalid interval [ 492.492037][T20540] xt_hashlimit: invalid interval [ 492.493308][T20540] xt_hashlimit: invalid interval [ 492.529044][T20540] xt_hashlimit: invalid interval [ 493.119672][T20578] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3879'. [ 493.208869][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3881'. [ 493.208893][T20587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3881'. [ 493.208919][T20587] netlink: 'syz.1.3881': attribute type 14 has an invalid length. [ 493.208933][T20587] netlink: 'syz.1.3881': attribute type 13 has an invalid length. [ 493.491162][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3882'. [ 493.501262][T20596] netlink: Unknown NAT attribute (type=2049, max=9) [ 493.501296][T20596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.788383][T20609] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3884'. [ 494.069152][T20629] netlink: 'syz.4.3889': attribute type 11 has an invalid length. [ 494.069176][T20629] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3889'. [ 494.255232][T20636] syzkaller1: entered promiscuous mode [ 494.255258][T20636] syzkaller1: entered allmulticast mode [ 494.554906][T20649] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 494.611611][T20652] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 494.636335][T20652] nftables ruleset with unbound set [ 494.934938][T20661] netlink: 'syz.2.3898': attribute type 1 has an invalid length. [ 494.939828][T20663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.969506][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'. [ 495.104532][T20671] netlink: 'syz.3.3899': attribute type 33 has an invalid length. [ 495.428123][T20692] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3905'. [ 495.761195][T20708] netlink: 'syz.3.3910': attribute type 25 has an invalid length. [ 496.117182][T20719] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 496.117221][T20719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.118215][T20719] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 496.118247][T20719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.119327][T20719] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 496.224100][T20726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3915'. [ 496.677850][T20746] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 496.703151][T20746] block nbd4: Unsupported socket: should be TCP or UNIX. [ 496.768092][T20746] netlink: 'syz.1.3919': attribute type 21 has an invalid length. [ 496.768117][T20746] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.768554][T20746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 496.768565][T20746] IPv6: NLM_F_CREATE should be set when creating new route [ 496.768606][T20746] IPv6: NLM_F_CREATE should be set when creating new route [ 496.768630][T20746] IPv6: NLM_F_CREATE should be set when creating new route [ 496.851176][T20750] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20004 [ 497.087423][T20762] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3923'. [ 497.159563][T20757] syzkaller1: entered promiscuous mode [ 497.159740][T20757] syzkaller1: entered allmulticast mode [ 497.276564][T20757] ip6t_hbh: too many supported opts specified [ 497.659636][T20780] netlink: 'syz.0.3931': attribute type 10 has an invalid length. [ 497.865981][T20794] syzkaller0: entered promiscuous mode [ 497.866166][T20794] syzkaller0: entered allmulticast mode [ 498.243192][T20796] syzkaller1: entered promiscuous mode [ 498.243224][T20796] syzkaller1: entered allmulticast mode [ 498.282087][T20806] __nla_validate_parse: 2 callbacks suppressed [ 498.282106][T20806] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3935'. [ 498.546573][T20812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3938'. [ 498.579026][T20814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3939'. [ 498.579060][T20814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3939'. [ 498.582212][T20815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3939'. [ 498.582240][T20815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3939'. [ 498.677848][T20812] macvtap1: entered promiscuous mode [ 498.677872][T20812] vlan0: entered promiscuous mode [ 498.678279][T20812] macvtap1: entered allmulticast mode [ 498.678293][T20812] vlan0: entered allmulticast mode [ 498.678305][T20812] veth0_vlan: entered allmulticast mode [ 499.078490][T20821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3940'. [ 499.160308][T20824] net_ratelimit: 64 callbacks suppressed [ 499.160329][T20824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.378548][T20824] bond2: option lp_interval: invalid value (0) [ 499.378574][T20824] bond2: option lp_interval: allowed values 1 - 2147483647 [ 499.438049][T20833] xt_IDLETIMER: label is empty or not nul-terminated [ 499.438300][T20824] bond2 (unregistering): Released all slaves [ 499.671825][T20839] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 500.213099][T20852] netlink: 'syz.3.3950': attribute type 3 has an invalid length. [ 500.947116][T20880] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 500.972441][T20879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.077119][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 501.077145][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 501.119363][T20880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 501.306926][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.902930][T20920] sctp: [Deprecated]: syz.3.3960 (pid 20920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.902930][T20920] Use struct sctp_sack_info instead [ 502.652951][T20947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.705732][T20950] IPVS: ip_vs_edit_dest(): server weight less than zero [ 502.725017][T20950] ip_tables: iptables: counters copy to user failed while replacing table [ 502.833815][T20947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.979972][T20957] erspan0: entered promiscuous mode [ 502.989502][T20970] netlink: 'syz.3.3971': attribute type 4 has an invalid length. [ 503.027195][T20970] .`: renamed from bond0 (while UP) [ 503.638558][T20990] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 504.001891][T21009] __nla_validate_parse: 105 callbacks suppressed [ 504.001912][T21009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3983'. [ 504.252923][T21019] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 504.252966][T21019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.863407][T21043] xt_hashlimit: size too large, truncated to 1048576 [ 505.722729][T21078] netlink: 'syz.0.4003': attribute type 1 has an invalid length. [ 505.722752][T21078] netlink: 'syz.0.4003': attribute type 2 has an invalid length. [ 505.742193][T21078] Bluetooth: hci0: unsupported parameter 5135 [ 505.742224][T21078] Bluetooth: hci0: unsupported parameter 8192 [ 505.742236][T21078] Bluetooth: hci0: unsupported parameter 5135 [ 505.742248][T21078] Bluetooth: hci0: unsupported parameter 8192 [ 505.756676][T21078] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4003'. [ 506.125830][T21084] bond5 (unregistering): Released all slaves [ 506.558269][T21088] bond5 (unregistering): Released all slaves [ 507.514727][T21134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 507.556088][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'. [ 507.703952][T21144] tipc: Enabling of bearer rejected, failed to enable media [ 507.734016][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4013'. [ 507.740160][T21144] netlink: 'syz.2.4013': attribute type 21 has an invalid length. [ 507.740256][T21144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4013'. [ 507.783638][T21151] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 507.865370][T21149] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4018'. [ 508.288872][T21171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4023'. [ 508.581913][T21188] netlink: 'syz.0.4028': attribute type 16 has an invalid length. [ 508.581937][T21188] netlink: 'syz.0.4028': attribute type 3 has an invalid length. [ 508.581951][T21188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4028'. [ 508.588441][T21188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4028'. [ 508.723225][T21200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.847897][T21200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.865050][T21198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4030'. [ 508.902998][T21189] nbd: nbd64 already in use [ 508.963923][T21202] ip_vti0: entered promiscuous mode [ 509.246713][T21214] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 509.382655][T21182] udevd[21182]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 509.910295][ T9197] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.910515][ T9197] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.937910][ T5714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 510.154548][ T5714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 510.531515][T21264] __nla_validate_parse: 4 callbacks suppressed [ 510.531538][T21264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4048'. [ 510.622046][T21272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4050'. [ 