last executing test programs: 8.503949531s ago: executing program 3 (id=3015): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff7ffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f0000000300)="120006000000000000", 0x9, 0xc8c0, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x8, 0x5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0xf03a0005) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x0, r0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000030801010000000000000000000000001c0004800800064000000000050008400000000008000740000000000500030006"], 0x38}}, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x4, &(0x7f0000000000)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000040)='GPL\x00', 0x6, 0x7c, &(0x7f0000000080)=""/124, 0x41000, 0x48, '\x00', r3, @cgroup_sock_addr=0xe, r5, 0x8, &(0x7f0000000300)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x9, 0xe}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000480)=[r6, r7, r10], &(0x7f00000004c0)=[{0x0, 0x2, 0x2, 0x3}, {0x5, 0x4, 0x7, 0xc}, {0x0, 0x1, 0x6, 0x1}, {0x5, 0x4, 0xa, 0x2}, {0x4, 0x4, 0x5, 0x6}, {0x0, 0x2, 0x0, 0x1}, {0x0, 0x5, 0xb, 0x5}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="ffffffbfda21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0xffffffffffffff79, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 8.193474091s ago: executing program 3 (id=3017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000200"/28], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffff}, {0x5, 0x9}, {0x1, 0xe}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a3200000000780004806400018009000100686173680000000054000280080007400000000108000540"], 0xcc}}, 0x24000840) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@llx}]}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000008000b00030000000cfa05008100000001000000b4ff0300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d0000bb000600000000000000000008000b0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r10, {0xd, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="70b7f0e21c7f14a9952c3ea96ac486aa7b5185", 0x13}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.27147368s ago: executing program 2 (id=3020): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x100, @loopback, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=""/4096, 0x1000}, 0x4000}], 0x1, 0x120, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000001c0)=0x80000008, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x3a, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r7, 0x0, 0x0, 0x2004000) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r8, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:'], 0xa) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000003c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 7.007960412s ago: executing program 3 (id=3022): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffdfe, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6.737640798s ago: executing program 3 (id=3024): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) (rerun: 32) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd51, &(0x7f00000003c0)=[{&(0x7f0000000080), 0x803e}, {&(0x7f0000000000)="ec", 0x1}, {0x0, 0xfffffffffffffde8}], 0x308}, 0x0) 6.556163424s ago: executing program 3 (id=3025): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005a0001002aeae278378e3fbd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 6.452515894s ago: executing program 3 (id=3026): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2e, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r5, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd23, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3c}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 5.848575903s ago: executing program 2 (id=3030): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40002022) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 5.805068213s ago: executing program 2 (id=3031): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000680)={0x3, 0x7f, @status={[0x6, 0xe1fb, 0xffffffffffffff81, 0x7, 0xcaf, 0x5]}, [0xb7, 0x8000, 0x10001, 0x2, 0xffff, 0x7, 0xd, 0x2, 0x0, 0x40, 0x0, 0x94e, 0x5, 0x100000001, 0x6, 0x39, 0x6, 0x3, 0x3, 0x9, 0xd, 0x2, 0x9, 0x4, 0x6, 0x0, 0x3, 0x7, 0x7, 0x2661, 0x1, 0x400000007, 0x33a3, 0x7, 0x4ef79566, 0x4, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff, 0x96, 0x8, 0x3, 0x2, 0x4, 0x0, 0x0, 0x3, 0xa, 0x6, 0x0, 0x8210f83, 0x6, 0x3a7, 0xa2d, 0x5, 0x4, 0x80000000, 0x7, 0x10000, 0x200, 0xca3, 0x0, 0x4, 0x1]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x8, 0x5, 0x8, 0x8, 0x8, 0x4}, 0x1c) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0000880800010600010012004000004011907800000000ac1414224e284e200018b07804000000ffffff7ffcffffffffffffff"], 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) r9 = socket(0x25, 0x1, 0xd) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x2, 0x0, 0x20000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02c6b8c8e4c109f8be529ca0f788aaa4453b0000000400ac1200000800c49c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000400"/28], 0x50) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000010c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d640000000000000100007800c00018008000100", @ANYRES32=r9, @ANYBLOB="b632aa6aa74390eef5ab662ddec856d444204a6f7bda10db8eb9147e1c5d9bda2e92d1e76ec170fbcbfde0cd6c5bc947f6ce3c507c3ffcb8c5d30f4e41e71347750c33c6eda5758d9f6b11c602af85e7afe6c61bdc5488d791820fcede0cafa1a0e46a5b27fc9313e49e0b9633c1c86d9da51d1da84775d2a3ee7a8f41b034f2ea0624f2c10eaf3e2388dc6ae408f0ea02b103c9f1e842e50e0d6a9622bdb978dcbead0100b485814c316ca19db4e6a01339a619c69db580a531b6534c4373caf337780a73db1ef32f4b3d2d9786cb44db42830bf3a0f3bef24df98db086fc441a960db98c5405f74169b8ff"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0xb0) 5.361055058s ago: executing program 0 (id=3034): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x40880) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) (async) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x290) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r7, &(0x7f0000000280)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5.116189813s ago: executing program 2 (id=3037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00020009"], 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d", 0x10}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x1, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00'}) getuid() sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x405, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x200}]}, 0x50}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = socket$kcm(0x23, 0x5, 0x0) listen(r4, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pim6reg1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5, 0x1000000}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x4412, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 4.266802127s ago: executing program 1 (id=3039): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x40010000, {{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0xfff, 0xfffffffffffffffb, 0xffffffffffffffff}, {0x0, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x20004024) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r1, 0x1, 0x4b, 0x0, &(0x7f00000001c0)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x3223922146196992, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x80) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000001010102008a0c2fb50000000a00000508000840fffffffc0800034000000002"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b800000019000100fcffffff00000140e0000002000000000000000000000000000000000000000000000000000008"], 0xb8}}, 0x4004) (async) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e000000200000000000000000000000000000000000000000000000000000000000000004e2400000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000008006000000000000000000002000000000feffffffffffffff00000000bc6b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 3.791919992s ago: executing program 1 (id=3040): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e22, 0x9, @loopback, 0x9}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, @in6={0xa, 0x4e21, 0x8, @loopback}], 0x68) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x771}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10021}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x36, 0x0, &(0x7f0000000240)="e027429b49dcd4ff9782762f86dd21e91717c73f9ae529df2043ca50862bc9797b8fff68c17bd529bf996f5e3acc9c39914d6afb75cd", 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x8, 0x6, 0x7, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x40, 0x8000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0x3}, {0x9, 0xffe0}, {0xfff1, 0xf}}}, 0x24}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f00000008c0)=0x1, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000680)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r9, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000500)={r9, 0x6}, &(0x7f0000000540)=0x8) sendmsg$nl_xfrm(r3, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="08000000000000007b000000000000000100000000000000400000000000000004000000000000000b00000000000000100000000000000008000000000000001e0000000000000000000000000000000800000000000000040000000000000005000000be6b6e0002000202000000000c000f00050000000000000014000d0064010100"/144], 0x310}, 0x1, 0x0, 0x0, 0x810}, 0x20000010) 3.739777192s ago: executing program 1 (id=3041): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x1) unshare(0x50000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x91d]}, &(0x7f0000000480)=0x6) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f00000022c0)=""/4076, &(0x7f00000000c0)=0xfec) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7ffe}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000180)={&(0x7f0000000280)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25d7dbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x6}, {0x8, 0xfff2}, {0xffff, 0xbd3fbc2b14969b10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000884}, 0x40) close(r4) socket(0x3, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000004c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)="27038200dc2f14000e00e882cbf400930bf4533f00429c65112a093bbf60b85bcb0600000000772789a30e5bdb6fb92d3ec650fa55e0f3b36a150102b9a5697710be78aa70b0d8de7957390d1a3a4667934890f24ea4ef9895a511fc4907e216b208d4df682a2eba55ff137e1d4343f8b00974410fb112320677e78c0883436b47024648b53cd64a73", 0x89}], 0x1}, 0x4005) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.137777631s ago: executing program 0 (id=3043): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000500)={@val={0x0, 0x22f0}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x6, 0x40, 0x68, 0x6000, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x1, 0xb, 0x0, 0x2, 0x400, 0x0, 0x3, 0x0, 0x1, 0x1, 0xe3, 0x9, 0x0, 0x4e22, 0x4e24}, 0x4}, 0x1, 0x3}, 0x3}}}}}}}}, 0x5a) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000780)=r7, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="f03c83d5230c", 0x6}], 0x1}, 0xc000) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d2c0012802800081c903e01006c617374000000001800028008000140fffffe000c000240fffffffffffffff8080003400000011014"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$TUNGETSNDBUF(r10, 0x800454d3, &(0x7f0000000240)) sendmsg$inet6(r8, &(0x7f0000000880)={&(0x7f0000000140)={0xa, 0x4a20, 0x5, @loopback, 0x400}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec11e30e", 0x8}], 0x1, &(0x7f0000000080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x18}, 0x4000014) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.608605062s ago: executing program 0 (id=3046): r0 = socket$inet6(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1ff, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x28000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r5, 0x0, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000001f80)=""/226, 0x18, 0xe2, 0x3}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, 0x0, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) sendmsg$nl_generic(r3, 0x0, 0x24080801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/203, 0x87, 0x0, &(0x7f0000001200), 0xfffffff3}, &(0x7f0000001340)=0x24) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, 0x0, 0x0}, 0x20) sendto$inet6(r7, 0x0, 0x0, 0x200c00d4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}}, 0x1c) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e21, 0x4005, @private0, 0x80000000}, 0x1c) socket$inet6(0xa, 0x5, 0x7) 2.136582325s ago: executing program 0 (id=3049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000002600)=[{{&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x0, 0x0, 0x2, 0x1}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000280)="4ef371ab87e96c69d48ce94fd7cc70ae1faf8dee8b4d7bf09c9cc3c2b9b8305dda92abf6c1d604b6bbbae171d1ba6af081da8ce935d3839d5609a0f10e0a2f60f7ec4da4", 0x44}, {&(0x7f0000000300)="044348eebde51c04197fdb311eb4a79eb3919df6d9907ae4eeb43f749afd13822c83c72e65fce79d8cd022c020f2053935ab579adc26197342e48ff9e4", 0x3d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="9391c4e1c1852284d43f0147d692289dd3b6fe8e9c4e14da403ecc7226b8dc424040b280dbba1507a243f8cf10376447c7e7825d19275d1753a412447e9342059e51c65e5f11bf9880fe5dc28a31b6618c2bfb01d9b932c537195d301bcd2e77d2659f5f54a67a6d4f2c71811b9932c653201b51ae03bc7d7d49eaf178b7dacaf02528ab884e6faed6f40543e5e22820f26ef927128f5f108e081a02a92cd36f30", 0xa1}, {&(0x7f0000001480)="c3ff51af8d40c9d5a6eb327a883fc5f6dd9444afe512c19c8a61137df0725d8209f100a75f8fdf731de40a7d2c5edc0e6005ba28a02c512ac5c63e582b2ca78e5efe37158d7c3b89c06b34d6baf001a1963c5d4799c32ec1c62ff69479133debc8b26ea2dff1f60ba3e5ef8e171ac181941d328804b2d6b2d213935fa4c8f6493eadd6a7d8794f9e335e6ef4acf6cd888f87e876f5bbb4979957cb68f8ab2f65b121dd325263d65e10616c0d37fdec37db6d5ef746a26f78e677015f2379806041a7b0b12ed03834d3663b41771adc90f6e79a09660166f3252f62b78b60d0aacf7d137b86ed8a3885e6c3084bfcbd5317f7d374d5a9d3ea21ad6b4be2ffffc17c441c5075e9b35fdc19bda6b2a1c80a02ec8d7c33b399bd9b605f770b94cc35261fe6d42ff208ab8960b6ac91624c99d602591377d2658a7c173655435c61792536ef348fcffd61c675268beb16d12e440d311e14f11d33a9af58ca2883ddf17bcfe2588cb3569f3bf42648f7ec63290add669afc550470c7bd3800c11f9a2b304b8a715af865bc813ae40fdf6895fc4dc6fe5a8858b00c92832572cf56ff5459e98ad65170078d1494625452bc357b4d9f13acaded2f95a5eb02009ffcdeaebdfef1323748ea450a0f14d41621081dae5582f0f0fa435fedb0a87b822a9ab84a0bef3c4d5ed0762a8a77299f0dbee9d12c95671f983208ccc7eb6159115b1c65d6905372326c5d1bd70ef776dd00d97baf0a5469d319ce2c0a90900c51011cb07c5adca8a534b556ce26b39827e57b39e39d641d19e48163632ba7d1ba0dd5e746b130087d164b6da43729c33d83740984467d3ca9d1a68e9ae557c3e65d942e95bdbe5eddc6c41edb29e009ed79bb85bf7fc86b4e4fe0014e7216bb556e6d1b0a84c629dcc92255d13b655f9e2dfa30ea742a9eac232a82c092103c87f7f3fa85db8cd6c4e17077c75adf63d0f79590b63024998031cdbd0b29db6790a8fd2dbc42f39ea3f8d37b957a191b607e72cbf087f6e50efabd589e6fb99c0d6b46ca84fd5b693f9976bd5ba554724fb3293f3282e4f801f66acef5f36fd5ce73700aaf5ee8cbf5f7426938d4235e46493689c3ced6f5e1ab52d41c373171f73d42802b613824a207ec35674c08aae8e2f7034b86c0dd0f985ae4b986b21468d1b4f84d5e2351a8516967266b76a48e0e25cdbbbb86d9db6737f8d8f01928c3fe00b926d4bc66f008adc04c4097f98bf06081bb11f171f89b61247e533575d623a0da6b93aeba74f9d841b7fa037907ef456f751efc998f6745398b267fc1c1175231201e03fa9b0eeaa0a94c7e260db63b012ba3ef7df4f78b1fcf92826340c27264730fbdd7ef1f6cc1e35321c7cbbab2db94563f48a214bf90b3963b39b58caebe5562e2ef4bcb7cf83dae4e213209b80cc9df85b3194c2bfae3ce74ab71a30c12ca09d354ff8f0afe3049452c0a4ac1101e5c0bd5fb8b9d2d6c39731f3df406357bf6061fe027b662e9f04d537914ec98031c51336701f49ddde3ce3245a02c02f287d41fae86c3e55be325c0d351a3e08eb47ebc83b01d305388c588ffab73fc5d0e2db94539820e06d066f7289c7ab0c37a3e8f80bf34b850dc4ce9faa7a1dddb98ba97a6adf2304b32eb5c5a515c8477cfb1c89ff55c3c6c5eccbe87ddd78b20a52679afdad4ea71b4eabc453521d6779d5baccc429d8485000f6484a2e4d0bfe902cd43b8166749b09c70ddfb4731e43b7a0b27d021ba33fa0e773538d5bc605b801b12c46991cc18f5d966b0bc993280008e12754e3c8a4dead61826033ee855b54a958ac3f355c33145a20634c343eea25485cd4d15280bb1d5d508787d5211faafcece0632a88654d49db0c0f6bc71dc141a9d8054d1a28d5abebfde71955e8691ccdebf504232551de56fe05f84d67fd6151854b8d8cbb8f433435c533f767f73b3c61a560576e60bd1363437ca34040f65980d9f4538425e356a1da611fc9fe1966df49c05588635cbf1aaec639b75c92f0191abb6fd47532e0f4aa9e39b215919085c83a8e3035bccacaa9246a77f02e0e6d2acda8bddadbb46ef47ab34044bb57903e9c51df99a55e523a0e2b15bfa68a5dd94ba7e2572937ed6b3c593f6ee05ff11d8b5377416667aa74bdb5cf40f8258fef5b74bdab6f1b9e1ddb8367a9c9dfc15f7890974f88c53282fe1d8d2a94120aa9385d7277107156aa8d201c69274f28e316849d27c8f88e30cd4915a9cc48d5fb9c9e3bf09604c6f15599e6027e09695bd0220c3c06476cca8501b12a0ddf8d9a21eb6ddc6c1f282ab68582b7f651f1784021ef8c33ef5547aaf4a4c7bfe50f4868f79952400d86baf2ed054e4371bfaf790938bbb72210220c2623007e28b0ad17fd38bccd6f8f49c7438ba2450f3e6ed8edcbd1aa5d1f0d85e6158a50a3739af0b6d6b02063fa808a07461c43b63f5d97d4182054935f6b3c2eac3850aea3254c51107f341f6c2fe389d4801a85ad628c7a6da80c4f0024e82775b95e3613c7e3781f6fbf33d06c8f101d6a3ea56426faaa10820ec1290597b13e346df3a809bf8986ef99a7024e719e4a516625787f3442247056d4e474fe34c0ded6295adc22b77c008b46545446754ad6c612e1e2bd2bebd26ba1de5a295592d729d2ed3200bedf6dce668b4b4fd0665a72aa1ec2e6650fc80cdf6b5c6990aacb14cb2343f90b4f3cdccb672a78ba9fa1a4904839c0ce34e33d5c0cf28210be56e82b770cc991dee497b5193987f49f3fce5a1db4c04d5f1713bb6577873f40ecf3ca4abbeb847d0f15e01252f4fded40c6b258d3f26f1793c383a77733da583c75d49023a12bf9fb77067db07af61cb5af2fe8637ad4c47d3e5ece2269aae6778023a068d250ef9098f0e9ae5eaa4d1759e40e5e4613bdcc2a79ed04c707004b78abd031dfa874ec366dc5a3c8d805f98c0e22345b8f232c4debe11079874df0ebb3fec41716a94db8344010de2da3a12ed746d62fa9f8d27835cb120a15b632fc45f23d677ad75aedf9bfa9dd810f5ca6fb3255c2980e583300e97968cd0b0a7c7d43472058dc20395379e88c7609d20a3dbe39d8962308355b0c34639e546bea8a8be4c80ccedae7f44d628c78233c504177573ed5ddd52c047f9e4b392e9d0f5bf44fa03e19cb363be61bfd19e7374ef5429aedcb00b0fe6b37bd47a9c59d35d60ab1db8bb167a14a4eaa544918abbe2584092ce9d7b11d973879e6ae068ade5fdd0060b38181dcbd989575e54d2b76be8279569e3299edb7fe7f8464249dcacd8f0f051cc3de30250a770c0d235401a7f97805f7c8d98f95d8f1c2651056982f236e857c0e674baa1bd49a4e07587689267b3e74cea58cb869284843d701e7429f2a5e4f09b81658925a22177ff4e8507cece777fcd62c170f576b1bb56d405ef4e1ef4987a80f454f6b17b32e612fe4fc879944d922f52dc8782d4d44dffb6509d0f144a6be5e99af42a9be652a7ecc7d4910b3df2a7cc64e76c81f4f4d0f3d7378061e339c4ba75fcf6ea18391371e2eeaa4aff6169a91984fbca7e4fbf272494b962d07dd7c5585a077e74b6a3d8e1fcb80106efec3ae3cc0cb029ff0c725324dab0bce7f6636d0b07e75ddc4e4fc149d5dbfdaa54d42252fd4b6d240f5c17a7e0dc3ad487a000af37d71b4fb5013a1716e2cb09761e79c3e516449992891dbaa940fe34fdffd5653f7ef2abf868082ae3359e93cb619dc857f70b5978c26f1f8dc1e1557a67656b7d2956b20e5f590e53e0c1b2422035d69612262e890b8825c955c643343e1bac82f6105417b628350710275c593f055b8e255a40a251eb913ae32928167454e9695c0fe73a7323b297afa271ee429aba9586ff151607109d4b3e81ecd243c702bf7c77bf648319336101476669d3520c89c79ac001e8a654f4380c03f7a147a14c5c679ef39a0ac21d1c9354d388899f94ecc4325e4c972d7c84eeb56e30110c938ee3ef0423e7c611378e0ea83e5c51bf99d12ed20e93bb4cb678b00d1236e2239bbee1146385c58491e849ba3b1bd429d330eeac15ac58d0d2f8451e1a091e0776a0ff7ceacab08847bb100e718774cf1fe6a091f5390f351c4dbc5ea5eaf427accac3c461ea048870eb8031fa4f5eb2c073325fe74f49601f1ea4b592c7a6966948664909a2098446e25e3c92cd38d3d4fb7ad60aed118cc7f69b17fafc4f006f9be2a934b89e7987ce82f49c07d96ea7cc2e5b6465c996884a23d778673cdc0d854d9b1ed6de14cb0ce3ad42393db37bd34bc453d23728fa7bc75abec90387bbadacbf51b120e841cb3c56d428ca7620a9675443381ad66887793e6d7cb33b7a3e6c1f25202839ba769682d3187d8d8883b4e3db5b6827f57152c91d3b533bd8d3e5a0b4fc3e064c18e15a279632ada1eb7d0838f83f28550fc00f139522529d8ad4c78e126559d7c1e48002e715cf3076ac72cf0fa460442eb2737b7d8f5b2dfc35f0523e0eea32c6a19081f7e73f94d0d91fdc09cae1c344732031a98635ce0f28339afe662b2b2994c22e55acbcdb02daef66c34b49837ae05e12f70cb6c67ff3e3df34d0462b5ac2fdb4c353470cc814a5185345605bdd48e959088402c45adb8db472b9aa583b8d430c4efe4f023b0f5824439f33db0f4121c9efbb33c3cfeb02ed89da484f56d406601a5829e2fb4ffdaae2eb03126ae1b1aabe92268607e4db78f6d0ca78da76bbd828123a3a9055732fc26c67baa649da4ad5d8fa0547e737fc0fbd696e5cdb251b2ac41ad598d5cd4609f07613500f82a2c9e28e1540de1813fa165bbca9e24898b3290f17d0e8205ebb8ee9488d3015910e7aa3b2207ad0599621dcee53d7f1d0cc3c282d5bce43830e8bc562e3d4b3c6641b83fe76e53da5a28d5cc90cfeae3c06d25a66bdbc3ee0f2cf38247147afcb4d5d235dda7fc5ba164c9305938952e586c72b9d6611e81dee6aec93e7b967e7a9eaff11cf8d758f1cdbb54bdb0e4238b8bb4475f7b9c2ddfed3d9c8fcf0200bb3e56798688518fb2ec7e5163a4cd3ef01c3902f3ea6f5effe16a13eeb6dcf03af1ac7c5c5a484b6495b73d1945e7eb8832c39f3b5634941428d58159cb1ef2315041fc0872c74490dd738749d538b13888953ce500c3b0a3438b7e536b799ef1fb17fc78257267f66f1324150a6e3ab6c4003377c9522502ed17ee336e850c54ceea44e83ef0e4086f54960df0f032d0f9c02266603562cc1be174d411cf42c230714fc12fb8340c115d8de443dfb4af811bd6f7c7e1d35e5cae26b891c12445f5970e43a844a50454ba6fa08f14996e11c8d9a0a4d4ed55e7790c2b70704cf74e2f427d35664272cd99cb235783b5fcfe97fd0ebef697e5afd9efabefc3fecbfed89549e2a53c14329fe025cbf1e76b870c0697258ebdc47774b60f7985ecbfcb7891023218529c04541fc01e8229356f62790d96abdd7fcaab6501a7db8863c85f193ce4217bcfaece593a3dfbe3e2165075bcfe050b8e941b347b5bf1c7bcfbb4c23b953f9c4e47d880eba3d17b44748947b177f01086b6a049c230150a13d92c60b1c580e1821f84a585af1c078d7872834a4f71fd1adeeafefaaba59d9050aa14a0e9e0066ea2b2d732867371ff13dddacd1e0428c31382828edc7dfc52c8726fe4d9492184b40878c4dd2b5c56e6e7041cd5ae206df2f93342a1e83571084ceae14daa6e5f63a66e399a8d8d10b9d0f50f617da72b3f13c8086e83e9f7a53e7f6b528940b0cb6c7abf96d3945be19534611dc0a45917c4d6f490c8b6bd3db", 0x1000}, {&(0x7f0000002480)="38120228da7ddfe9497ee4922855f0210b3e7393acd929b668d0cb7e5608f61e4ef9d9b3b2f6925e5db6704181fbe94d9120158fd4b4e183c3ea712388fd6fe0e8dc7e80cf57ed9489af1e3e5feb8ac9ae42f8da86bc747b8940c7cf0f0d591f9b364b64de3c98fba1b9d4ce77867b6e659950a5790ee60a4914d67df747b06018412ca9e5624d4235cde16259d8f15649a9359ea210632ac25756d171055f04f75fa87e637a78ced1724b0530bfa3936fe5c0eaca24bd749e9702b412bcf331db9b69fc289073432e4c93f313ab35b16b0768a30d88a7ff8ed5fbd91f99214b79579c888bcf80bd82", 0xe9}], 0x6}}], 0x1, 0x44000) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002740)={0x98, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0xfffffffffffffddf}, @ETHTOOL_A_HEADER_DEV_NAME={0xffffffffffffff00, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bond0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044004}, 0x4c804) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0) sendfile(r9, r9, &(0x7f00000000c0)=0x4, 0xfffffff2) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r4, 0x0, 0x0, 0x80800) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000002c0)={0xf0000012}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r11], 0x1c}}, 0x2000c000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000ff0f00000500000a28000000000a030000000000020900010073797a31000000002e000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a010400000000000000000a0000010900010073797a310000000064000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd672bad0090000000000000091a0c7fffffff50000000000000000000000000800024000000000080001004c454400100001800a000100696e6e65720000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x24048010}, 0x20040040) ioctl$SIOCX25GSUBSCRIP(r10, 0x89e0, &(0x7f0000002640)={'veth1_to_batadv\x00', 0x8, 0x6}) 2.09798499s ago: executing program 4 (id=3050): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x48) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000b050000000000000000000200000908000100753332000800024000000001080003"], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0xc0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280", @ANYRES16=r3, @ANYRES16=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010) (async) socket$inet6(0xa, 0x3, 0x7) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) mmap(&(0x7f0000282000/0x3000)=nil, 0x3000, 0x3000007, 0x31, r0, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x24, 0x0, 0x0) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8070bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) sendmmsg(r6, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000d514d10000000000000000000"], 0x5}}], 0x1, 0x4000000) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x40000000000, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) (async) socket$kcm(0x29, 0x5, 0x0) 1.982097765s ago: executing program 4 (id=3051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.772312267s ago: executing program 2 (id=3052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r6, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f00000005c0)=""/108, 0x6c}], 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000004f483b000700100095", @ANYRES64=r5, @ANYRES16=r0, @ANYBLOB="19a761a47d08a973ffe9a9a302e0f2c1499cf060e01dfc00864ee2a7d49a608db16ff3047045da7fe57bbbf65bc31cd8d22790266170ec6d838cea29ff57a227fcd3b4b2af2da5b9594c395d02892010ea4cebcaa91cffa785f37e1077df9e4971fe6acd68", @ANYRESDEC=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', r4, 0x25, r6}, 0x94) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r4, 0x2, {0x2, 0x1, 0x3}, 0x3}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x36}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) r8 = socket(0x18, 0x1, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, 0x0, &(0x7f00000000c0)) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbbbbbbbbbbbbb88a84d008100660008004519001c00e4000008119078ac1414297f0000013eda00001bfb0bc263d5"], 0x36) 1.770301194s ago: executing program 4 (id=3053): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="5f1d1e9db660e8592c1854c07cedafd5614877325ba37ea7b684e4c7ffd7500bda03665a8258ecfa92d70e26620dbb6a83f0861114375e5281345d0c96b8580c033b984b5717b385bdda5d14c6ed62a45c2806c4700df69f41cfc0b0e14b4b24cf6ed1adbf4d15e2f3f309df5ce5a117d7402a5b234ced216231fb3519b56bcf7c7992e741c3a63429c6f4635418f3ec1e047b2f1c35d2c36b6dbc020283212eb31ced218b6321fef39bf498b3d9f83b329697bc52f68051e5b0518e5e6761778bb3332bbc", 0xc5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r5, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4801}, 0x48080) shutdown(r0, 0x1) r6 = epoll_create(0x46) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)={0x9000000a}) 1.55924832s ago: executing program 0 (id=3054): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4894) syz_emit_ethernet(0x3e, &(0x7f0000001780)=ANY=[@ANYBLOB="ffffffff080000000000000086dd6012000800083a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa8000907800000000"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7", 0x7, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x41) sendmsg$nl_route(r0, 0x0, 0x4040000) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000206050000000000cb48d2bc364a57f7e970d4dedf0505000400030000000900020073797a3200000012400000000b0500050002000040028b000500010006000000150003006861736869327bac51b25e652e653a6900000900"/105], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f00000004c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0xfffffffffffffec4, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x1028e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x7c, @local, 0x4e22, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x2c}, 0x2c) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 1.337538138s ago: executing program 0 (id=3055): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x6) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r6}, 0x4) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0x4, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xec7, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x71, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff44688a24c0e3ce76004200140813be07354a835db5c2d72bb70a09000000000000000000"], 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000190001000000000000ecff001c140000fe00000100f1ffff070001"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff020000000000000000000000000001424181ec8752243c6fd5db4df7037d19a7d206ec68f4b912035d0132f1a0c3c1eba932303edb194bf3bc4d86c90bc46439029e4ae37db9881d4ea26d78df63da81fd3a345c785a3c246a8e26421ff00464a5f2c7b93e26abdc98e8bd3780c3795a475b5c48b642bd6f104faeb9753be12d21529ab1635ff0521938397e3e588544"], 0x48}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x8, &(0x7f0000000240)=0x9, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) r12 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r12, &(0x7f0000004100)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x7, @remote, 0x9}, 0x1c, &(0x7f0000001500)}}], 0x1, 0x4000800) 1.335948936s ago: executing program 2 (id=3056): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) unshare(0x24020400) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) r4 = socket(0x8, 0x3, 0x0) poll(0x0, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @rand_addr=0x64010101}, 0xc) syz_emit_ethernet(0x80, &(0x7f0000000580)={@multicast, @empty, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [0xfff2]}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 795.571442ms ago: executing program 4 (id=3057): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401222abd7000fedbdf2508000100010000000800030002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000850}, 0x1008) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="ad56b6329ae5d59cb641000000b8bc00"/31, 0x1f) r6 = accept4(r1, 0x0, 0x0, 0x80800) recvmsg(r6, 0x0, 0x2120) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x8}, 0x94) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) bind$alg(r8, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r11 = socket(0x2b, 0x4, 0x1) getsockname$netlink(r7, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000080)={0x5c, 0x2, 0x2, 0x3, 0x0, [@local]}, 0x18) 395.965113ms ago: executing program 1 (id=3058): r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0xa, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000340)={0x26, "78aef2354b9596f783dacdcd6d6b550f3bc4686cea07b32b80c2cf3fbf3f3057cc101e47ec0deae0872d1332ebbfe05109b1753c6783d375de2ae57a06bd3552a116b3f1ace172eda8e6c6752791ae25a32ed3e0c86ef24be509fb4b4f7c7e9626cb3aea5d7574a6a7c603c9d1dc17f8e6db4e6ead12ae55b9ea8969bd2de499"}) (async) syz_emit_ethernet(0x4c, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x16, 0x84, 0x0, @rand_addr=' \x01\x00', @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf4386"}}}}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000000000c004480"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r8}, 0x8) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000004001a"], 0x24}}, 0x0) (rerun: 32) 366.873765ms ago: executing program 1 (id=3059): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x11}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'vlan1\x00', {0x7}, 0x6}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$FS_IOC_GETFSLABEL(r1, 0x40305839, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) poll(&(0x7f0000000240)=[{r2, 0x8}, {r1, 0x40}, {r1, 0x20a}, {r0, 0x4092}], 0x4, 0x38000) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 283.149728ms ago: executing program 4 (id=3060): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200cf", @ANYRESOCT=0x0, @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 107.49065ms ago: executing program 4 (id=3061): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x100000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000680)=[{0x10, 0x84, 0x7}], 0x10}, 0x41) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000380)="1edd6ea1aac2159698a477e0dca2f24c5c2c06dac2d3b4f99abea07cd8665e071f0389d171eb310873a75587cfc17c2456c7993e8948fd0daf2b295bc717d995ac1690cd19d0966a816490ae08cb744b", 0x50}, {&(0x7f0000000800)="56a741d3bc5d56522b26dff546be409af455b4d90c3b40896c53b4a121805ca7c124acbfc433465f2547d5e84f4359f1fe66a01f046d904120b3b531ee8196437fa18cd68c8d78a324a1d1786d80acf6ff148b8c34403934", 0x58}, {&(0x7f0000000880)="66cc0cc51692be7255351b94", 0xc}, {&(0x7f00000008c0)="baf4705540482cc6db79c64f344f8207bf1d9719230dee83c8cf2e155ec5cd291f6be8914fbefa9fbd753379ceeaf5b7a157498a29061e4d2ae943af633b5eb7e6d674a6d036d28bfb9c346f94b80b601658cf9994b296e245894b9c3b25564463308330a975c870909b94c3a9697f85e39d0153883dba0812bd59b65fd4af61cc447556b6630f3d2e755ae0362af81edf7dd044fdd210866df7f610b213a28f10c44f", 0xa3}], 0x4}, 0x24004000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$inet6_sctp(0xa, 0x6, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r7, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) socket$netlink(0x10, 0x3, 0x4) sendfile(r1, r5, 0x0, 0x20000000002) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r8, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x20000f07, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}], 0x18}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21000000, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 0s ago: executing program 1 (id=3062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): evsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.327127][ T9797] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.327193][ T9797] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.327250][ T9797] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.478938][ T9797] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.512300][ T9797] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.713499][T12431] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1600'. [ 325.558171][T12447] bridge5: entered promiscuous mode [ 325.580815][T12447] bridge5: entered allmulticast mode [ 325.628020][T12447] team0: Port device bridge5 added [ 325.636595][T12458] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1606'. [ 326.278734][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 326.302353][T12482] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 326.371297][T12485] Cannot find del_set index 4 as target [ 326.920082][T12506] netlink: 'syz.3.1618': attribute type 21 has an invalid length. [ 327.053784][T12498] tipc: Resetting bearer [ 327.471951][T12506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1618'. [ 327.489028][T11462] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.517063][T11462] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.569345][T11462] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.622754][T11462] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.717203][T12532] xt_cgroup: invalid path, errno=-2 [ 327.744051][T12530] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1627'. [ 