510.669432][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 510.902691][T21289] ip_tables: iptables: counters copy to user failed while replacing table [ 511.079819][T21296] tipc: Started in network mode [ 511.080162][T21296] tipc: Node identity ac14142f, cluster identity 4711 [ 511.082170][T21296] tipc: Enabling of bearer rejected, failed to enable media [ 511.231723][T21301] netlink: 'syz.1.4058': attribute type 1 has an invalid length. [ 511.393856][T21301] bond4: entered promiscuous mode [ 511.406344][T21301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 511.570301][T21307] 8021q: adding VLAN 0 to HW filter on device bond4 [ 511.570727][T21307] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 511.570749][T21307] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 511.613564][T21307] bond4: (slave wireguard0): making interface the new active one [ 511.613589][T21307] wireguard0: entered promiscuous mode [ 511.631643][T21307] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 511.718070][T21278] pim6reg: left allmulticast mode [ 511.719306][T21278] pimreg: left allmulticast mode [ 511.794913][T21319] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 512.292538][T21322] netlink: 'syz.2.4065': attribute type 13 has an invalid length. [ 512.416808][T21278] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 512.628495][T21278] team0: Port device xfrm0 removed [ 512.799111][T21278] bond1 (unregistering): Released all slaves [ 512.818596][T21278] bond2 (unregistering): Released all slaves [ 512.845035][T21278] bond3 (unregistering): Released all slaves [ 512.865750][T21278] bond4 (unregistering): Released all slaves [ 512.901956][T21278] bond5 (unregistering): Released all slaves [ 512.940988][T21278] bond0 (unregistering): Released all slaves [ 512.967477][T21278] bond6 (unregistering): Released all slaves [ 512.991942][T21278] bond7 (unregistering): Released all slaves [ 513.020244][T21278] bond8 (unregistering): Released all slaves [ 513.059017][T21278] bond9 (unregistering): Released all slaves [ 513.110059][T21278] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 513.129845][T21278] bond10 (unregistering): Released all slaves [ 513.547886][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.671503][T21278] : left promiscuous mode [ 513.787105][T21278] : left promiscuous mode [ 513.893276][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4068'. [ 514.213257][T21278] ovs-s: left promiscuous mode [ 514.277440][T21367] netlink: 'syz.2.4072': attribute type 1 has an invalid length. [ 514.295870][T21364] 8021q: VLANs not supported on ip_vti0 [ 514.316608][T21278] tipc: Disabling bearer [ 514.316896][T21278] tipc: Left network mode [ 514.453149][T21373] netlink: 'syz.2.4072': attribute type 1 has an invalid length. [ 514.535445][T21278] IPVS: stopping master sync thread 14695 ... [ 515.992301][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4081'. [ 516.973254][T21469] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4092'. [ 517.081739][T21472] dvmrp1: left allmulticast mode [ 517.133706][T21475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4092'. [ 517.643537][T21475] bond2: entered promiscuous mode [ 517.651398][T21475] bond2: entered allmulticast mode [ 517.651931][T21475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.685421][T21489] syzkaller0: entered promiscuous mode [ 517.685444][T21489] syzkaller0: entered allmulticast mode [ 517.688930][T12033] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.689031][T12033] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.689090][T12033] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.689126][T12033] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.824355][T21484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4095'. [ 517.824445][T21484] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4095'. [ 518.273183][T21507] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4100'. [ 518.293635][T21507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4100'. [ 518.293675][T21507] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4100'. [ 518.293725][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4100'. [ 518.332371][T21510] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 518.627401][T21278] hsr_slave_0: left promiscuous mode [ 519.350552][ T59] smbdirect: ib_dev[syz2] removed [ 519.426899][T21542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4107'. [ 519.522023][ T12] smc: removing ib device syz1 [ 519.543725][T21549] ip_tables: iptables: counters copy to user failed while replacing table [ 520.826660][ T12] smbdirect: ib_dev[syz1] removed [ 521.144512][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.565934][T21576] syzkaller0: entered promiscuous mode [ 521.565960][T21576] syzkaller0: entered allmulticast mode [ 522.447457][T21614] __nla_validate_parse: 1 callbacks suppressed [ 522.447477][T21614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'. [ 523.645671][T21637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4124'. [ 523.645708][T21637] netlink: 'syz.3.4124': attribute type 30 has an invalid length. [ 523.765689][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4124'. [ 523.765725][T21640] netlink: 'syz.3.4124': attribute type 30 has an invalid length. [ 527.361589][T21634] tipc: Enabled bearer , priority 10 [ 527.588126][T21689] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4128'. [ 527.666530][T21691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4128'. [ 527.911629][T21699] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4131'. [ 527.975639][T21707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4133'. [ 528.037003][T21709] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 528.037304][T21704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.150187][T21278] IPVS: stop unused estimator thread 0... [ 528.354161][T16744] tipc: Node number set to 2329340029 [ 529.164517][T21734] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4140'. [ 529.270063][T21737] block nbd4: Unsupported socket: should be TCP or UNIX. [ 529.270711][T21737] block nbd4: shutting down sockets [ 529.291587][T21737] netlink: 'syz.1.4143': attribute type 83 has an invalid length. [ 529.632861][T21762] netlink: 'syz.4.4147': attribute type 6 has an invalid length. [ 529.632884][T21762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4147'. [ 529.654723][T21763] netlink: 'syz.4.4147': attribute type 6 has an invalid length. [ 529.654743][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4147'. [ 529.839821][T21766] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20003 [ 529.842392][T21766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4148'. [ 529.975889][T21768] netlink: 'syz.4.4149': attribute type 11 has an invalid length. [ 529.975911][T21768] netlink: 'syz.4.4149': attribute type 11 has an invalid length. [ 529.975924][T21768] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4149'. [ 530.634836][T21789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4155'. [ 531.389576][T21815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.698324][T21827] netlink: 'syz.3.4164': attribute type 23 has an invalid length. [ 532.391663][T21848] bridge3: entered promiscuous mode [ 532.391706][T21848] bridge3: entered allmulticast mode [ 532.696345][T21858] __nla_validate_parse: 6 callbacks suppressed [ 532.696368][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4169'. [ 532.818205][T21858] xt_esp: unknown flags DD [ 532.829999][T21862] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4171'. [ 532.918213][T21868] xt_ecn: cannot match TCP bits for non-tcp packets [ 533.081517][T21875] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4175'. [ 533.081544][T21875] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4175'. [ 533.081559][T21875] netlink: 'syz.1.4175': attribute type 6 has an invalid length. [ 533.081573][T21875] netlink: 'syz.1.4175': attribute type 5 has an invalid length. [ 533.081586][T21875] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4175'. [ 533.543220][T21884] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4178'. [ 533.543730][T21884] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4178'. [ 533.564302][T21884] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4178'. [ 533.564799][T21884] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4178'. [ 533.565586][T21884] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4178'. [ 533.623132][T21888] sit0: entered promiscuous mode [ 533.683290][T21888] netlink: 'syz.2.4179': attribute type 1 has an invalid length. [ 533.733576][T21886] syzkaller0: left promiscuous mode [ 533.733595][T21886] syzkaller0: left allmulticast mode [ 534.206981][T21904] xt_hashlimit: overflow, try lower: 3/0 [ 534.754639][T21925] ip_tables: iptables: counters copy to user failed while replacing table [ 534.754999][T21929] ip_tables: iptables: counters copy to user failed while replacing table [ 535.160204][T21937] syzkaller0: entered promiscuous mode [ 535.160246][T21937] syzkaller0: entered allmulticast mode [ 536.511469][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 538.313169][T21953] __nla_validate_parse: 32 callbacks suppressed [ 538.313183][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 538.380082][T21948] syzkaller1: entered promiscuous mode [ 538.380107][T21948] syzkaller1: entered allmulticast mode [ 538.963414][T21985] netlink: 'syz.0.4207': attribute type 1 has an invalid length. [ 539.165581][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4209'. [ 539.488370][T22008] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 539.593551][T22011] batman_adv: batadv0: Adding interface: veth0 [ 539.593570][T22011] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.593602][T22011] batman_adv: batadv0: Interface activated: veth0 [ 539.645941][T22011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.646149][T22011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.679144][T22011] batman_adv: batadv0: Interface deactivated: veth0 [ 539.679334][T22011] batman_adv: batadv0: Removing interface: veth0 [ 540.192659][T22025] netlink: 'syz.3.4220': attribute type 2 has an invalid length. [ 540.192682][T22025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4220'. [ 540.261656][T22025] : entered promiscuous mode [ 540.274971][T22028] netlink: 'syz.3.4220': attribute type 2 has an invalid length. [ 540.274998][T22028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4220'. [ 540.581857][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'. [ 540.780544][T22048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4227'. [ 540.838071][T22051] netlink: 'syz.3.4228': attribute type 1 has an invalid length. [ 540.915437][T22055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4229'. [ 540.915471][T22055] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 540.997619][T22056] bond0: (slave geneve2): making interface the new active one [ 541.000556][T22056] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 541.035015][ T9199] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 541.035271][ T9199] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 541.035308][ T9199] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 541.043440][T22044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4226'. [ 541.306675][ T9199] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 562.752334][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.944433][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 572.728556][T22084] ip_tables: iptables: counters copy to user failed while replacing table [ 572.828533][T22092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4239'. [ 572.828557][T22092] openvswitch: netlink: Flow actions attr not present in new flow. [ 574.169441][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4250'. [ 574.392021][T22149] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4253'. [ 574.453565][T22150] Bluetooth: MGMT ver 1.23 [ 574.462435][T22150] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4253'. [ 576.521990][T22164] Set syz0 is full, maxelem 2 reached [ 576.559334][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4256'. [ 577.014114][T22176] ip_tables: iptables: counters copy to user failed while replacing table [ 577.137560][T22176] syzkaller0: entered promiscuous mode [ 577.137778][T22176] syzkaller0: entered allmulticast mode [ 577.250942][T22186] Bluetooth: hci0: unsupported parameter 5135 [ 577.250964][T22186] Bluetooth: hci0: unsupported parameter 8192 [ 577.250977][T22186] Bluetooth: hci0: unsupported parameter 5135 [ 577.250989][T22186] Bluetooth: hci0: unsupported parameter 8192 [ 577.251474][T22186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4267'. [ 577.251502][T22186] netlink: 'syz.1.4267': attribute type 30 has an invalid length. [ 577.359826][T22192] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4268'. [ 577.361850][T22186] netlink: 'syz.1.4267': attribute type 1 has an invalid length. [ 577.361870][T22186] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4267'. [ 577.768093][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4272'. [ 578.153935][T22207] ip_tables: iptables: counters copy to user failed while replacing table [ 578.255204][T22211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4276'. [ 578.586595][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4280'. [ 579.207019][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4285'. [ 579.358163][T22260] SET target dimension over the limit! [ 579.857767][T22278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4294'. [ 580.221557][T22289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4297'. [ 580.221642][T22289] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4297'. [ 580.251811][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4297'. [ 580.376257][T22296] vlan2: entered promiscuous mode [ 580.376282][T22296] bridge0: entered promiscuous mode [ 580.376485][T22296] vlan2: entered allmulticast mode [ 580.376501][T22296] bridge0: entered allmulticast mode [ 580.418527][T22295] lo speed is unknown, defaulting to 1000 [ 580.420731][T22295] lo speed is unknown, defaulting to 1000 [ 580.421698][T22295] lo speed is unknown, defaulting to 1000 [ 580.584354][T22298] netlink: 'syz.3.4299': attribute type 1 has an invalid length. [ 581.190185][T22295] infiniband syz0: set down [ 581.190239][ T6494] lo speed is unknown, defaulting to 1000 [ 581.191983][T22295] infiniband syz0: added lo [ 581.223918][T22295] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 581.254125][T22295] infiniband syz0: Couldn't open port 1 [ 581.254421][T22295] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 581.254454][T22295] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 581.254494][T22295] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 581.533507][T22295] RDS/IB: syz0: added [ 581.533563][T22295] smc: adding ib device syz0 with port count 1 [ 581.533585][T22295] smc: ib device syz0 port 1 has no pnetid [ 581.533663][T16744] lo speed is unknown, defaulting to 1000 [ 581.552714][T22295] lo speed is unknown, defaulting to 1000 [ 581.824657][T22331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4305'. [ 581.883387][T22343] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 582.154687][T22347] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 582.275933][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4313'. [ 582.406250][T22360] netlink: 'syz.1.4316': attribute type 61 has an invalid length. [ 582.520216][T22364] netlink: 'syz.0.4318': attribute type 4 has an invalid length. [ 582.553474][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4317'. [ 582.599904][ T59] tipc: Resetting bearer [ 582.619226][T22295] lo speed is unknown, defaulting to 1000 [ 582.755778][T22373] Bluetooth: MGMT ver 1.23 [ 582.867825][T22376] netlink: 'syz.0.4320': attribute type 12 has an invalid length. [ 583.505799][T22400] netlink: 'syz.0.4327': attribute type 1 has an invalid length. [ 583.527873][T22295] lo speed is unknown, defaulting to 1000 [ 583.855415][T22412] netlink: 'syz.4.4332': attribute type 1 has an invalid length. [ 583.910091][T22416] __nla_validate_parse: 1 callbacks suppressed [ 583.910110][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4332'. [ 583.910126][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4332'. [ 583.936507][T22415] netlink: 'syz.3.4331': attribute type 1 has an invalid length. [ 583.970175][T22418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4332'. [ 584.189971][T22412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 584.220369][T22425] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 584.263350][T22419] bond7: (slave gretap1): making interface the new active one [ 584.297304][T22419] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 584.297387][T22295] lo speed is unknown, defaulting to 1000 [ 584.613528][T22429] bond3: (slave gretap1): making interface the new active one [ 584.657112][T22429] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 584.775351][T22446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4338'. [ 584.882160][T22450] netlink: 'syz.1.4338': attribute type 1 has an invalid length. [ 585.133392][T22295] lo speed is unknown, defaulting to 1000 [ 585.191632][T22429] syz.0.4334 (22429) used greatest stack depth: 17632 bytes left [ 585.464552][T22462] netlink: 'syz.3.4343': attribute type 12 has an invalid length. [ 585.843459][T22295] lo speed is unknown, defaulting to 1000 [ 585.852358][T22476] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4348'. [ 586.137722][T22482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4350'. [ 586.321093][T22487] syzkaller0: entered promiscuous mode [ 586.321117][T22487] syzkaller0: entered allmulticast mode [ 586.669914][T22504] netlink: 'syz.1.4353': attribute type 1 has an invalid length. [ 586.671565][T22295] lo speed is unknown, defaulting to 1000 [ 586.826257][T22511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.898442][T22512] vlan1: entered allmulticast mode [ 586.898467][T22512] veth0_vlan: entered allmulticast mode [ 587.098716][T22518] 8021q: VLANs not supported on bond0 [ 587.122362][T22519] 8021q: VLANs not supported on bond0 [ 587.201558][T22295] lo speed is