327.758500][T12532] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 327.772725][T12532] syzkaller1: linktype set to 769 [ 327.797869][T12530] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1627'. [ 327.860750][T12536] syzkaller1: entered promiscuous mode [ 327.878807][T12541] netlink: 'syz.4.1627': attribute type 10 has an invalid length. [ 327.887325][T12536] syzkaller1: entered allmulticast mode [ 327.923517][T12541] team0: Port device dummy0 added [ 328.496364][T12555] netlink: 'syz.1.1630': attribute type 58 has an invalid length. [ 328.581566][T12555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1630'. [ 328.753762][T12568] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1635'. [ 329.117057][T12578] netlink: 'syz.3.1637': attribute type 1 has an invalid length. [ 329.410955][T12578] 8021q: adding VLAN 0 to HW filter on device bond4 [ 329.470724][T12580] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 329.488610][T12582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1638'. [ 329.499772][T12582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1638'. [ 329.553301][T12584] macvlan2: entered promiscuous mode [ 329.571025][T12584] macvlan2: entered allmulticast mode [ 329.600211][T12584] bond4: entered promiscuous mode [ 329.622438][T12584] veth0_to_bond: entered promiscuous mode [ 329.648952][T12584] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.684993][T12584] bond4: left promiscuous mode [ 329.696438][T12584] veth0_to_bond: left promiscuous mode [ 329.908934][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'. [ 329.988703][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'. [ 330.681382][T12610] bond5 (unregistering): Released all slaves [ 330.848076][T12625] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 330.945493][T12619] syz.2.1647 (12619) used obsolete PPPIOCDETACH ioctl [ 331.889800][T12637] __nla_validate_parse: 1 callbacks suppressed [ 331.889854][T12637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1653'. [ 332.832467][T12666] xt_hashlimit: size too large, truncated to 1048576 [ 332.926184][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 333.056111][T12674] netlink: 'syz.0.1663': attribute type 2 has an invalid length. [ 333.185324][T12677] netlink: 'syz.4.1664': attribute type 46 has an invalid length. [ 333.966081][T12695] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20001 [ 334.549687][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 335.781314][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'. [ 335.862538][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'. [ 336.147574][T12716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.186374][T12716] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.296662][T12716] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 336.602657][T12716] team_slave_1: left promiscuous mode [ 336.704940][T12716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.723679][T12716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.742944][T12716] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 337.632400][T12745] xt_CT: No such helper "netbios-ns" [ 338.310354][T12759] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.336645][T12762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1682'. [ 338.424036][T12762] netlink: 'syz.1.1682': attribute type 1 has an invalid length. [ 338.591619][T12763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1681'. [ 338.788266][T12771] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 339.366374][T12783] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1685'. [ 339.532157][T12783] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1685'. [ 339.577047][T12783] netlink: 'syz.2.1685': attribute type 6 has an invalid length. [ 339.636162][T12783] netlink: 'syz.2.1685': attribute type 5 has an invalid length. [ 339.683253][T12783] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1685'. [ 339.699051][T12789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1688'. [ 339.796687][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 339.829957][T12790] netlink: 'syz.3.1687': attribute type 1 has an invalid length. [ 340.960559][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 341.180959][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 343.832390][T12876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1711'. [ 344.105266][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 344.788145][T12876] ip6gre1: entered promiscuous mode [ 344.803922][T12876] ip6gre1: entered allmulticast mode [ 345.203128][T12856] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 346.690571][T12935] netlink: 'syz.3.1725': attribute type 8 has an invalid length. [ 346.724883][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 347.223991][T12953] netlink: 'syz.2.1730': attribute type 4 has an invalid length. [ 347.288742][T12959] netlink: 'syz.3.1732': attribute type 4 has an invalid length. [ 347.289619][T12953] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1730'. [ 347.320857][T12962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1731'. [ 347.428263][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1729'. [ 348.159738][T12980] netlink: 'syz.2.1736': attribute type 1 has an invalid length. [ 348.316641][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 348.744557][T12998] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1740'. [ 349.482915][T13022] netlink: 'syz.1.1746': attribute type 8 has an invalid length. [ 350.094708][T13037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1751'. [ 350.186045][T13045] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 350.741804][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'. [ 352.611136][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 352.751073][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 352.752348][T11460] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.863661][T11460] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.896588][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 352.931914][T11460] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.959838][T11460] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.514909][T13135] lo: entered allmulticast mode [ 353.535269][T13137] lo: left allmulticast mode [ 353.931170][T13143] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1775'. [ 354.788971][T13160] netlink: 'syz.3.1779': attribute type 40 has an invalid length. [ 354.830353][T13162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1780'. [ 355.086648][T13172] Unsupported ieee802154 address type: 0 [ 355.145901][T13172] Unsupported ieee802154 address type: 0 [ 355.581822][T13183] netlink: 'syz.1.1785': attribute type 6 has an invalid length. [ 355.612027][T13183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1785'. [ 355.772166][T13187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1786'. [ 355.859770][T13187] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 355.938739][T13189] netlink: 'syz.2.1786': attribute type 1 has an invalid length. [ 356.027182][T13189] netlink: 'syz.2.1786': attribute type 2 has an invalid length. [ 357.972280][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 358.032318][T13237] netlink: 'syz.2.1797': attribute type 1 has an invalid length. [ 358.181191][T13236] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 358.259313][T13240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1798'. [ 358.304559][T13246] netlink: 'syz.0.1799': attribute type 4 has an invalid length. [ 358.314758][T13237] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 358.358560][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 358.519482][T13245] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1799'. [ 358.744787][T13253] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 358.811068][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'. [ 359.132343][T13253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 359.262097][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1802'. [ 359.372899][T13262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.829656][T13268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1803'. [ 360.139200][T13276] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 360.900350][T13297] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1807'. [ 360.933388][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1810'. [ 361.019148][T13300] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1809'. [ 361.037301][T13302] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 361.092244][T13306] IPVS: set_ctl: invalid protocol: 0 172.20.20.54:20000 [ 361.181704][T13304] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 361.440809][T13309] netlink: 'syz.0.1811': attribute type 28 has an invalid length. [ 361.482883][T13309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1811'. [ 361.562646][T13312] geneve4: entered promiscuous mode [ 361.793407][ T1125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.820638][ T1125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.833419][ T1125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.883565][ T1125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.745484][T13357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1816'. [ 363.261269][T13293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.996726][T13293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.014624][T13293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.065751][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 364.103027][T13293] veth1_vlan: left promiscuous mode [ 364.114954][T13293] veth0_vlan: left promiscuous mode [ 364.131318][T13293] veth0_vlan: entered promiscuous mode [ 364.148623][T13293] veth1_vlan: entered promiscuous mode [ 364.168991][T13293] veth1_macvtap: left promiscuous mode [ 364.178532][T13293] veth0_macvtap: left promiscuous mode [ 364.187964][T13293] veth0_macvtap: entered promiscuous mode [ 364.200467][T13293] veth1_macvtap: entered promiscuous mode [ 364.249966][T13293] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 364.329330][T13293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.348864][T13293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.365914][T13293] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.386805][T13293] 8021q: adding VLAN 0 to HW filter on device eth0 [ 364.399227][T13293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 364.411748][T13293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 364.422011][T13293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 364.446555][T13293] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 364.850266][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1822'. [ 364.863250][T13379] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1821'. [ 364.876224][ T1132] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.885879][ T1132] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.979141][T13381] veth10: entered allmulticast mode [ 365.009171][T13381] bond5: (slave veth10): Enslaving as an active interface with an up link [ 365.289789][ T1132] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.317363][ T1132] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.375355][T13392] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1823'. [ 365.431849][T11460] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.472651][T11460] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.535342][T11460] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.592443][T11460] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.754596][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1825'. [ 365.777237][T13404] netlink: 'syz.2.1826': attribute type 178 has an invalid length. [ 365.826357][T13393] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 365.987554][T13393] bond7 (unregistering): Released all slaves [ 366.061249][ T14] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.160474][T13405] ip6gre2: entered promiscuous mode [ 366.176097][T13405] ip6gre2: entered allmulticast mode [ 366.508536][T13410] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1828'. [ 366.864485][T11462] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 366.932434][ T5762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 366.948781][T11462] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 367.071150][ T5762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 367.184334][T13425] xt_nfacct: accounting object `\$‚9ZúM#íü¾¦Eµ|¡^cÁ\F9YⳈ«ÃÖ' does not exist [ 367.639264][ T5762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.170129][T13447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1839'. [ 368.229642][T13449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1840'. [ 369.481618][T13473] sctp: [Deprecated]: syz.4.1846 (pid 13473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.481618][T13473] Use struct sctp_sack_info instead [ 369.561528][T13471] xt_hashlimit: size too large, truncated to 1048576 [ 369.574631][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1847'. [ 369.741799][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1847'. [ 370.277857][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 371.157213][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 371.664913][T13515] syzkaller0: entered promiscuous mode [ 371.677660][T13515] syzkaller0: entered allmulticast mode [ 371.806346][T13515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1850'. [ 371.929392][T13521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1851'. [ 372.007435][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'. [ 372.115522][T13522] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1852'. [ 372.201165][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'. [ 374.122682][T13564] netlink: 'syz.0.1862': attribute type 10 has an invalid length. [ 374.185081][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1862'. [ 374.209329][T13564] team0: Device dummy0 failed to register rx_handler [ 374.563481][T13575] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 375.679383][T13600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1869'. [ 375.749330][T13600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1869'. [ 376.938823][T13611] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 377.020251][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1874'. [ 377.044036][T13610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1873'. [ 377.300975][T13611] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 377.335971][T13611] bond6 (unregistering): Released all slaves [ 377.805519][T13620] tipc: Enabled bearer , priority 0 [ 377.852213][T13636] tc_dump_action: action bad kind [ 378.603079][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.613465][T13666] netlink: 'syz.4.1879': attribute type 1 has an invalid length. [ 378.614927][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.309977][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'. [ 379.654973][T13630] ip6gre1: left promiscuous mode [ 379.661237][T13630] ip6gre1: left allmulticast mode [ 379.675512][T13630] geneve4: left promiscuous mode [ 379.930426][T13614] syzkaller0: entered promiscuous mode [ 379.937282][T13614] syzkaller0: entered allmulticast mode [ 379.944649][T13614] tipc: Resetting bearer [ 379.953007][T13626] syzkaller0: left promiscuous mode [ 379.960605][T13626] syzkaller0: left allmulticast mode [ 379.969882][T13626] tipc: Resetting bearer [ 379.976785][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 380.033581][T13666] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 380.036007][T11654] tipc: Node number set to 827582842 [ 380.059274][ T58] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.071400][ T58] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.086731][T13612] tipc: Resetting bearer [ 383.708406][T13612] tipc: Disabling bearer [ 383.736516][ T58] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.747291][ T58] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.759449][T11376] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.771942][T11376] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.885619][T11376] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.930711][T11376] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.942473][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1886'. [ 384.171783][T13691] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 384.382059][T13699] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1887'. [ 384.725325][T13710] bridge0: entered allmulticast mode [ 384.815441][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1895'. [ 385.369290][T13734] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1899'. [ 385.642127][T13728] geneve3: entered promiscuous mode [ 385.706659][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.741438][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.790317][ T1125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.845462][ T1125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.925383][T13748] netlink: 'syz.1.1901': attribute type 4 has an invalid length. [ 386.141824][T13761] rdma_rxe: Failed to create IPv4 UDP tunnel [ 386.241711][T13762] lo speed is unknown, defaulting