unknown, defaulting to 1000 [ 587.304703][T22523] netlink: 'syz.1.4358': attribute type 11 has an invalid length. [ 587.304728][T22523] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4358'. [ 587.568576][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4359'. [ 588.052077][T22542] gtp0: entered promiscuous mode [ 588.052101][T22542] gtp0: entered allmulticast mode [ 588.176163][T22559] 8021q: VLANs not supported on ip6tnl0 [ 588.179620][T22555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4368'. [ 588.213256][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4369'. [ 588.236271][T22555] veth2: entered promiscuous mode [ 588.236290][T22555] veth2: entered allmulticast mode [ 588.706410][T22574] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.943112][T22646] syzkaller0: left promiscuous mode [ 590.943135][T22646] syzkaller0: left allmulticast mode [ 590.943822][T22649] validate_nla: 4 callbacks suppressed [ 590.943915][T22649] netlink: 'syz.1.4388': attribute type 3 has an invalid length. [ 591.325389][T22668] tipc: Enabling of bearer rejected, failed to enable media [ 591.438458][T22674] sctp: [Deprecated]: syz.2.4394 (pid 22674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.438458][T22674] Use struct sctp_sack_info instead [ 591.496598][T22674] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 591.496636][T22674] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 591.496888][T22674] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 591.703284][T22680] __nla_validate_parse: 1 callbacks suppressed [ 591.703304][T22680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4396'. [ 592.091715][T22704] netlink: 'syz.1.4401': attribute type 1 has an invalid length. [ 592.231804][T22704] bond5: entered promiscuous mode [ 592.232989][T22704] 8021q: adding VLAN 0 to HW filter on device bond5 [ 592.318790][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4402'. [ 592.360230][T22706] macvtap1: entered allmulticast mode [ 592.439796][T22709] bond5: (slave bridge3): making interface the new active one [ 592.439819][T22709] bridge3: entered promiscuous mode [ 592.465766][T22709] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 592.553046][T22713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4403'. [ 592.611420][T22714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4403'. [ 592.639792][T22714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4403'. [ 592.730067][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4404'. [ 592.732875][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4404'. [ 592.848801][T22719] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4404'. [ 593.080898][T22722] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.4406'. [ 593.194418][T22729] syzkaller1: entered promiscuous mode [ 593.194441][T22729] syzkaller1: entered allmulticast mode [ 593.253236][T22727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4408'. [ 593.290525][T22727] bridge4: entered promiscuous mode [ 593.290592][T22727] bridge4: entered allmulticast mode [ 593.547512][T22742] syzkaller0: entered promiscuous mode [ 593.547691][T22742] syzkaller0: entered allmulticast mode [ 593.660501][T22750] ip_tables: iptables: counters copy to user failed while replacing table [ 593.962430][T22763] ip_tables: iptables: counters copy to user failed while replacing table [ 593.995295][T22764] netlink: 'syz.4.4421': attribute type 7 has an invalid length. [ 595.333048][T22821] syzkaller0: entered promiscuous mode [ 595.333251][T22821] syzkaller0: entered allmulticast mode [ 595.817815][T22846] netlink: 'syz.4.4442': attribute type 1 has an invalid length. [ 595.882818][T22846] bond6: entered promiscuous mode [ 595.883198][T22846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 595.919096][T22853] netlink: 'syz.3.4443': attribute type 21 has an invalid length. [ 595.919120][T22853] IPv6: NLM_F_CREATE should be specified when creating new route [ 596.022266][T12032] nci: nci_ntf_packet: unknown ntf opcode 0x1 [ 596.054699][T22848] macvtap2: entered allmulticast mode [ 596.118388][T22848] bond6: (slave bridge4): making interface the new active one [ 596.118411][T22848] bridge4: entered promiscuous mode [ 596.122239][T22848] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 596.246922][T22863] syzkaller1: entered promiscuous mode [ 596.247126][T22863] syzkaller1: entered allmulticast mode [ 596.342438][T22863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.497501][T22874] xt_NETMAP: bad rangesize 37. [ 596.733388][T22884] xfrm1: entered allmulticast mode [ 597.252082][T22897] syzkaller0: entered promiscuous mode [ 597.252105][T22897] syzkaller0: entered allmulticast mode [ 597.354632][T22876] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 598.771227][T22846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.948414][T22905] __nla_validate_parse: 8 callbacks suppressed [ 598.948435][T22905] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4460'. [ 598.949043][T22905] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4460'. [ 599.044171][T22909] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 599.045884][T22905] syzkaller0: entered promiscuous mode [ 599.046061][T22905] syzkaller0: entered allmulticast mode [ 599.085775][T22912] smc: net device lo applied user defined pnetid SYZ0 [ 599.171701][T22916] netlink: 'syz.0.4465': attribute type 2 has an invalid length. [ 599.172158][T22916] netlink: 'syz.0.4465': attribute type 1 has an invalid length. [ 599.338132][T22916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 599.376556][T22925] netlink: 412 bytes leftover after parsing attributes in process `syz.1.4466'. [ 599.376579][T22925] netlink: 852 bytes leftover after parsing attributes in process `syz.1.4466'. [ 599.453689][T22924] bond4: (slave geneve2): making interface the new active one [ 599.468055][T22924] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 599.930708][T22947] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4473'. [ 600.957987][T22989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4481'. [ 601.605188][T23018] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4490'. [ 601.679965][T23012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4487'. [ 601.680001][T23012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4487'. [ 601.716288][T23012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4487'. [ 601.837476][T12044] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.838817][T12044] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.838885][T12044] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.838919][T12044] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.753979][T23047] vlan1 (unregistering): left allmulticast mode [ 602.761921][T23047] veth0_vlan: left allmulticast mode [ 602.851624][T23056] syzkaller0: left promiscuous mode [ 602.851649][T23056] syzkaller0: left allmulticast mode [ 603.679267][T23082] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 604.005596][T23118] __nla_validate_parse: 11 callbacks suppressed [ 604.005616][T23118] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4514'. [ 604.131222][T23127] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 604.794785][T23151] netlink: 'syz.3.4521': attribute type 18 has an invalid length. [ 604.890814][T23159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4525'. [ 605.053063][T23163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4524'. [ 605.193171][T23167] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4527'. [ 605.255645][T23177] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4527'. [ 605.303341][T23169] syzkaller0: left promiscuous mode [ 605.303526][T23169] syzkaller0: left allmulticast mode [ 605.342029][T23168] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 605.496174][ C0] TC_ACT_REPEAT abuse ? [ 605.603719][T23169] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 605.782893][T23190] netlink: 'syz.2.4530': attribute type 2 has an invalid length. [ 605.927132][T23193] bond6: entered promiscuous mode [ 605.957879][ C0] TC_ACT_REPEAT abuse ? [ 606.029261][T23197] macvlan2: entered promiscuous mode [ 606.029286][T23197] macvlan2: entered allmulticast mode [ 606.030184][T23197] bond6: (slave macvlan2): Opening slave failed [ 606.098167][ C1] TC_ACT_REPEAT abuse ? [ 606.098572][ C1] TC_ACT_REPEAT abuse ? [ 606.338312][T23210] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4536'. [ 606.383939][T23212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4535'. [ 606.529938][T23221] netlink: 'syz.0.4539': attribute type 64 has an invalid length. [ 606.546028][ C1] TC_ACT_REPEAT abuse ? [ 606.551809][T23222] SET target dimension over the limit! [ 606.592695][T23225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4540'. [ 606.616983][T23225] hsr_slave_0: left promiscuous mode [ 606.618764][T23225] hsr_slave_1: left promiscuous mode [ 606.705636][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4541'. [ 606.861752][T23233] pimreg: entered allmulticast mode [ 607.039984][T23239] netlink: 'syz.0.4546': attribute type 39 has an invalid length. [ 607.635469][T23270] x_tables: duplicate underflow at