to 1000 [ 386.294577][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'. [ 386.510682][T13767] team1: entered promiscuous mode [ 386.544689][T13767] team1: entered allmulticast mode [ 386.577429][T13767] 8021q: adding VLAN 0 to HW filter on device team1 [ 386.901863][T13762] lo speed is unknown, defaulting to 1000 [ 386.918258][T13762] lo speed is unknown, defaulting to 1000 [ 386.920978][T13788] xt_hashlimit: size too large, truncated to 1048576 [ 387.038257][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1911'. [ 387.127517][T13789] xt_hashlimit: size too large, truncated to 1048576 [ 387.143287][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 387.175661][T13789] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 387.180594][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 387.343525][T13796] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 387.379273][T13796] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 387.446630][T13796] tipc: Resetting bearer [ 387.539949][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 387.626466][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1914'. [ 387.866030][T13801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.893231][T13803] netlink: 'syz.4.1915': attribute type 29 has an invalid length. [ 387.896363][T13801] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.962825][T13801] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 388.056300][T13762] infiniband syz1: set active [ 388.072710][T13762] infiniband syz1: added lo [ 388.123987][T13762] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 388.153211][T13801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.177221][T13801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.179311][T13762] infiniband syz1: Couldn't open port 1 [ 388.196230][T13762] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 388.210510][T13801] veth1_vlan: left promiscuous mode [ 388.228654][T13801] veth0_vlan: left promiscuous mode [ 388.246324][T13801] veth0_vlan: entered promiscuous mode [ 388.259663][T13801] veth1_vlan: entered promiscuous mode [ 388.268328][T13762] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 388.284771][T13801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.312324][T13762] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 388.313245][T13801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.351860][T13801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.360930][T13801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.369240][T13801] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 388.428786][ T5741] bridge0: port 1(vlan4) entered blocking state [ 388.437658][ T5741] bridge0: port 1(vlan4) entered forwarding state [ 388.465659][T13762] RDS/IB: syz1: added [ 388.471344][T13762] smc: adding ib device syz1 with port count 1 [ 388.486682][T13762] smc: ib device syz1 port 1 has no pnetid [ 388.583045][T11379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.619889][T11379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.634034][ T5762] lo speed is unknown, defaulting to 1000 [ 388.701948][ T1125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.711619][T11661] lo speed is unknown, defaulting to 1000 [ 388.741057][ T1125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.812402][T13762] lo speed is unknown, defaulting to 1000 [ 388.907172][T13813] ªªªªª»: renamed from veth0_to_bond (while UP) [ 389.008324][T13827] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 389.352327][T13833] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 389.995926][T13858] __nla_validate_parse: 1 callbacks suppressed [ 389.996008][T13858] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1929'. [ 390.158744][T13762] lo speed is unknown, defaulting to 1000 [ 390.650973][T13866] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 391.027921][T13762] lo speed is unknown, defaulting to 1000 [ 391.634774][T13882] lo speed is unknown, defaulting to 1000 [ 391.979334][T13903] : left promiscuous mode [ 392.521868][T13762] lo speed is unknown, defaulting to 1000 [ 392.828322][T13914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1947'. [ 392.878702][T13910] rdma_op ffff888049acd9f0 conn xmit_rdma 0000000000000000 [ 393.451027][T13932] netlink: 'syz.4.1950': attribute type 13 has an invalid length. [ 393.460733][T13932] netlink: 'syz.4.1950': attribute type 17 has an invalid length. [ 393.470050][T13762] lo speed is unknown, defaulting to 1000 [ 393.600975][T13932] geneve1: left promiscuous mode [ 393.716309][T13932] bond4: left promiscuous mode [ 393.722504][T13932] bond4: left allmulticast mode [ 393.735058][T13932] bridge5: left promiscuous mode [ 393.741684][T13932] bridge5: left allmulticast mode [ 393.749839][T13932] veth10: left allmulticast mode [ 393.755843][T13932] ip6gre2: left promiscuous mode [ 393.762649][T13932] ip6gre2: left allmulticast mode [ 393.975003][T13943] syzkaller0: entered promiscuous mode [ 393.987969][T13943] syzkaller0: entered allmulticast mode [ 394.136970][T13945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1953'. [ 394.203883][T13945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1953'. [ 394.597428][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.242449][T13976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.290968][T13979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1962'. [ 395.427930][T13958] netlink: 'syz.2.1956': attribute type 4 has an invalid length. [ 395.462013][T13958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1956'. [ 395.488721][T13958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1956'. [ 395.513464][T13958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1956'. [ 395.635743][T13984] netlink: 'syz.3.1962': attribute type 3 has an invalid length. [ 396.172415][T13989] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1964'. [ 396.492804][T13993] tipc: Enabled bearer , priority 0 [ 396.567506][T13992] tipc: Disabling bearer [ 396.628853][T14003] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1968'. [ 396.713505][T13998] syzkaller1: entered promiscuous mode [ 396.733662][T13998] syzkaller1: entered allmulticast mode [ 397.030000][T14014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1973'. [ 397.151082][T14016] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1973'. [ 397.484164][T14025] netlink: 'syz.3.1976': attribute type 1 has an invalid length. [ 397.729055][T14034] xt_hashlimit: size too large, truncated to 1048576 [ 397.772064][T14038] netlink: 'syz.1.1979': attribute type 11 has an invalid length. [ 397.822800][T14038] netlink: 'syz.1.1979': attribute type 4 has an invalid length. [ 397.857493][T14038] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1979'. [ 398.081840][T14047] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1980'. [ 398.182612][T14047] syzkaller1: entered promiscuous mode [ 398.216733][T14047] syzkaller1: entered allmulticast mode [ 398.446327][T14052] lo speed is unknown, defaulting to 1000 [ 398.785159][T14069] bridge2: entered allmulticast mode [ 398.909582][T14069] bridge2: left allmulticast mode [ 398.962339][T14076] veth1_to_hsr: entered promiscuous mode [ 398.991254][T14076] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 399.221664][T14084] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 400.224037][T14124] netlink: 'syz.0.1998': attribute type 1 has an invalid length. [ 400.379621][T14130] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 400.836536][T14130] 8021q: adding VLAN 0 to HW filter on device bond7 [ 400.881018][T14140] netlink: 'syz.4.2001': attribute type 12 has an invalid length. [ 401.213254][T14151] team0: entered allmulticast mode [ 401.233689][T14151] team_slave_0: entered allmulticast mode [ 401.271034][T14151] team_slave_1: entered allmulticast mode [ 401.300614][T14153] __nla_validate_parse: 10 callbacks suppressed [ 401.300645][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2004'. [ 401.674264][T14159] syzkaller0: entered promiscuous mode [ 401.691858][T14159] syzkaller0: entered allmulticast mode [ 401.915779][T14171] netlink: 'syz.3.2010': attribute type 4 has an invalid length. [ 401.954595][T14171] netlink: 'syz.3.2010': attribute type 4 has an invalid length. [ 401.958540][T14172] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2011'. [ 402.078760][T14175] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2011'. [ 402.199852][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2013'. [ 402.221282][T14186] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2014'. [ 402.252266][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 402.367138][T14182] geneve4: entered promiscuous mode [ 402.411511][T14182] geneve4: entered allmulticast mode [ 402.472838][ T9801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.508812][ T9801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.563686][ T9801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.615373][ T9801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.849961][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 403.893015][T14243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2029'. [ 404.015999][T14251] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2030'. [ 404.091144][T14254] netlink: 'syz.1.2031': attribute type 1 has an invalid length. [ 404.321578][T14254] 8021q: adding VLAN 0 to HW filter on device bond8 [ 404.796076][T14250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.933032][T14256] bond8: (slave veth7): Enslaving as an active interface with a down link [ 405.132417][T14265] netlink: 'syz.4.2034': attribute type 1 has an invalid length. [ 405.176261][T14265] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2034'. [ 405.544189][T14283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.597428][T14285] netlink: 'syz.3.2041': attribute type 21 has an invalid length. [ 406.566806][T14320] macsec2: entered promiscuous mode [ 406.812098][T14326] tipc: Enabling of bearer rejected, already enabled [ 406.845615][T14320] __nla_validate_parse: 3 callbacks suppressed [ 406.845634][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'. [ 406.879864][T14329] tipc: Resetting bearer [ 407.238834][T14341] netlink: 'syz.4.2055': attribute type 1 has an invalid length. [ 407.480470][T14341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 407.503800][T14346] team0: Port device dummy0 removed [ 407.537681][T14330] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2052'. [ 407.609689][T14346] bond6: (slave dummy0): making interface the new active one [ 407.631497][T14346] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 407.734987][T14351] : renamed from dummy0 (while UP) [ 407.800979][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2059'. [ 408.081346][T14369] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 408.091553][T14341] lo speed is unknown, defaulting to 1000 [ 408.153024][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 408.243006][T14372] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2063'. [ 408.262565][T14375] netlink: 'syz.3.2062': attribute type 1 has an invalid length. [ 408.293817][T14375] netlink: 'syz.3.2062': attribute type 3 has an invalid length. [ 408.328606][T14375] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2062'. [ 408.413501][T14382] xt_l2tp: unknown flags: 51 [ 408.451935][T14382] netlink: 'syz.0.2065': attribute type 10 has an invalid length. [ 408.504343][T14386] netlink: 'syz.0.2065': attribute type 10 has an invalid length. [ 408.511182][T14382] team0: Device dummy0 failed to register rx_handler [ 408.742946][T14394] raw_sendmsg: syz.0.2068 forgot to set AF_INET. Fix it! [ 409.012854][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 409.305965][T14418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2073'. [ 409.345808][T14410] netlink: 'syz.1.2070': attribute type 13 has an invalid length. [ 409.373280][T14410] netlink: 'syz.1.2070': attribute type 17 has an invalid length. [ 409.529255][T14420] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2070'. [ 409.564331][ T29] audit: type=1800 audit(1782598378.455:4): pid=14424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2075" name="memory.events" dev="tmpfs" ino=2174 res=0 errno=0 [ 409.687196][T14410] veth1_to_hsr: left promiscuous mode [ 410.299349][T14410] bond1: left promiscuous mode [ 410.325452][T14410] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 410.407219][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 410.743082][T14446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.779555][T14451] netlink: 'syz.3.2081': attribute type 1 has an invalid length. [ 410.848369][T14454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.916699][T14446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.015175][T14451] 8021q: adding VLAN 0 to HW filter on device bond8 [ 411.351605][T14457] bond8 (unregistering): Released all slaves [ 411.450762][T14465] netlink: 'syz.0.2082': attribute type 1 has an invalid length. [ 411.469216][T14465] netlink: 'syz.0.2082': attribute type 2 has an invalid length. [ 411.539266][T14465] hsr_slave_0: left promiscuous mode [ 412.601502][T14503] netlink: 'syz.0.2089': attribute type 3 has an invalid length. [ 412.631833][T14503] __nla_validate_parse: 8 callbacks suppressed [ 412.631854][T14503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2089'. [ 414.445406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.354563][T14496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2089'. [ 415.366832][T14497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.484003][ T5762] lo speed is unknown, defaulting to 1000 [ 415.624613][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 415.676382][T14514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2093'. [ 415.805546][T14514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2093'. [ 416.322296][T14546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.376241][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2100'. [ 416.424353][T14533] syzkaller0: entered promiscuous mode [ 416.436578][T14533] syzkaller0: entered allmulticast mode [ 416.582600][ T5741] bridge0: entered promiscuous mode [ 416.726641][T14552] syzkaller0: entered promiscuous mode [ 416.744348][T14552] syzkaller0: entered allmulticast mode [ 422.022207][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 422.065829][T14580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2106'. [ 423.564678][T14606] netlink: 524 bytes leftover after parsing attributes in process `syz.4.2113'. [ 423.576832][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'. [ 423.857881][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2114'. [ 425.670196][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2109'. [ 426.605409][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 426.712409][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 426.803490][T14657] netlink: 'syz.2.2124': attribute type 10 has an invalid length. [ 426.837420][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'. [ 426.864056][T14657] openvswitch: netlink: Message has 4 unknown bytes. [ 426.897476][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 426.941003][T14649] lo speed is unknown, defaulting to 1000 [ 427.249572][T14673] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2131'. [ 427.329533][T14677] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2131'. [ 427.375153][T14678] netlink: 'syz.1.2132': attribute type 2 has an invalid length. [ 427.388048][T14678] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2132'. [ 427.711233][T14688] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 427.922556][T14688] 8021q: adding VLAN 0 to HW filter on device bond9 [ 427.928360][T14698] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2138'. [ 428.017664][T14693] bond9: (slave veth9): Enslaving as an active interface with a down link [ 428.042484][T14694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.052949][T14694] bond9: (slave batadv0): making interface the new active one [ 428.063093][T14694] batadv0: entered promiscuous mode [ 428.070719][T14694] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 428.266210][T14704] sctp: [Deprecated]: syz.1.2140 (pid 14704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.266210][T14704] Use struct sctp_sack_info instead [ 428.834408][T14717] lo speed is unknown, defaulting to 1000 [ 430.184566][T14751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.375755][T14762] x_tables: duplicate underflow at hook 3 [ 430.800198][T14767] tipc: Resetting bearer [ 431.378491][T14793] netlink: 'syz.2.2159': attribute type 29 has an invalid length. [ 431.395641][T14793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2159'. [ 431.411578][T14793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2159'. [ 431.763487][T14799] lo speed is unknown, defaulting to 1000 [ 432.076764][T14809] ip6gre2: entered allmulticast mode [ 432.764701][T14818] syzkaller0: entered promiscuous mode [ 432.770515][T14818] syzkaller0: entered allmulticast mode [ 436.884936][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2179'. [ 437.308317][T14879] bond8: down delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 437.633958][T14899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2185'. [ 