hook 2 [ 607.938490][T23286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4554'. [ 608.392131][T23302] tipc: Enabled bearer , priority 10 [ 608.547011][T23308] netlink: 'syz.0.4562': attribute type 5 has an invalid length. [ 609.132654][T23323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.153030][T23323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.384229][T16744] tipc: Node number set to 3189693945 [ 609.732516][T23332] netlink: 'syz.3.4568': attribute type 5 has an invalid length. [ 609.732541][T23332] netlink: 'syz.3.4568': attribute type 9 has an invalid length. [ 609.732556][T23332] __nla_validate_parse: 1 callbacks suppressed [ 609.732568][T23332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4568'. [ 610.007961][T23338] Cannot find del_set index 3 as target [ 610.024865][ C1] TC_ACT_REPEAT abuse ? [ 610.267239][T23351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.319955][T23349] ip_tables: iptables: counters copy to user failed while replacing table [ 610.417185][T23352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.447147][T23352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.533452][T23355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.627808][T23366] netlink: 'syz.0.4577': attribute type 6 has an invalid length. [ 610.627831][T23366] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4577'. [ 610.753314][T23368] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 610.864579][T23363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4576'. [ 610.869746][T23369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4578'. [ 610.966537][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4579'. [ 611.160572][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4580'. [ 611.917030][T23403] syzkaller1: entered promiscuous mode [ 611.917050][T23403] syzkaller1: entered allmulticast mode [ 611.930683][T23397] syzkaller1: left promiscuous mode [ 611.931188][T23397] syzkaller1: left allmulticast mode [ 612.011048][T23402] ip_tables: iptables: counters copy to user failed while replacing table [ 612.048269][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4591'. [ 612.049907][T23415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4591'. [ 612.069185][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.069314][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.072252][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.116254][T23404] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 612.116288][T23404] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 612.116326][T23404] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 612.177912][T23404] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 612.333188][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.354539][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.372105][T23421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4593'. [ 612.374750][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.410551][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.421771][T23420] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4592'. [ 612.421791][T23420] veth0_to_bond: default FDB implementation only supports local addresses [ 612.459520][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.480274][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.483586][T23423] netlink: 'syz.0.4594': attribute type 4 has an invalid length. [ 612.508879][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.512381][T23404] virt_wifi0 speed is unknown, defaulting to 1000 [ 613.090909][T23442] netlink: 'syz.4.4599': attribute type 1 has an invalid length. [ 613.140233][T12033] IPVS: starting estimator thread 0... [ 613.151129][T23444] netlink: 'syz.0.4600': attribute type 7 has an invalid length. [ 613.225931][T23447] IPVS: using max 27 ests per chain, 64800 per kthread [ 613.232390][T23431] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.233159][T23431] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.856978][T23436] v: renamed from veth0_vlan (while UP) [ 614.076801][T23448] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 614.161028][ T6494] tipc: Resetting bearer [ 614.226769][T23454] veth5: entered promiscuous mode [ 614.254659][T12033] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.254692][T12033] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.256207][T12033] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.256238][T12033] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.482083][T23457] bridge_slave_0 (unregistering): left allmulticast mode [ 614.482111][T23457] bridge_slave_0 (unregistering): left promiscuous mode [ 614.482220][T23457] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.725636][T12030] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.725679][T12030] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.725751][T12030] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.725776][T12030] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.982556][T23484] __nla_validate_parse: 4 callbacks suppressed [ 614.982576][T23484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4608'. [ 614.990268][T23484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4608'. [ 615.438325][T23498] ipvlan0: entered promiscuous mode [ 615.438391][T23498] ipvlan0: entered allmulticast mode [ 615.528502][T23506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4617'. [ 615.920295][T23506] 8021q: adding VLAN 0 to HW filter on device bond9 [ 616.019410][T23525] netlink: 'syz.1.4623': attribute type 1 has an invalid length. [ 616.106093][T23525] 8021q: adding VLAN 0 to HW filter on device bond7 [ 616.136624][T23532] veth0_virt_wifi: entered promiscuous mode [ 616.168045][T23532] bond7: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 616.250489][T23529] bond7: (slave veth3): Enslaving as an active interface with a down link [ 616.563583][T23545] netlink: 'syz.2.4627': attribute type 3 has an invalid length. [ 616.563799][T23545] netlink: 'syz.2.4627': attribute type 3 has an invalid length. [ 617.146923][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4633'. [ 617.496591][T23585] netlink: 'syz.3.4635': attribute type 5 has an invalid length. [ 618.262706][T23605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.452625][T23607] bond10: entered promiscuous mode [ 618.452666][T23607] bond10: entered allmulticast mode [ 618.453043][T23607] 8021q: adding VLAN 0 to HW filter on device bond10 [ 618.583785][T23615] bond5: option all_slaves_active: invalid value (179) [ 618.798784][ T9199] lwtunnel_output(): recursion limit reached on datapath [ 618.893322][T23615] bond5 (unregistering): Released all slaves [ 619.066319][ C0] lwtunnel_output(): recursion limit reached on datapath [ 619.069302][T23630] netlink: 'syz.3.4645': attribute type 1 has an invalid length. [ 619.689009][T23639] netlink: 'syz.2.4647': attribute type 7 has an invalid length. [ 619.691260][T23640] netlink: 'syz.2.4647': attribute type 7 has an invalid length. [ 619.906335][T12039] lwtunnel_output(): recursion limit reached on datapath [ 620.001051][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4649'. [ 620.213649][T23639] netlink: 'syz.2.4647': attribute type 7 has an invalid length. [ 620.224368][T12033] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.224452][T12033] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.224502][T12033] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.225361][T23640] netlink: 'syz.2.4647': attribute type 7 has an invalid length. [ 620.253655][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.897684][ T5753] lwtunnel_output(): recursion limit reached on datapath [ 621.005461][T12039] lwtunnel_output(): recursion limit reached on datapath [ 621.045724][T23684] netlink: 'syz.3.4656': attribute type 1 has an invalid length. [ 621.045786][T23684] netlink: 'syz.3.4656': attribute type 3 has an invalid length. [ 621.045800][T23684] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4656'. [ 621.045954][T23684] NCSI netlink: No device for ifindex 813332851 [ 621.150509][T23686] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4656'. [ 621.865101][T23690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4658'. [ 621.891150][T23690] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4658'. [ 621.891212][T23690] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4658'. [ 621.891260][T23690] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4658'. [ 622.125504][T21278] lwtunnel_output(): recursion limit reached on datapath [ 622.141562][T23700] netlink: 'syz.3.4662': attribute type 3 has an invalid length. [ 622.141581][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4662'. [ 622.141599][T23700] netlink: 'syz.3.4662': attribute type 3 has an invalid length. [ 622.141612][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4662'. [ 622.197353][T23704] veth1_macvtap: left promiscuous mode [ 622.247078][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4661'. [ 622.705929][ T32] audit: type=1804 audit(1791412361.250:7): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4665" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1756 res=1 errno=0 [ 622.706142][ T32] audit: type=1800 audit(1791412361.250:8): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4665" name="cgroup.controllers" dev="tmpfs" ino=1756 res=0 errno=0 [ 622.932747][T21278] lwtunnel_output(): recursion limit reached on datapath [ 623.133071][T23735] netlink: 'syz.1.4669': attribute type 1 has an invalid length. [ 623.235500][ T9199] lwtunnel_output(): recursion limit reached on datapath [ 623.508323][T23744] ip6gre1: entered promiscuous mode [ 623.508502][T23744] ip6gre1: entered allmulticast mode [ 623.947588][ T5753] lwtunnel_output(): recursion limit reached on datapath [ 624.184268][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.188474][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.431302][ T9199] lwtunnel_output(): recursion limit reached on datapath [ 624.701663][ T5279] veth1_macvtap: entered promiscuous mode [ 625.245182][T23797] __nla_validate_parse: 3 callbacks suppressed [ 625.245202][T23797] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4684'. [ 625.245222][T23797] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4684'. [ 625.547417][ T59] lwtunnel_output(): recursion limit reached on datapath [ 625.775306][T23811] syzkaller0: entered promiscuous mode [ 625.775331][T23811] syzkaller0: entered allmulticast mode [ 626.681908][ T59] lwtunnel_output(): recursion limit reached on datapath [ 626.719369][T23844] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 626.985556][ T5753] lwtunnel_output(): recursion limit reached on datapath [ 627.795217][T12039] lwtunnel_output(): recursion limit reached on datapath [ 627.873057][T23894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.902796][T23893] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4704'. [ 628.169838][T23915] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20001 [ 628.218887][T23912] erspan0: left promiscuous mode [ 628.291058][T23912] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 628.292504][T23912] bond2: left promiscuous mode [ 628.293584][T23912] bridge1: left promiscuous mode [ 628.323511][T23912] gtp0: left promiscuous mode [ 628.337249][T23912] ip6gre1: left promiscuous mode [ 628.342377][T23918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4710'. [ 628.377911][T23921] netlink: 'syz.3.4711': attribute type 18 has an invalid length. [ 628.472440][T23922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4712'. [ 628.542228][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4714'. [ 628.542263][T23928] netlink: 'syz.1.4714': attribute type 30 has an invalid length. [ 628.607016][T23927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4714'. [ 628.607053][T23927] netlink: 'syz.1.4714': attribute type 30 has an invalid length. [ 628.675823][ T59] lwtunnel_output(): recursion limit reached on datapath [ 628.708065][T23922] team0: Port device team_slave_0 removed [ 628.844781][T12033] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.845633][T12033] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.845671][T12033] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.845715][T12033] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.937593][T12033] lwtunnel_output(): recursion limit reached on datapath [ 629.378507][T23951] lwtunnel_output(): recursion limit reached on datapath [ 629.841401][T23966] bond11: option lp_interval: invalid value (0) [ 629.841426][T23966] bond11: option lp_interval: allowed values 1 - 2147483647 [ 629.871916][T23966] bond11 (unregistering): Released all slaves [ 629.974295][T23982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.978148][T23982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4729'. [ 630.035051][ T6494] lwtunnel_output(): recursion limit reached on datapath [ 630.035827][ T12] lwtunnel_output(): recursion limit reached on datapath [ 630.247078][T23997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4730'. [ 630.438974][T24002] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 630.439009][T24002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.709301][T24017] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4736'. [ 630.806477][T24020] netlink: 'syz.3.4735': attribute type 1 has an invalid length. [ 630.946828][T24026] netlink: 'syz.3.4735': attribute type 83 has an invalid length. [ 630.974503][T24020] bond11: entered promiscuous mode [ 630.974980][T24020] 8021q: adding VLAN 0 to HW filter on device bond11 [ 630.982984][T24026] ipvlan2: entered allmulticast mode [ 630.983002][T24026] bond11: entered allmulticast mode [ 631.027458][T24020] bond11: (slave bridge1): making interface the new active one [ 631.027479][T24020] bridge1: entered promiscuous mode [ 631.027633][T24020] bridge1: entered allmulticast mode [ 631.029649][T24020] bond11: (slave bridge1): Enslaving as an active interface with an up link [ 631.120036][T24033] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 631.467912][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4741'. [ 631.552109][T24037] bond12: Unable to set up delay as MII monitoring is disabled [ 631.623909][T24037] bond12 (unregistering): Released all slaves [ 631.658822][T24043] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4742'. [ 631.780825][T24038] bond12: Unable to set up delay as MII monitoring is disabled [ 631.867137][T16744] lwtunnel_output(): recursion limit reached on datapath [ 631.883936][T24038] bond12 (unregistering): Released all slaves [ 631.999961][T24043] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.000242][T24043] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.156753][T24069] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 632.162559][T24063] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 632.240008][T24062] bond8: option downdelay: invalid value (18446744073709551615) [ 632.240032][T24062] bond8: option downdelay: allowed values 0 - 2147483647 [ 632.242630][T24062] bond8 (unregistering): Released all slaves [ 632.265141][T12044] lwtunnel_output(): recursion limit reached on datapath [ 632.796456][T24089] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4752'. [ 632.827205][T24089] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.862742][T24089] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.892948][T24089] .` (unregistering): Released all slaves [ 632.985594][T24105] netlink: 'syz.2.4755': attribute type 16 has an invalid length. [ 632.985615][T24105] netlink: 'syz.2.4755': attribute type 17 has an invalid length. [ 633.092195][T24111] netlink: 'syz.2.4755': attribute type 16 has an invalid length. [ 633.092217][T24111] netlink: 'syz.2.4755': attribute type 17 has an invalid length. [ 633.315290][T24105] sit0: left promiscuous mode [ 633.368073][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4758'. [ 633.439000][T24131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4758'. [ 633.720560][ T6494] lo speed is unknown, defaulting to 1000 [ 633.738795][ T6494] syz0: Port: 1 Link ACTIVE [ 633.968894][ T6494] lo speed is unknown, defaulting to 1000 [ 634.342687][T24156] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 634.486477][T12039] net_ratelimit: 5 callbacks suppressed [ 634.486496][T12039] lwtunnel_output(): recursion limit reached on datapath [ 634.559973][T24152] rdma_rxe: rxe_newlink: failed to add wg1 [ 634.862734][T24182] netlink: get zone limit has 4 unknown bytes [ 634.935577][T24186] netlink: zone id is out of range [ 634.935592][T24186] netlink: zone id is out of range [ 634.935712][T24186] netlink: zone id is out of range [ 635.135941][T24189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4773'. [ 635.258061][T24197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4773'. [ 635.327305][T24203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4776'. [ 635.594848][T12033] lwtunnel_output(): recursion limit reached on datapath [ 636.028092][T24225] netlink: 'syz.0.4782': attribute type 1 has an invalid length. [ 636.105838][ T6494] lwtunnel_output(): recursion limit reached on datapath [ 636.163953][T24228] netlink: 'syz.0.4782': attribute type 1 has an invalid length. [ 636.327183][T24234] bond8: Removing last ns target with arp_interval on [ 636.389125][T24244] IPVS: nq: FWM 3 0x00000003 - no destination available [ 636.450387][T24235] bond9: Removing last ns target with arp_interval on [ 636.466592][ T5632] block nbd5: Receive control failed (result -32) [ 636.479595][T24238] x_tables: duplicate underflow at hook 2 [ 636.695514][ T9199] lwtunnel_output(): recursion limit reached on datapath [ 637.547458][T24274] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 637.805783][ T9199] lwtunnel_output(): recursion limit reached on datapath [ 637.978910][T24300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4794'. [ 638.071511][T24282] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.071661][T24282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.074748][T24282] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.074870][T24282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.501015][T24314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4798'. [ 638.698527][T24287] 0ªî{X¹¦: left allmulticast mode [ 