437.859226][T14902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.869929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.969508][T14905] lo speed is unknown, defaulting to 1000 [ 437.970122][T14902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.015915][T14921] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 438.028676][T14920] veth1_to_bond: entered promiscuous mode [ 438.045569][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2190'. [ 438.135456][T14920] veth1_to_bond (unregistering): left promiscuous mode [ 438.584071][T14901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.596064][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.634577][T14922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.660759][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.680856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.698187][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.710701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.760402][T14932] bond7: (slave dummy0): Releasing active interface [ 438.812800][T14932] batman_adv: batadv0: Adding interface: dummy0 [ 438.834197][T14932] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.953528][T14932] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 439.007591][T14941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2196'. [ 439.048327][T14941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2196'. [ 439.086597][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 439.167407][T14952] netlink: 'syz.3.2197': attribute type 13 has an invalid length. [ 439.188189][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 439.243635][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'. [ 439.279551][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2199'. [ 439.537934][T11379] batadv0: left promiscuous mode [ 440.041186][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.461187][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 441.720571][T14990] netlink: 'syz.2.2205': attribute type 26 has an invalid length. [ 442.090995][T15019] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2212'. [ 442.679331][T15035] lo speed is unknown, defaulting to 1000 [ 442.909033][T15049] netlink: 684 bytes leftover after parsing attributes in process `syz.3.2218'. [ 443.465478][T15069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.830977][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2222'. [ 443.863392][T15074] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 443.866646][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2221'. [ 443.952433][T15083] erspan1: entered allmulticast mode [ 444.103463][T15086] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2223'. [ 444.139956][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.163622][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.206619][T15078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.239488][T15092] netlink: 'syz.4.2224': attribute type 10 has an invalid length. [ 444.297511][T15092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.318729][T15092] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 444.319179][T15077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.367366][T15077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.788647][T15109] sctp: [Deprecated]: syz.3.2228 (pid 15109) Use of int in max_burst socket option. [ 444.788647][T15109] Use struct sctp_assoc_value instead [ 445.007879][T15109] lo speed is unknown, defaulting to 1000 [ 446.042749][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 446.079471][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 446.138412][T15132] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 446.762611][T15151] syzkaller1: entered promiscuous mode [ 446.779291][T15151] syzkaller1: entered allmulticast mode [ 447.678169][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2244'. [ 448.072060][T15191] syzkaller0: entered promiscuous mode [ 448.090513][T15191] syzkaller0: entered allmulticast mode [ 448.137964][T15192] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 448.250753][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2248'. [ 448.262520][T15191] syz_tun: entered allmulticast mode [ 448.372694][T15192] syz_tun (unregistering): left allmulticast mode [ 448.954407][T15215] lo speed is unknown, defaulting to 1000 [ 449.812364][T15227] block nbd0: must specify backend [ 449.831299][T15220] lo speed is unknown, defaulting to 1000 [ 449.952807][T15229] bond6: (slave ): Releasing active interface [ 450.014829][T15229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.200458][T15230] team0: No ports can be present during mode change [ 450.238871][T15232] team0: left allmulticast mode [ 450.244550][T15232] team_slave_0: left allmulticast mode [ 450.251390][T15232] team_slave_1: left allmulticast mode [ 450.281182][T15232] batadv_slave_1: left promiscuous mode [ 450.428860][T15232] macvlan2: left allmulticast mode [ 450.490690][T15232] geneve3: left promiscuous mode [ 450.581494][T11654] lo speed is unknown, defaulting to 1000 [ 450.591018][ T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.603132][T11654] syz1: Port: 1 Link DOWN [ 450.609110][ T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.629663][T11660] lo speed is unknown, defaulting to 1000 [ 450.636788][ T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.653798][ T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.983549][T15257] netlink: 'syz.0.2264': attribute type 13 has an invalid length. [ 450.993675][T15257] netlink: 'syz.0.2264': attribute type 17 has an invalid length. [ 451.375555][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 451.611607][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 451.628257][T15257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.641857][T15257] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.662446][T15257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.791899][T15257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.810018][T15257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.864029][T15257] veth1_vlan: left promiscuous mode [ 451.871756][T15257] veth0_vlan: left promiscuous mode [ 451.890080][T15257] veth0_vlan: entered promiscuous mode [ 451.906337][T15274] netlink: 480 bytes leftover after parsing attributes in process `syz.2.2270'. [ 451.907216][T15257] veth1_vlan: entered promiscuous mode [ 451.915991][T15274] netlink: 480 bytes leftover after parsing attributes in process `syz.2.2270'. [ 451.951947][T15257] veth1_macvtap: left promiscuous mode [ 451.959812][T15257] veth0_macvtap: left promiscuous mode [ 451.969469][T15257] veth0_macvtap: entered promiscuous mode [ 451.988420][T15257] veth1_macvtap: entered promiscuous mode [ 452.010592][T15257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.029203][T15257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.047887][T15257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.062133][T15257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.084970][T15257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.107856][T15257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.160676][T15257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.170323][T15257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 452.180780][T15257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 452.208940][T15257] dummy0: entered promiscuous mode [ 452.251611][T15257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 452.262496][T15257] 8021q: adding VLAN 0 to HW filter on device bond7 [ 452.272382][T15257] ip6gretap0: entered promiscuous mode [ 452.293787][T15257] 8021q: adding VLAN 0 to HW filter on device bond8 [ 452.309451][T11660] lo speed is unknown, defaulting to 1000 [ 452.336008][ T9801] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.343222][ T9801] bridge0: port 2(bridge_slave_1) entered listening state [ 452.350890][T11660] syz1: Port: 1 Link ACTIVE [ 452.562495][ T58] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.596541][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.652311][T11660] lo speed is unknown, defaulting to 1000 [ 452.682659][ T58] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.695467][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.828054][ T58] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.863432][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.925975][ T58] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.986653][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.296796][T15301] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 453.533768][T15307] netlink: 'syz.1.2276': attribute type 3 has an invalid length. [ 454.026380][T15326] netlink: 'syz.4.2283': attribute type 1 has an invalid length. [ 454.071399][T15326] 8021q: adding VLAN 0 to HW filter on device bond7 [ 454.297563][T15340] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2285'. [ 454.313033][T15344] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2285'. [ 456.463118][T15307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.798528][T15365] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 456.831990][T15365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.922369][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 456.927450][T15370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2290'. [ 457.521852][T15382] netlink: 'syz.1.2298': attribute type 8 has an invalid length. [ 457.644053][T15385] xt_cgroup: invalid path, errno=-2 [ 457.704494][T15385] syzkaller0: entered promiscuous mode [ 457.728819][T15385] syzkaller0: entered allmulticast mode [ 458.029021][T15412] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2304'. [ 458.108758][T15413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2304'. [ 458.805503][T15430] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.009261][T15430] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 459.342665][T15456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.009876][T15484] netlink: zone id is out of range [ 460.032947][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'. [ 460.053752][T15484] netlink: zone id is out of range [ 460.092074][T15484] netlink: zone id is out of range [ 460.101015][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2321'. [ 460.117488][T15484] netlink: get zone limit has 8 unknown bytes [ 460.124913][T15486] netlink: 'syz.2.2321': attribute type 18 has an invalid length. [ 460.804048][T15510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2327'. [ 460.823236][T15511] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:19969 [ 460.866029][T15511] xt_hashlimit: size too large, truncated to 1048576 [ 460.992543][T15514] netlink: 'syz.1.2328': attribute type 11 has an invalid length. [ 461.010336][T15514] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2328'. [ 461.460958][T15525] netlink: 'syz.4.2331': attribute type 11 has an invalid length. [ 461.523022][T15526] netlink: 'syz.4.2331': attribute type 11 has an invalid length. [ 462.348754][T15529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.709693][T15527] tipc: Resetting bearer [ 462.745981][T15527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.786573][T15527] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.812351][T15527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.879923][T15527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.902773][T15527] veth1_macvtap: left promiscuous mode [ 462.914153][T15527] veth0_macvtap: left promiscuous mode [ 462.923528][T15527] veth0_macvtap: entered promiscuous mode [ 462.932639][T15527] veth1_macvtap: entered promiscuous mode [ 462.951574][T15542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.959534][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.982241][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.996466][T15527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.033500][T15548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2336'. [ 463.088342][T15527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.129550][T15527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.140151][T15527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.308419][T15527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 463.320756][T15527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.608953][T15563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2338'. [ 463.759945][ T9797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.775420][ T9797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.788085][ T5741] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.818544][ T9797] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 463.857306][ T5726] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.871756][ T5762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 463.886668][ T9797] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 463.973477][T15568] ip6tnl2: entered allmulticast mode [ 464.082516][T15568] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 464.097633][ T5762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 464.463977][T15584] syzkaller1: entered promiscuous mode [ 464.496028][T15584] syzkaller1: entered allmulticast mode [ 464.677321][ T5762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 464.691621][T11660] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.836491][T15605] netlink: 'syz.0.2352': attribute type 12 has an invalid length. [ 464.859148][T15603] syzkaller0: entered promiscuous mode [ 464.879440][T15603] syzkaller0: entered allmulticast mode [ 465.392717][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 465.889233][T15635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2359'. [ 465.905725][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'. [ 465.979495][T15636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2359'. [ 466.075282][T15637] batman_adv: batadv0: Interface activated: dummy0 [ 466.142010][T15637] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 466.711532][T15655] netlink: zone id is out of range [ 466.721417][T15655] netlink: zone id is out of range [ 466.726672][T15655] netlink: zone id is out of range [ 466.732491][T15655] netlink: zone id is out of range [ 466.738413][T15655] netlink: zone id is out of range [ 466.743856][T15655] netlink: zone id is out of range [ 466.749803][T15655] netlink: zone id is out of range [ 466.790311][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 467.533468][T15676] syzkaller0: entered promiscuous mode [ 467.590593][T15676] syzkaller0: entered allmulticast mode [ 468.106570][T15706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2373'. [ 468.486503][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2378'. [ 468.595373][T15717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2378'. [ 468.817172][T15725] can: request_module (can-proto-0) failed. [ 469.084943][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2382'. [ 469.168424][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2382'. [ 469.373551][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.409263][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.437615][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.448814][T15756] net_ratelimit: 5 callbacks suppressed [ 469.448941][T15756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.489632][ T9793] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.824584][T15769] lo speed is unknown, defaulting to 1000 [ 470.473991][T15782] batadv_slave_1: entered promiscuous mode [ 471.253319][T15781] batadv_slave_1: left promiscuous mode [ 471.630826][T15809] bond11 (unregistering): Released all slaves [ 471.986407][T15829] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 472.024113][T15829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.087297][T11660] lo speed is unknown, defaulting to 1000 [ 472.100816][T11660] syz1: Port: 1 Link DOWN [ 472.322311][T11660] lo speed is unknown, defaulting to 1000 [ 472.595728][T15846] netlink: 'syz.3.2408': attribute type 1 has an invalid length. [ 472.825346][T15849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.873846][T15885] netlink: 'syz.1.2418': attribute type 15 has an invalid length. [ 474.167591][T15893] __nla_validate_parse: 3 callbacks suppressed [ 474.167626][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2420'. [ 474.199377][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2421'. [ 474.214225][T15893] netlink: 'syz.4.2420': attribute type 22 has an invalid length. [ 474.275865][T15893] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2420'. [ 474.422628][T15904] netlink: 'syz.0.2425': attribute type 27 has an invalid length. [ 474.451677][T15906] netlink: 480 bytes leftover after parsing attributes in process `syz.2.2426'. [ 474.462164][T15906] netlink: 480 bytes leftover after parsing attributes in process `syz.2.2426'. [ 474.545583][T15904] vti0: entered promiscuous mode [ 475.012448][T15932] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2433'. [ 475.070665][T11377] nci: nci_rsp_packet: unknown rsp opcode 0x36 [ 475.877908][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 475.877939][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.157144][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 