638.750250][T24322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4798'. [ 638.750370][T24322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4798'. [ 638.946097][T24287] ipvlan0: left allmulticast mode [ 639.243944][T24329] netlink: 'syz.0.4800': attribute type 32 has an invalid length. [ 639.243968][T24329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4800'. [ 639.271745][T24322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4798'. [ 639.271768][T24322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4798'. [ 639.390446][T24329] bond5: option coupled_control: invalid value (16) [ 639.429841][T24329] bond5 (unregistering): Released all slaves [ 640.420090][T24381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4811'. [ 640.433818][T24379] xt_policy: output policy not valid in PREROUTING and INPUT [ 640.466222][T24381] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 640.468411][T24381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 640.470226][T24381] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4811'. [ 640.657957][T24386] netlink: 'syz.1.4812': attribute type 21 has an invalid length. [ 640.657982][T24386] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4812'. [ 640.685075][T24385] sctp: [Deprecated]: syz.3.4813 (pid 24385) Use of int in maxseg socket option. [ 640.685075][T24385] Use struct sctp_assoc_value instead [ 640.789386][T24390] syzkaller0: entered promiscuous mode [ 640.789407][T24390] syzkaller0: entered allmulticast mode [ 640.951712][T24385] nbd0: detected capacity change from 0 to 1099511628032 [ 640.967189][ T1723] block nbd0: Dead connection, failed to find a fallback [ 641.302767][T24409] net_ratelimit: 2 callbacks suppressed [ 641.302789][T24409] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 641.451086][T24399] bond10: entered promiscuous mode [ 641.451274][T24399] bond10: entered allmulticast mode [ 641.461101][T24399] 8021q: adding VLAN 0 to HW filter on device bond10 [ 641.637313][T24404] xt_policy: neither incoming nor outgoing policy selected [ 642.160131][T24457] netlink: 'syz.3.4825': attribute type 4 has an invalid length. [ 642.386496][T24469] netlink: NAT attribute has 1 unknown bytes [ 642.388132][T24469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.392682][T24469] netlink: 'syz.4.4832': attribute type 83 has an invalid length. [ 642.393601][T24467] netlink: 'syz.0.4830': attribute type 17 has an invalid length. [ 642.551251][T24469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.996506][ T1723] block nbd0: shutting down sockets [ 642.996679][ T1723] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.996827][ T1723] Buffer I/O error on dev nbd0, logical block 0, async page read [ 642.999320][ T1723] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.999350][ T1723] Buffer I/O error on dev nbd0, logical block 0, async page read [ 642.999478][ T1723] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.999504][ T1723] Buffer I/O error on dev nbd0, logical block 0, async page read [ 642.999645][ T1723] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.999672][ T1723] Buffer I/O error on dev nbd0, logical block 0, async page read [ 642.999830][ T1723] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.999857][ T1723] Buffer I/O error on dev nbd0, logical block 0, async page read [ 643.002280][ T1723] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 643.002307][ T1723] Buffer I/O error on dev nbd0, logical block 0, async page read [ 643.005260][ T1723] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 643.005287][ T1723] Buffer I/O error on dev nbd0, logical block 0, async page read [ 643.034958][ T2055] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 643.035046][ T2055] Buffer I/O error on dev nbd0, logical block 0, async page read [ 643.035618][T24167] ldm_validate_partition_table(): Disk read failed. [ 643.035862][ T2055] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 643.035926][ T2055] Buffer I/O error on dev nbd0, logical block 0, async page read [ 643.038692][ T2055] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 643.038767][ T2055] Buffer I/O error on dev nbd0, logical block 0, async page read [ 643.059795][T24167] Dev nbd0: unable to read RDB block 0 [ 643.072745][T24167] nbd0: unable to read partition table [ 643.231279][T24167] ldm_validate_partition_table(): Disk read failed. [ 643.231671][T24167] Dev nbd0: unable to read RDB block 0 [ 643.232194][T24167] nbd0: unable to read partition table [ 643.569595][T24498] __nla_validate_parse: 6 callbacks suppressed [ 643.569617][T24498] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4839'. [ 644.191274][T24509] IPVS: stopping master sync thread 20496 ... [ 646.765401][T24521] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4844'. [ 647.809696][T24540] syzkaller1: entered promiscuous mode [ 647.809748][T24540] syzkaller1: entered allmulticast mode [ 648.387856][T24570] ip6tnl0: Caught tx_queue_len zero misconfig [ 648.439355][T24576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4856'. [ 648.543005][T24580] [ 648.545401][T24580] ====================================================== [ 648.552470][T24580] WARNING: possible circular locking dependency detected [ 648.559618][T24580] syzkaller #0 Not tainted [ 648.564058][T24580] ------------------------------------------------------ [ 648.571112][T24580] syz.2.4854/24580 is trying to acquire lock: [ 648.577262][T24580] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 648.586621][T24580] [ 648.586621][T24580] but task is already holding lock: [ 648.594023][T24580] ffff8880223f0340 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 648.603580][T24580] [ 648.603580][T24580] which lock already depends on the new lock. [ 648.603580][T24580] [ 648.614007][T24580] [ 648.614007][T24580] the existing dependency chain (in reverse order) is: [ 648.623045][T24580] [ 648.623045][T24580] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 648.630747][T24580] __might_fault+0xcb/0x130 [ 648.635822][T24580] _copy_from_iter+0x100/0x1660 [ 648.641401][T24580] tcp_sendmsg_locked+0x20cf/0x5400 [ 648.647276][T24580] tcp_sendmsg+0x2f/0x50 [ 648.652076][T24580] sock_sendmsg_nosec+0x10e/0x180 [ 648.657710][T24580] sock_write_iter+0x2de/0x3e0 [ 648.663018][T24580] vfs_write+0x612/0xba0 [ 648.667813][T24580] ksys_write+0x150/0x270 [ 648.672677][T24580] do_syscall_64+0x166/0x520 [ 648.677897][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.684389][T24580] [ 648.684389][T24580] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 648.692048][T24580] lock_sock_nested+0x41/0x100 [ 648.697383][T24580] inet_shutdown+0x6a/0x390 [ 648.702474][T24580] nbd_mark_nsock_dead+0x2cb/0x550 [ 648.708186][T24580] recv_work+0x1cee/0x1e10 [ 648.713138][T24580] process_scheduled_works+0xc3d/0x1630 [ 648.719250][T24580] worker_thread+0xa47/0xfb0 [ 648.724378][T24580] kthread+0x38b/0x480 [ 648.728981][T24580] ret_from_fork+0x514/0xb70 [ 648.734119][T24580] ret_from_fork_asm+0x1a/0x30 [ 648.739468][T24580] [ 648.739468][T24580] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 648.747157][T24580] __mutex_lock+0x19d/0x1550 [ 648.752343][T24580] nbd_queue_rq+0x373/0xff0 [ 648.757385][T24580] blk_mq_dispatch_rq_list+0x499/0x1990 [ 648.763518][T24580] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 648.770419][T24580] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 648.776935][T24580] blk_mq_run_work_fn+0x16c/0x300 [ 648.782497][T24580] process_scheduled_works+0xc3d/0x1630 [ 648.788574][T24580] worker_thread+0xa47/0xfb0 [ 648.793703][T24580] kthread+0x38b/0x480 [ 648.798307][T24580] ret_from_fork+0x514/0xb70 [ 648.803436][T24580] ret_from_fork_asm+0x1a/0x30 [ 648.808751][T24580] [ 648.808751][T24580] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 648.815969][T24580] __mutex_lock+0x19d/0x1550 [ 648.821098][T24580] nbd_queue_rq+0xc1/0xff0 [ 648.826051][T24580] blk_mq_dispatch_rq_list+0x499/0x1990 [ 648.832139][T24580] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 648.838997][T24580] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 648.845508][T24580] blk_mq_run_work_fn+0x16c/0x300 [ 648.851073][T24580] process_scheduled_works+0xc3d/0x1630 [ 648.857150][T24580] worker_thread+0xa47/0xfb0 [ 648.862357][T24580] kthread+0x38b/0x480 [ 648.866949][T24580] ret_from_fork+0x514/0xb70 [ 648.872091][T24580] ret_from_fork_asm+0x1a/0x30 [ 648.877390][T24580] [ 648.877390][T24580] -> #3 (set->srcu){.+.