477.765659][T15920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.118674][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2445'. [ 478.147374][T15979] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 478.172650][T15979] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2443'. [ 478.195890][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2443'. [ 478.210446][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2447'. [ 478.417718][T15991] syzkaller0: entered promiscuous mode [ 478.432187][T15991] syzkaller0: entered allmulticast mode [ 479.309231][T16020] netlink: 'syz.4.2451': attribute type 9 has an invalid length. [ 479.342065][T16022] netlink: 'syz.3.2452': attribute type 62 has an invalid length. [ 479.351370][T16020] netlink: 'syz.4.2451': attribute type 6 has an invalid length. [ 479.423089][T16022] __nla_validate_parse: 1 callbacks suppressed [ 479.423133][T16022] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2452'. [ 479.453509][T16025] netlink: 'syz.0.2453': attribute type 4 has an invalid length. [ 479.858453][T16040] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2456'. [ 479.894492][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2456'. [ 479.938157][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'. [ 479.962648][T16040] netlink: 'syz.0.2456': attribute type 11 has an invalid length. [ 480.029314][T16045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2458'. [ 480.315725][T16050] netlink: 'syz.2.2460': attribute type 1 has an invalid length. [ 480.482527][T16050] 8021q: adding VLAN 0 to HW filter on device bond11 [ 480.966258][T16052] vti0: left promiscuous mode [ 480.974747][T16052] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 481.029430][T16058] bond11: (slave veth9): Enslaving as an active interface with a down link [ 481.044336][T11660] lo speed is unknown, defaulting to 1000 [ 481.071498][T11660] syz1: Port: 1 Link ACTIVE [ 481.142561][T16050] vlan5: entered allmulticast mode [ 481.169038][T16050] veth0_to_bond: entered allmulticast mode [ 481.200719][T16050] veth0_to_bond: entered promiscuous mode [ 481.239831][T16050] veth0_to_bond: left promiscuous mode [ 481.291263][T16050] bond11: (slave vlan5): making interface the new active one [ 481.353608][T16050] veth0_to_bond: entered promiscuous mode [ 481.405038][T16050] vlan5: entered promiscuous mode [ 481.417857][T16050] bond11: (slave vlan5): Enslaving as an active interface with an up link [ 481.525637][T11660] lo speed is unknown, defaulting to 1000 [ 481.542628][ T9801] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 481.816823][T16086] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.017821][T16086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.052871][T16086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.406489][T16086] dummy0: left promiscuous mode [ 482.581106][T16086] ip6tnl2: left allmulticast mode [ 482.607474][T11654] lo speed is unknown, defaulting to 1000 [ 482.614089][T16088] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 482.628822][T11654] syz1: Port: 1 Link DOWN [ 482.680495][ T9801] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.730080][ T9801] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.783883][ T9801] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.821439][ T9801] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.860401][ T9801] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.922028][ T9801] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.964478][ T5741] lo speed is unknown, defaulting to 1000 [ 483.009777][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2475'. [ 483.046014][ T9801] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.075682][T16129] netlink: 'syz.2.2476': attribute type 1 has an invalid length. [ 483.093606][T16132] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 483.096909][ T9801] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.106680][T16133] netlink: 'syz.1.2477': attribute type 84 has an invalid length. [ 483.373530][T16139] netlink: 'syz.3.2480': attribute type 4 has an invalid length. [ 483.429638][T16142] netlink: 'syz.3.2480': attribute type 4 has an invalid length. [ 483.548402][T16142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.555696][T16142] IPv6: NLM_F_CREATE should be set when creating new route [ 483.563010][T16142] IPv6: NLM_F_CREATE should be set when creating new route [ 483.570299][T16142] IPv6: NLM_F_CREATE should be set when creating new route [ 483.821868][T16148] nftables ruleset with unbound set [ 483.871931][T16148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2481'. [ 483.920174][T16150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2482'. [ 484.173282][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2484'. [ 484.273412][T16160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2485'. [ 484.351322][T16153] netlink: 'syz.1.2484': attribute type 1 has an invalid length. [ 484.397919][T16153] netlink: 'syz.1.2484': attribute type 2 has an invalid length. [ 484.432857][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2484'. [ 484.459896][T16167] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2486'. [ 484.495086][T16167] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2486'. [ 484.535200][T16167] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2486'. [ 484.563899][T16167] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2486'. [ 484.620607][T16167] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2486'. [ 484.683862][T16167] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2486'. [ 484.866677][T16167] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2486'. [ 484.904039][T16167] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2486'. [ 484.920532][T16167] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2486'. [ 484.950720][T16170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.561813][T16186] ip6tnl2: entered allmulticast mode [ 485.832291][T16186] veth14: entered allmulticast mode [ 486.518279][ T1132] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 486.564947][ T5762] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 486.575280][ T1132] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 486.864772][T16224] netlink: 'syz.3.2504': attribute type 1 has an invalid length. [ 486.890808][T16224] netlink: 'syz.3.2504': attribute type 2 has an invalid length. [ 486.897357][ T5762] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 487.023544][T16219] team1: entered promiscuous mode [ 487.062707][T16219] team1: entered allmulticast mode [ 487.071781][T16219] 8021q: adding VLAN 0 to HW filter on device team1 [ 487.317777][ T5762] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 488.374946][T16249] sch_fq: defrate 4294967293 ignored. [ 488.519668][T16252] bridge0: left allmulticast mode [ 488.593682][T16256] block nbd0: must specify backend [ 488.931551][T16123] Set syz1 is full, maxelem 65536 reached [ 489.469112][T16286] __nla_validate_parse: 64 callbacks suppressed [ 489.469130][T16286] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2522'. [ 489.491046][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2523'. [ 489.633380][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2522'. [ 489.664742][T16282] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 490.096517][T16298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2525'. [ 490.303044][T16307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2527'. [ 490.367464][T16307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2527'. [ 490.457969][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'. [ 490.472970][T16317] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2531'. [ 490.510854][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'. [ 490.677196][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 490.829183][T16326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'. [ 490.930502][T16332] team0: Port device xfrm0 removed [ 490.969745][T16332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 491.157700][ T9797] tipc: Resetting bearer [ 491.201472][T16354] tipc: Enabling of bearer rejected, already enabled [ 491.237886][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 491.306286][T16362] IPVS: set_ctl: invalid protocol: 477 172.20.20.64:20000 [ 491.391452][T16330] mac80211_hwsim hwsim2 +: renamed from syzkaller0 (while UP) [ 491.443344][T16330] tipc: Disabling bearer [ 491.908004][T16373] lo speed is unknown, defaulting to 1000 [ 492.493121][T16401] (: renamed from veth0_to_hsr (while UP) [ 492.517141][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 494.496779][T16415] __nla_validate_parse: 6 callbacks suppressed [ 494.496798][T16415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2554'. [ 494.727694][ T58] vlan5: left promiscuous mode [ 494.876586][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2558'. [ 495.022338][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 495.077211][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 495.181401][T16391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.612576][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 495.640027][T16450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.759218][T16453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.871160][T16453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.921812][T16453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.206801][T16513] netlink: 'syz.3.2581': attribute type 19 has an invalid length. [ 497.350482][T16513] netlink: 'syz.3.2581': attribute type 19 has an invalid length. [ 497.444492][T16520] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2583'. [ 497.551513][T16522] tipc: Resetting bearer [ 497.662283][T16522] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 497.709316][T16529] dvmrp8: entered allmulticast mode [ 497.742458][T16533] pimreg: entered allmulticast mode [ 498.019826][T16544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2590'. [ 498.471180][T16558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2596'. [ 498.659865][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'. [ 498.917133][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 499.295846][T16587] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 499.328945][T16584] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 499.870086][T16602] FAULT_INJECTION: forcing a failure. [ 499.870086][T16602] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 499.928982][T16602] CPU: 0 UID: 0 PID: 16602 Comm: syz.2.2606 Not tainted syzkaller #0 PREEMPT(full) [ 499.929011][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.929031][T16602] Call Trace: [ 499.929116][T16602] [ 499.929189][T16602] dump_stack_lvl+0xe8/0x150 [ 499.929324][T16602] should_fail_ex+0x40c/0x560 [ 499.929444][T16602] _copy_from_user+0x2d/0xb0 [ 499.929497][T16602] core_sys_select+0x509/0xb40 [ 499.929551][T16602] ? get_pid_task+0x20/0x1f0 [ 499.929634][T16602] ? __pfx_core_sys_select+0x10/0x10 [ 499.929685][T16602] ? __pfx_set_user_sigmask+0x10/0x10 [ 499.929718][T16602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 499.929848][T16602] __se_sys_pselect6+0x267/0x320 [ 499.929882][T16602] ? __pfx___se_sys_pselect6+0x10/0x10 [ 499.929909][T16602] ? __pfx_ksys_write+0x10/0x10 [ 499.929937][T16602] ? __x64_sys_pselect6+0x21/0xf0 [ 499.929964][T16602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.930003][T16602] do_syscall_64+0x174/0x580 [ 499.930045][T16602] ? trace_irq_disable+0x3b/0x140 [ 499.930077][T16602] ? clear_bhb_loop+0x40/0x90 [ 499.930101][T16602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.930127][T16602] RIP: 0033:0x7f68cad9ce59 [ 499.930150][T16602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.930197][T16602] RSP: 002b:00007f68cbb70028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 499.930254][T16602] RAX: ffffffffffffffda RBX: 00007f68cb015fa0 RCX: 00007f68cad9ce59 [ 499.930268][T16602] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 499.930280][T16602] RBP: 00007f68cbb70090 R08: 0000200000000280 R09: 0000000000000000 [ 499.930292][T16602] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 499.930304][T16602] R13: 00007f68cb016038 R14: 00007f68cb015fa0 R15: 00007fff4a26ca08 [ 499.930335][T16602] [ 499.977675][T16606] netlink: 'syz.4.2607': attribute type 1 has an invalid length. [ 500.221240][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'. [ 500.235648][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'. [ 500.240460][T16608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.258204][T16606] bond8: entered promiscuous mode [ 500.291928][T16606] 8021q: adding VLAN 0 to HW filter on device bond8 [ 501.398397][T16659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2618'. [ 501.408862][T16659] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 504.260816][T16675] tipc: Resetting bearer [ 504.764080][T16675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2621'. [ 504.920392][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2625'. [ 504.960707][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 505.024839][T16708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2625'. [ 505.066098][T16646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.143265][T16646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.159278][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2626'. [ 505.506438][T16646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.516822][T16646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.605992][T16726] can: request_module (can-proto-4) failed. [ 505.885757][T16646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.935560][T16646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.134837][T16753] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2635'. [ 506.144174][T16753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2635'. [ 506.340456][ T1132] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.355977][T16759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2639'. [ 506.361238][ T1132] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.398052][T16759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2639'. [ 506.417495][T16758] FAULT_INJECTION: forcing a failure. [ 506.417495][T16758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.435028][ T1132] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.438988][T16758] CPU: 0 UID: 0 PID: 16758 Comm: syz.3.2637 Not tainted syzkaller #0 PREEMPT(full) [ 506.439017][T16758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 506.439028][T16758] Call Trace: [ 506.439035][T16758] [ 506.439042][T16758] dump_stack_lvl+0xe8/0x150 [ 506.439070][T16758] should_fail_ex+0x40c/0x560 [ 506.439099][T16758] _copy_to_user+0x31/0xb0 [ 506.439122][T16758] put_timespec64+0xc8/0x130 [ 506.439182][T16758] ? __pfx_put_timespec64+0x10/0x10 [ 506.439212][T16758] poll_select_finish+0x462/0x5d0 [ 506.439244][T16758] ? __pfx_poll_select_finish+0x10/0x10 [ 506.439276][T16758] ? __pfx_set_user_sigmask+0x10/0x10 [ 506.439302][T16758] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 506.439340][T16758] __se_sys_pselect6+0x27e/0x320 [ 506.439371][T16758] ? __pfx___se_sys_pselect6+0x10/0x10 [ 506.439396][T16758] ? __pfx_ksys_write+0x10/0x10 [ 506.439423][T16758] ? __x64_sys_pselect6+0x21/0xf0 [ 506.439449][T16758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.439468][T16758] do_syscall_64+0x174/0x580 [ 506.439484][T16758] ? trace_irq_disable+0x3b/0x140 [ 506.439502][T16758] ? clear_bhb_loop+0x40/0x90 [ 506.439523][T16758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.439541][T16758] RIP: 0033:0x7facc8f9ce59 [ 506.439560][T16758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.439575][T16758] RSP: 002b:00007facc9dc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 506.439594][T16758] RAX: ffffffffffffffda RBX: 00007facc9215fa0 RCX: 00007facc8f9ce59 [ 506.439608][T16758] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 506.439620][T16758] RBP: 00007facc9dc0090 R08: 0000200000000280 R09: 0000000000000000 [ 506.439632][T16758] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 506.439643][T16758] R13: 00007facc9216038 R14: 00007facc9215fa0 R15: 00007ffd11d34268 [ 506.439673][T16758] [ 506.650344][ T1132] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.861728][ T9793] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.874057][T16772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2641'. [ 506.901583][ T9793] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.012759][ T1125] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.035504][ T1125] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.120050][T16777] pim6reg: entered allmulticast mode [ 507.217563][T16777] pim6reg: left allmulticast mode [ 507.533769][T16793] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 507.541560][T16793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2646'. [ 507.550566][T16793] block nbd0: must specify backend [ 508.708804][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2654'. [ 508.753340][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2654'. [ 508.780128][T16818] FAULT_INJECTION: forcing a failure. [ 508.780128][T16818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.818349][T16818] CPU: 0 UID: 0 PID: 16818 Comm: syz.4.2653 Not tainted