+}-{0:0}: [ 648.884517][T24580] __synchronize_srcu+0xc9/0x2f0 [ 648.890013][T24580] elevator_switch+0x1e8/0x7b0 [ 648.895355][T24580] elevator_change+0x2fa/0x480 [ 648.900650][T24580] elevator_set_default+0x375/0x440 [ 648.906371][T24580] blk_register_queue+0x3f3/0x4e0 [ 648.911966][T24580] __add_disk+0x6b8/0xdb0 [ 648.916849][T24580] add_disk_fwnode+0x100/0x3a0 [ 648.922151][T24580] nbd_dev_add+0x733/0xb60 [ 648.927105][T24580] nbd_init+0x168/0x1f0 [ 648.931899][T24580] do_one_initcall+0x250/0x870 [ 648.937193][T24580] do_initcall_level+0x10a/0x1a0 [ 648.942737][T24580] do_initcalls+0x59/0xa0 [ 648.947611][T24580] kernel_init_freeable+0x29d/0x3e0 [ 648.953352][T24580] kernel_init+0x22/0x1d0 [ 648.958212][T24580] ret_from_fork+0x514/0xb70 [ 648.963346][T24580] ret_from_fork_asm+0x1a/0x30 [ 648.968641][T24580] [ 648.968641][T24580] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 648.976473][T24580] __mutex_lock+0x19d/0x1550 [ 648.981607][T24580] elevator_change+0x1af/0x480 [ 648.986902][T24580] elevator_set_none+0xb5/0x140 [ 648.992289][T24580] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 648.998728][T24580] nbd_start_device+0x189/0xb30 [ 649.004111][T24580] nbd_genl_connect+0x167d/0x1cd0 [ 649.009683][T24580] genl_family_rcv_msg_doit+0x233/0x340 [ 649.015851][T24580] genl_rcv_msg+0x614/0x7a0 [ 649.020888][T24580] netlink_rcv_skb+0x226/0x4a0 [ 649.026183][T24580] genl_rcv+0x28/0x40 [ 649.030696][T24580] netlink_unicast+0x7bd/0x940 [ 649.036045][T24580] netlink_sendmsg+0x813/0xb40 [ 649.041346][T24580] sock_sendmsg_nosec+0x13a/0x180 [ 649.046920][T24580] ____sys_sendmsg+0x54e/0x850 [ 649.052252][T24580] ___sys_sendmsg+0x2a5/0x360 [ 649.057469][T24580] __x64_sys_sendmsg+0x1b1/0x290 [ 649.062954][T24580] do_syscall_64+0x166/0x520 [ 649.068076][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.074499][T24580] [ 649.074499][T24580] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 649.083188][T24580] blk_alloc_queue+0x544/0x690 [ 649.088500][T24580] __blk_mq_alloc_disk+0x194/0x390 [ 649.094153][T24580] nbd_dev_add+0x494/0xb60 [ 649.099114][T24580] nbd_init+0x168/0x1f0 [ 649.103818][T24580] do_one_initcall+0x250/0x870 [ 649.109117][T24580] do_initcall_level+0x10a/0x1a0 [ 649.114585][T24580] do_initcalls+0x59/0xa0 [ 649.119450][T24580] kernel_init_freeable+0x29d/0x3e0 [ 649.125172][T24580] kernel_init+0x22/0x1d0 [ 649.130037][T24580] ret_from_fork+0x514/0xb70 [ 649.135148][T24580] ret_from_fork_asm+0x1a/0x30 [ 649.140446][T24580] [ 649.140446][T24580] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 649.147663][T24580] __lock_acquire+0x164c/0x2de0 [ 649.153070][T24580] lock_acquire+0x115/0x350 [ 649.158106][T24580] fs_reclaim_acquire+0x71/0x100 [ 649.163576][T24580] prepare_alloc_pages+0x149/0x600 [ 649.169212][T24580] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 649.175540][T24580] alloc_pages_mpol+0x21e/0x390 [ 649.180930][T24580] folio_alloc_mpol_noprof+0x39/0x160 [ 649.186835][T24580] shmem_alloc_and_add_folio+0x43e/0xf60 [ 649.192992][T24580] shmem_get_folio_gfp+0x5da/0x16d0 [ 649.198721][T24580] shmem_fault+0x179/0x390 [ 649.203698][T24580] __do_fault+0x138/0x2a0 [ 649.208549][T24580] do_pte_missing+0x2215/0x34b0 [ 649.213947][T24580] handle_mm_fault+0x1a53/0x3750 [ 649.219412][T24580] do_user_addr_fault+0x746/0x1340 [ 649.225045][T24580] exc_page_fault+0x6a/0xc0 [ 649.230079][T24580] asm_exc_page_fault+0x26/0x30 [ 649.235449][T24580] rep_movs_alternative+0x4a/0xa0 [ 649.241002][T24580] _copy_from_iter+0x21b/0x1660 [ 649.246382][T24580] skb_copy_datagram_from_iter+0xe6/0x720 [ 649.252688][T24580] tun_get_user+0x14fd/0x4450 [ 649.257949][T24580] tun_chr_write_iter+0x113/0x200 [ 649.263501][T24580] vfs_write+0x612/0xba0 [ 649.268272][T24580] ksys_write+0x150/0x270 [ 649.273131][T24580] do_syscall_64+0x166/0x520 [ 649.278273][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.284710][T24580] [ 649.284710][T24580] other info that might help us debug this: [ 649.284710][T24580] [ 649.294943][T24580] Chain exists of: [ 649.294943][T24580] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 649.294943][T24580] [ 649.307565][T24580] Possible unsafe locking scenario: [ 649.307565][T24580] [ 649.315054][T24580] CPU0 CPU1 [ 649.320453][T24580] ---- ---- [ 649.325842][T24580] rlock(&mm->mmap_lock); [ 649.330319][T24580] lock(sk_lock-AF_INET); [ 649.337268][T24580] lock(&mm->mmap_lock); [ 649.344131][T24580] lock(fs_reclaim); [ 649.348134][T24580] [ 649.348134][T24580] *** DEADLOCK *** [ 649.348134][T24580] [ 649.356358][T24580] locks held by syz.2.4854/24580: 2, last CPU#1: [ 649.362750][T24580] #0: ffff88804eb8a8e8 (&tfile->napi_mutex){+.+.}-{4:4}, at: tun_get_user+0x85c/0x4450 [ 649.372550][T24580] #1: ffff8880223f0340 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 649.382489][T24580] [ 649.382489][T24580] stack backtrace: [ 649.388392][T24580] CPU: 1 UID: 0 PID: 24580 Comm: syz.2.4854 Not tainted syzkaller #0 PREEMPT(full) [ 649.397774][T24580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 649.407849][T24580] Call Trace: [ 649.411182][T24580] [ 649.414155][T24580] dump_stack_lvl+0xe8/0x150 [ 649.418807][T24580] print_circular_bug+0x2e2/0x300 [ 649.423847][T24580] check_noncircular+0x12f/0x150 [ 649.428805][T24580] __lock_acquire+0x164c/0x2de0 [ 649.433677][T24580] ? update_cfs_rq_load_avg+0x426/0x4e0 [ 649.439291][T24580] lock_acquire+0x115/0x350 [ 649.443811][T24580] ? prepare_alloc_pages+0x149/0x600 [ 649.449109][T24580] ? finish_task_switch+0x40e/0xc60 [ 649.454325][T24580] fs_reclaim_acquire+0x71/0x100 [ 649.459289][T24580] ? prepare_alloc_pages+0x149/0x600 [ 649.464594][T24580] prepare_alloc_pages+0x149/0x600 [ 649.469725][T24580] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 649.475539][T24580] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 649.481884][T24580] ? __pfx_policy_nodemask+0x10/0x10 [ 649.487200][T24580] ? __bfs+0x153/0x290 [ 649.491285][T24580] ? __pfx_hlock_conflict+0x10/0x10 [ 649.496501][T24580] alloc_pages_mpol+0x21e/0x390 [ 649.501374][T24580] folio_alloc_mpol_noprof+0x39/0x160 [ 649.506771][T24580] shmem_alloc_and_add_folio+0x43e/0xf60 [ 649.512419][T24580] ? filemap_get_entry+0xcd/0x3f0 [ 649.517489][T24580] ? __pfx_filemap_get_entry+0x10/0x10 [ 649.522956][T24580] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 649.529143][T24580] ? shmem_allowable_huge_orders+0x61e/0x6c0 [ 649.535139][T24580] shmem_get_folio_gfp+0x5da/0x16d0 [ 649.540376][T24580] shmem_fault+0x179/0x390 [ 649.544815][T24580] __do_fault+0x138/0x2a0 [ 649.549157][T24580] ? do_pte_missing+0x140c/0x34b0 [ 649.554195][T24580] do_pte_missing+0x2215/0x34b0 [ 649.559056][T24580] ? handle_mm_fault+0xf1/0x3750 [ 649.564034][T24580] handle_mm_fault+0x1a53/0x3750 [ 649.568996][T24580] ? handle_mm_fault+0xf1/0x3750 [ 649.573969][T24580] ? __pfx_handle_mm_fault+0x10/0x10 [ 649.579279][T24580] ? __lock_acquire+0x747/0x2de0 [ 649.584232][T24580] ? lock_mm_and_find_vma+0xa7/0x340 [ 649.589535][T24580] do_user_addr_fault+0x746/0x1340 [ 649.594673][T24580] exc_page_fault+0x6a/0xc0 [ 649.599195][T24580] asm_exc_page_fault+0x26/0x30 [ 649.604052][T24580] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 649.609871][T24580] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 649.629565][T24580] RSP: 0018:ffffc900079df718 EFLAGS: 00050202 [ 649.635683][T24580] RAX: 00007ffffffff001 RBX: ffff888061910040 RCX: 000000000000b22f [ 649.643657][T24580] RDX: 0000000000000001 RSI: 0000200000005000 RDI: ffff888061914bfc [ 649.651640][T24580] RBP: ffffc900079df868 R08: ffff88806191fe2a R09: 1ffff1100c323fc5 [ 649.659638][T24580] R10: dffffc0000000000 R11: ffffed100c323fc6 R12: ffffc900079dfd78 [ 649.667622][T24580] R13: 0000200000000444 R14: 000000000000fdeb R15: 1ffff92000f3bfaf [ 649.675632][T24580] _copy_from_iter+0x21b/0x1660 [ 649.680504][T24580] ? kasan_quarantine_put+0xbb/0x1f0 [ 649.685804][T24580] ? __pfx__copy_from_iter+0x10/0x10 [ 649.691108][T24580] ? kfree+0x1c5/0x650 [ 649.695215][T24580] ? pskb_expand_head+0x469/0x13a0 [ 649.700341][T24580] skb_copy_datagram_from_iter+0xe6/0x720 [ 649.706083][T24580] tun_get_user+0x14fd/0x4450 [ 649.710802][T24580] ? aa_file_perm+0x18b/0x15f0 [ 649.715701][T24580] ? aa_file_perm+0x4ed/0x15f0 [ 649.720484][T24580] ? __pfx_tun_get_user+0x10/0x10 [ 649.725519][T24580] ? __lock_acquire+0x747/0x2de0 [ 649.730483][T24580] ? ref_tracker_alloc+0x341/0x4b0 [ 649.735693][T24580] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 649.741173][T24580] ? lock_acquire+0x115/0x350 [ 649.745865][T24580] ? tun_get+0x1c/0x2f0 [ 649.750045][T24580] ? tun_get+0x1c/0x2f0 [ 649.754228][T24580] ? tun_get+0x1c/0x2f0 [ 649.758394][T24580] tun_chr_write_iter+0x113/0x200 [ 649.763429][T24580] vfs_write+0x612/0xba0 [ 649.767682][T24580] ? __pfx_vfs_write+0x10/0x10 [ 649.772477][T24580] ? __fget_files+0x2a/0x420 [ 649.777102][T24580] ksys_write+0x150/0x270 [ 649.781462][T24580] ? __pfx_ksys_write+0x10/0x10 [ 649.786330][T24580] do_syscall_64+0x166/0x520 [ 649.790957][T24580] ? trace_irq_disable+0x3b/0x140 [ 649.796030][T24580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.802121][T24580] ? clear_bhb_loop+0x70/0xc0 [ 649.806816][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.812734][T24580] RIP: 0033:0x7f2f82b9e199 [ 649.817167][T24580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.836805][T24580] RSP: 002b:00007f2f83b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 649.845234][T24580] RAX: ffffffffffffffda RBX: 00007f2f82e26090 RCX: 00007f2f82b9e199 [ 649.853217][T24580] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 649.861235][T24580] RBP: 00007f2f82c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 649.869218][T24580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.877202][T24580] R13: 00007f2f82e26128 R14: 00007f2f82e26090 R15: 00007ffffde8e078 [ 649.885193][T24580] [ 651.064188][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!