syzkaller #0 PREEMPT(full) [ 508.818378][T16818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 508.818389][T16818] Call Trace: [ 508.818396][T16818] [ 508.818405][T16818] dump_stack_lvl+0xe8/0x150 [ 508.818434][T16818] should_fail_ex+0x40c/0x560 [ 508.818465][T16818] _copy_to_user+0x31/0xb0 [ 508.818487][T16818] simple_read_from_buffer+0xe1/0x170 [ 508.818510][T16818] proc_fail_nth_read+0x1bb/0x230 [ 508.818580][T16818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.818603][T16818] ? rw_verify_area+0x24a/0x4c0 [ 508.818626][T16818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.818645][T16818] vfs_read+0x213/0xa80 [ 508.818673][T16818] ? __pfx___mutex_lock+0x10/0x10 [ 508.818693][T16818] ? __pfx_vfs_read+0x10/0x10 [ 508.818714][T16818] ? __fget_files+0x2a/0x420 [ 508.818734][T16818] ? __fget_files+0x3a2/0x420 [ 508.818750][T16818] ? __fget_files+0x2a/0x420 [ 508.818776][T16818] ksys_read+0x150/0x270 [ 508.818801][T16818] ? __pfx_ksys_read+0x10/0x10 [ 508.818832][T16818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.818853][T16818] do_syscall_64+0x174/0x580 [ 508.818870][T16818] ? trace_irq_disable+0x3b/0x140 [ 508.818889][T16818] ? clear_bhb_loop+0x40/0x90 [ 508.818913][T16818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.818931][T16818] RIP: 0033:0x7f8a2cf5d68e [ 508.818950][T16818] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 508.818966][T16818] RSP: 002b:00007f8a2b1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.818986][T16818] RAX: ffffffffffffffda RBX: 00007f8a2b1f66c0 RCX: 00007f8a2cf5d68e [ 508.819006][T16818] RDX: 000000000000000f RSI: 00007f8a2b1f60a0 RDI: 0000000000000005 [ 508.819017][T16818] RBP: 00007f8a2b1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 508.819028][T16818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.819039][T16818] R13: 00007f8a2d216038 R14: 00007f8a2d215fa0 R15: 00007ffcd5a4a128 [ 508.819071][T16818] [ 508.963175][T16820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2655'. [ 509.155802][T16828] pim6reg1: entered promiscuous mode [ 509.175763][T16828] pim6reg1: entered allmulticast mode [ 509.195726][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2655'. [ 509.364343][T16820] xt_l2tp: v2 tid > 0xffff: 37482740 [ 509.488528][T16858] syzkaller0: entered promiscuous mode [ 509.494051][T16858] syzkaller0: entered allmulticast mode [ 512.519263][T16874] __nla_validate_parse: 3 callbacks suppressed [ 512.519283][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'. [ 512.600511][T16875] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 513.139666][T16904] netlink: 'syz.1.2669': attribute type 10 has an invalid length. [ 513.172391][T16904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2669'. [ 513.237154][T16904] dummy0: entered promiscuous mode [ 513.973310][T16931] syzkaller0: entered promiscuous mode [ 513.978843][T16931] syzkaller0: entered allmulticast mode [ 514.949880][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 515.071952][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2692'. [ 515.472363][T17007] netlink: 'syz.4.2696': attribute type 5 has an invalid length. [ 515.488320][T17007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2696'. [ 515.669046][T17013] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2697'. [ 515.697624][T17013] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2697'. [ 515.714743][T17013] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 515.756676][T17013] lo speed is unknown, defaulting to 1000 [ 515.769855][T17021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.789838][T17019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.127932][T17038] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20001 [ 516.178344][T17038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2699'. [ 516.487048][T17043] tipc: Enabling of bearer rejected, failed to enable media [ 516.698697][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 516.733667][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 516.790219][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'. [ 516.801276][T17050] tipc: Enabling of bearer rejected, failed to enable media [ 518.241955][T17092] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2716'. [ 518.375002][T17098] sctp: [Deprecated]: syz.0.2718 (pid 17098) Use of int in max_burst socket option deprecated. [ 518.375002][T17098] Use struct sctp_assoc_value instead [ 519.672049][T17129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2729'. [ 519.823606][T17137] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2725'. [ 520.421921][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'. [ 520.618115][T17158] netlink: 'syz.1.2733': attribute type 16 has an invalid length. [ 520.631273][T17144] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.641059][T17144] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.822800][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 520.897441][T17170] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2737'. [ 521.046856][T17173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'. [ 521.131827][T17144] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.141626][T17144] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.483337][T17144] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.493133][T17144] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.711814][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 521.729381][T17198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.756644][T17197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2745'. [ 521.951803][T17144] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.989604][T17144] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.127377][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2750'. [ 522.230082][ T1051] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.241178][ T1051] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.269854][ T1051] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.290069][ T1051] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.328575][ T9801] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.351128][ T9801] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.378220][ T9801] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.386441][ T9801] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.543558][T17224] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 [ 522.732391][T17230] netlink: 'syz.3.2757': attribute type 58 has an invalid length. [ 523.007788][T17247] netlink: 'syz.2.2762': attribute type 10 has an invalid length. [ 523.088236][T17244] tipc: Resetting bearer [ 523.201534][T17260] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 523.416417][T17244] geneve4: left promiscuous mode [ 523.421450][T17244] geneve4: left allmulticast mode [ 523.435974][T17244] ip6tnl2: left allmulticast mode [ 523.442328][T17244] veth14: left allmulticast mode [ 523.447575][T17244] team1: left promiscuous mode [ 523.495477][T17244] team1: left allmulticast mode [ 523.516683][T17244] bond8: left promiscuous mode [ 523.526672][T17247] bridge0: port 1(vlan4) entered disabled state [ 523.590682][T11377] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.616169][T11377] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.644478][T11377] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.673549][T11377] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.684759][T11377] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.693685][T11377] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.736694][T11377] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.746599][T11377] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.466992][T17309] __nla_validate_parse: 5 callbacks suppressed [ 524.467011][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'. [ 524.530385][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 524.551854][T17309] sctp: [Deprecated]: syz.0.2779 (pid 17309) Use of int in max_burst socket option. [ 524.551854][T17309] Use struct sctp_assoc_value instead [ 524.590290][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2779'. [ 525.131802][T17326] bridge0: entered promiscuous mode [ 525.138643][T17326] bridge0: left promiscuous mode [ 525.192221][T17327] tipc: Enabled bearer , priority 0 [ 525.210647][T17327] +: renamed from syzkaller0 [ 525.256625][T17327] tipc: Disabling bearer [ 525.523365][T17343] openvswitch: netlink: Actions may not be safe on all matching packets [ 525.533421][T17334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2787'. [ 525.626767][T17338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2786'. [ 525.659980][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2789'. [ 526.263441][T17366] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 526.399159][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2795'. [ 526.885874][T17409] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2798'. [ 529.438159][T17373] batman_adv: batadv0: Interface deactivated: dummy0 [ 529.445050][T17373] batman_adv: batadv0: Removing interface: dummy0 [ 529.454345][T17373] bond10: (slave batadv0): Releasing backup interface [ 529.996754][T17424] lo speed is unknown, defaulting to 1000 [ 530.336244][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2810'. [ 530.778964][T17453] netlink: 'syz.0.2811': attribute type 1 has an invalid length. [ 531.376686][T17453] bond9: entered promiscuous mode [ 531.382398][T17453] 8021q: adding VLAN 0 to HW filter on device bond9 [ 531.667954][T17478] netlink: 'syz.1.2816': attribute type 4 has an invalid length. [ 531.703191][T17478] netlink: 'syz.1.2816': attribute type 4 has an invalid length. [ 531.909605][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'. [ 531.943893][T17484] netlink: 'syz.2.2818': attribute type 8 has an invalid length. [ 532.064285][T17484] geneve5: entered promiscuous mode [ 532.082176][T17484] geneve5: entered allmulticast mode [ 532.116014][T17482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2817'. [ 532.284543][T17489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2817'. [ 532.303422][T17494] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2819'. [ 532.462933][T17494] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 532.510443][T17494] syzkaller1: linktype set to 823 [ 532.754266][T17508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2825'. [ 532.763411][T17508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2825'. [ 532.784728][T17505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2824'. [ 532.868021][T17513] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2826'. [ 533.185424][T17529] sctp: [Deprecated]: syz.2.2830 (pid 17529) Use of int in maxseg socket option. [ 533.185424][T17529] Use struct sctp_assoc_value instead [ 533.239962][T17531] netlink: 'syz.1.2831': attribute type 1 has an invalid length. [ 533.318854][T17531] bond11: entered promiscuous mode [ 533.324520][T17531] 8021q: adding VLAN 0 to HW filter on device bond11 [ 533.446971][T17541] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 533.456264][T17535] netlink: 'syz.2.2832': attribute type 1 has an invalid length. [ 533.532027][T17543] netlink: 'syz.2.2832': attribute type 1 has an invalid length. [ 533.563101][T17549] sctp: [Deprecated]: syz.4.2836 (pid 17549) Use of int in max_burst socket option. [ 533.563101][T17549] Use struct sctp_assoc_value instead [ 533.656536][T17556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2838'. [ 533.714351][T17556] bond12: option tlb_dynamic_lb: invalid value (128) [ 533.737648][T17556] bond12 (unregistering): Released all slaves [ 533.760805][T17555] netlink: 'syz.4.2837': attribute type 9 has an invalid length. [ 534.701626][T17589] macvlan0: entered promiscuous mode [ 535.209902][T17601] netlink: 'syz.3.2854': attribute type 10 has an invalid length. [ 535.245627][T17601] dummy0: entered promiscuous mode [ 535.367510][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 535.438357][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 535.451168][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 535.460790][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 535.481639][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.678137][T17618] __nla_validate_parse: 5 callbacks suppressed [ 535.678154][T17618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2858'. [ 535.709938][T17615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2857'. [ 535.809868][T17624] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2857'. [ 535.962845][T17629] netlink: 'syz.1.2861': attribute type 2 has an invalid length. [ 535.969874][T17634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2861'. [ 535.991525][T17629] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 536.016151][T17631] "syz.4.2862" (17631) uses obsolete ecb(arc4) skcipher [ 536.271867][ T79] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 536.296056][T17648] lo speed is unknown, defaulting to 1000 [ 536.318523][T17641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.342818][T17649] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 536.463972][T17662] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2867'. [ 536.622984][T17667] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2868'. [ 537.055232][T17681] netlink: 'syz.0.2871': attribute type 2 has an invalid length. [ 537.066672][T17662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2867'. [ 537.145859][T17603] lo speed is unknown, defaulting to 1000 [ 537.527730][ T5632] Bluetooth: hci5: command tx timeout [ 537.641410][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 537.676794][T17692] ip6gre3: entered promiscuous mode [ 537.686386][T17692] ip6gre3: entered allmulticast mode [ 538.017321][ T1125] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.047807][ T5762] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.069553][ T1125] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.258024][T17706] netlink: 'syz.3.2879': attribute type 4 has an invalid length. [ 538.339311][T17706] xt_hashlimit: size too large, truncated to 1048576 [ 538.562900][ T5762] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.706511][T17733] lo speed is unknown, defaulting to 1000 [ 538.711258][T17737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2882'. [ 539.018666][ T5762] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 539.614653][ T5632] Bluetooth: hci5: command tx timeout [ 539.695295][T17779] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2889'. [ 539.725675][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.807210][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.828869][T17603] bridge_slave_0: entered allmulticast mode [ 539.850279][T17603] bridge_slave_0: entered promiscuous mode [ 539.864771][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.873146][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.880817][T17603] bridge_slave_1: entered allmulticast mode [ 539.929224][T17603] bridge_slave_1: entered promiscuous mode [ 540.103025][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.131338][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.334439][T17603] team0: Port device team_slave_0 added [ 540.382693][T17603] team0: Port device team_slave_1 added [ 540.568407][T17794] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 540.610842][T17795] netlink: 'syz.3.2894': attribute type 1 has an invalid length. [ 540.631317][T17603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.657210][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.790512][T17603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.804083][T17603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.811063][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.837306][T17603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.161159][T17603] hsr_slave_0: entered promiscuous mode [ 541.176033][T17603] hsr_slave_1: entered promiscuous mode [ 541.194613][T17603] debugfs: 'hsr0' already exists in 'hsr' [ 541.214424][T17603] Cannot create hsr debugfs directory [ 541.636990][ T5632] Bluetooth: hci5: command tx timeout [ 541.787400][T17823] netlink: 'syz.1.2903': attribute type 4 has an invalid length. [ 541.796179][T17823] __nla_validate_parse: 10 callbacks suppressed [ 541.796196][T17823] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2903'. [ 541.884906][T17824] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 541.908086][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 542.073904][T17603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.163761][T17829] IPv6: addrconf: prefix option has invalid lifetime [ 542.170847][T17829] IPv6: addrconf: prefix option has invalid lifetime [ 542.942406][T17729] Set syz1 is full, maxelem 65536 reached [ 543.717351][ T5632] Bluetooth: hci5: command tx timeout [ 544.819420][T11379] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.833346][T11379] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.018581][T17603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.054538][T11379] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.071982][T11379] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.091838][T17859] tipc: Resetting bearer [ 545.156999][T11379] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.172442][T11379] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.248372][ T9802] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.284832][ T9802] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.439526][T17603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.521097][T17874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2913'. [ 545.530735][T17874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2913'. [ 545.544691][T17874] tc action pedit 'at' offset 9 out of bounds [ 545.577141][T17603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.734672][T17881] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 546.621606][T17603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 546.669908][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.688043][T17904] netlink: 'syz.4.2921': attribute type 10 has an invalid length. [ 546.697603][T17603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 546.732772][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.774652][T17603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 546.797683][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.811086][T17904] bond0: (slave netdevsim1): Releasing backup interface [ 546.829237][T17904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.838925][T17904] team0: Port device netdevsim1 added [ 546.867619][T17603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 546.917094][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.152402][T17603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.270133][T17603] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.286377][T11379] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.293590][T11379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.310329][T17922] syzkaller1: entered promiscuous mode [ 547.315943][T17922] syzkaller1: entered allmulticast mode [ 547.329351][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.336534][T11379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.055018][T17938] lo speed is unknown, defaulting to 1000 [ 548.800395][T17953] lo speed is unknown, defaulting to 1000 [ 548.883959][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2932'. [ 548.908028][T17958] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2932'. [ 548.939343][T17603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.236281][T17961] tipc: Resetting bearer [ 549.249675][T17961] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 549.359731][T17603] veth0_vlan: entered promiscuous mode [ 549.391868][T17603] veth1_vlan: entered promiscuous mode [ 549.443761][T17603] veth0_macvtap: entered promiscuous mode [ 549.472803][T17603] veth1_macvtap: entered promiscuous mode [ 549.511185][T17603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.541924][T17603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.557934][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 549.678359][ T9797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.688944][T11379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.782631][T11379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.939670][ T9802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.367947][T11377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.383166][T11377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.409570][T17979] 8021q: VLANs not supported on sit0 [ 550.423935][T17979] dummy0: left promiscuous mode [ 550.432688][T17979] ipip0: left promiscuous mode [ 550.445696][T17979] veth5: left allmulticast mode [ 550.530571][T17979] bond2: left promiscuous mode [ 550.552464][T17979] geneve3: left promiscuous mode [ 550.581822][T17979] macsec2: left promiscuous mode [ 550.645826][ T9797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.667185][ T9797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.451396][T18004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2943'. [ 551.498526][T18004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2943'. [ 551.556395][T18004] tc action pedit 'at' offset 9 out of bounds [ 551.575245][T18004] netlink: 'syz.4.2943': attribute type 1 has an invalid length. [ 551.642422][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.660449][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 551.687036][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 551.700444][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 551.737421][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.781188][T18004] bond9: entered promiscuous mode [ 551.796173][T18004] 8021q: adding VLAN 0 to HW filter on device bond9 [ 551.951758][T18017] 8021q: adding VLAN 0 to HW filter on device bond9 [ 551.964976][T18017] bond9: (slave xfrm2): The slave device specified does not support setting the MAC address [ 551.975623][T18017] bond9: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 551.989531][T18017] bond9: (slave xfrm2): making interface the new active one [ 551.996887][T18017] xfrm2: entered promiscuous mode [ 552.003579][T18017] bond9: (slave xfrm2): Enslaving as an active interface with an up link [ 552.571275][ T9797] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.609260][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 552.620493][ T9797] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.766780][ T9797] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.845652][ T9797] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.031561][T18055] netlink: 'syz.4.2952': attribute type 32 has an invalid length. [ 553.138964][T18007] lo speed is unknown, defaulting to 1000 [ 553.181478][ T9797] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.211075][ T9797] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.385304][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2955'. [ 553.661484][ T9797] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.701583][ T9797] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.857361][ T5632] Bluetooth: hci1: command tx timeout [ 553.940549][T18079] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 553.975329][T18079] bond1 (unregistering): Released all slaves [ 554.692074][T18094] bond10 (unregistering): Released all slaves [ 554.841206][T18098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 555.928194][ T5632] Bluetooth: hci1: command tx timeout [ 556.502990][T18165] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2972'. [ 556.876087][ T9797] bond0 (unregistering): Released all slaves [ 556.889849][ T9797] bond1 (unregistering): Released all slaves [ 556.910115][ T9797] bond2 (unregistering): (slave veth3): Releasing active interface [ 556.921474][ T9797] bond2 (unregistering): Released all slaves [ 556.939916][ T9797] bond3 (unregistering): Released all slaves [ 556.996442][ T9797] bond4 (unregistering): Released all slaves [ 557.018703][ T9797] bond5 (unregistering): Released all slaves [ 557.040389][ T9797] bond6 (unregistering): Released all slaves [ 557.060575][ T9797] bond7 (unregistering): Released all slaves [ 557.115980][ T9797] bond8 (unregistering): (slave veth7): Releasing active interface [ 557.144023][ T9797] bond8 (unregistering): Released all slaves [ 557.163936][ T9797] bond9 (unregistering): (slave veth9): Releasing active interface [ 557.171897][ T9797] batadv0: entered promiscuous mode [ 557.182565][ T9797] bond9 (unregistering): (slave batadv0): Releasing active interface [ 557.267460][ T9797] bond9 (unregistering): Released all slaves [ 557.286075][ T9797] bond10 (unregistering): Released all slaves [ 557.299474][ T9797] bond11 (unregistering): Released all slaves [ 557.398125][T18129] bridge0: entered promiscuous mode [ 557.403594][T18129] bridge0: entered allmulticast mode [ 557.413623][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 557.444663][T18165] geneve2: entered promiscuous mode [ 557.784061][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'. [ 557.805062][T18196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2976'. [ 557.835703][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'. [ 557.869506][T18196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2976'. [ 557.911068][T18208] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 558.007405][ T5632] Bluetooth: hci1: command tx timeout [ 558.040515][T18208] netlink: 'syz.4.2980': attribute type 2 has an invalid length. [ 558.147965][T18007] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.155604][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.162857][T18007] bridge_slave_0: entered allmulticast mode [ 558.170694][T18007] bridge_slave_0: entered promiscuous mode [ 558.262678][T18007] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.271665][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.279375][T18007] bridge_slave_1: entered allmulticast mode [ 558.287641][T18007] bridge_slave_1: entered promiscuous mode [ 558.372422][T18007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.436149][T18007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.645089][T18007] team0: Port device team_slave_0 added [ 558.668914][T18007] team0: Port device team_slave_1 added [ 558.779307][ T9797] tipc: Disabling bearer [ 558.859021][ T9797] tipc: Left network mode [ 559.128469][T18007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.142164][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.197725][T18007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.250543][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 559.298611][T18241] vti1: entered promiscuous mode [ 559.322230][T18241] vti1: entered allmulticast mode [ 559.327685][T18242] netlink: 'syz.0.2986': attribute type 3 has an invalid length. [ 559.335694][T18242] netlink: 'syz.0.2986': attribute type 3 has an invalid length. [ 559.351547][T18241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2986'. [ 559.364410][T18241] unsupported nlmsg_type 40 [ 559.387276][T18007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.417199][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.560487][T18007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.657734][T18249] tipc: Resetting bearer [ 559.663096][ T9797] IPVS: stopping backup sync thread 13302 ... [ 559.664374][T18249] tipc: Resetting bearer [ 559.769911][T18007] hsr_slave_0: entered promiscuous mode [ 559.776652][T18007] hsr_slave_1: entered promiscuous mode [ 559.804462][T18007] debugfs: 'hsr0' already exists in 'hsr' [ 559.810247][T18007] Cannot create hsr debugfs directory [ 559.972817][T18255] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2991'. [ 560.067141][ T5632] Bluetooth: hci1: command tx timeout [ 560.082835][T18263] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2994'. [ 560.142611][T18267] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2994'. [ 560.228295][T18263] sctp: [Deprecated]: syz.4.2994 (pid 18263) Use of int in max_burst socket option deprecated. [ 560.228295][T18263] Use struct sctp_assoc_value instead [ 560.255359][T18267] bridge0: left promiscuous mode [ 560.261444][T18267] bridge0: left allmulticast mode [ 560.267357][T18267] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2994'. [ 561.118871][ T9797] hsr_slave_0: left promiscuous mode [ 561.167648][ T9797] hsr_slave_1: left promiscuous mode [ 561.220475][ T9797] veth1_vlan: left promiscuous mode [ 561.226812][ T9797] veth0_vlan: left promiscuous mode [ 561.627503][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 562.419115][ T9797] IPVS: stop unused estimator thread 0... [ 562.861192][T18255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.920728][T18007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.950006][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 563.008004][T18007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 563.042296][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 563.098120][T18007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 563.205397][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 563.228892][T18007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 563.468026][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.537681][T18355] __nla_validate_parse: 1 callbacks suppressed [ 563.537699][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'. [ 563.730702][T18370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3003'. [ 563.941297][T18007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.994352][T18376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3005'. [ 564.003633][T18376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3005'. [ 564.013129][T18007] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.058029][ T9802] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.065254][ T9802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.144738][ T9802] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.151952][ T9802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.249807][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3007'. [ 564.288248][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 564.328986][T18378] ip6erspan0: entered allmulticast mode [ 564.338064][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3007'. [ 564.558819][T18384] bond10: entered promiscuous mode [ 564.563988][T18384] bond10: entered allmulticast mode [ 565.114196][T18429] netlink: 'syz.3.3015': attribute type 8 has an invalid length. [ 565.185953][T18436] netlink: 'syz.2.3009': attribute type 11 has an invalid length. [ 565.207193][T18436] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3009'. [ 565.219981][T18425] netlink: 'syz.2.3009': attribute type 10 has an invalid length. [ 565.788894][T18425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.880723][T18425] team0: Port device netdevsim1 added [ 566.230055][T18007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.440496][T18007] veth0_vlan: entered promiscuous mode [ 566.476654][T18007] veth1_vlan: entered promiscuous mode [ 566.601476][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3023'. [ 566.768392][T18484] ip6tnl4: entered allmulticast mode [ 566.792309][T18007] veth0_macvtap: entered promiscuous mode [ 566.838950][T18007] veth1_macvtap: entered promiscuous mode [ 566.857850][T18007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.869128][T18007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.884435][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3025'. [ 566.952846][ T9793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.961736][ T9793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.999831][ T9793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.065030][ T9793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.090180][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.111837][T18494] netlink: 'syz.3.3026': attribute type 2 has an invalid length. [ 567.123990][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.212163][ T9797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.220102][ T9797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.303783][T18501] syzkaller1: entered promiscuous mode [ 567.311609][T18501] syzkaller1: entered allmulticast mode [ 567.588337][T18510] ipt_ECN: cannot use operation on non-tcp rule [ 567.646117][T18512] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 567.679506][T18512] bond1: entered promiscuous mode [ 567.684943][T18512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 567.922726][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3033'. [ 567.987260][ T50] block nbd1: Receive control failed (result -32) [ 567.987726][ T5632] block nbd1: Receive control failed (result -32) [ 568.001748][T17605] block nbd1: Receive control failed (result -32) [ 568.952621][T17605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 568.973605][T17605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 568.984516][T17605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 568.994631][T17605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 569.007304][T17605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 569.492584][T18559] __nla_validate_parse: 1 callbacks suppressed [ 569.492632][T18559] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3039'. [ 570.266509][T18568] netlink: 'syz.4.3042': attribute type 1 has an invalid length. [ 570.274291][T18568] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3042'. [ 570.466298][T18563] lo speed is unknown, defaulting to 1000 [ 570.541722][T18572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3043'. [ 571.032909][T18591] bridge0: port 1(batadv1) entered blocking state [ 571.067187][T18591] bridge0: port 1(batadv1) entered disabled state [ 571.084161][T18591] batadv1: entered allmulticast mode [ 571.095824][T18591] batadv1: entered promiscuous mode [ 571.127413][T17605] Bluetooth: hci3: command tx timeout [ 571.156839][T18550] lo speed is unknown, defaulting to 1000 [ 571.483107][T18603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3049'. [ 571.492112][T18603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3049'. [ 571.535576][ T14] batman_adv: batadv1: IGMP Querier appeared [ 571.543450][ T14] batman_adv: batadv1: MLD Querier appeared [ 571.562009][T18608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3049'. [ 571.733620][T18612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3053'. [ 571.916230][T18614] IPVS: set_ctl: invalid protocol: 124 172.20.20.170:20002 [ 572.276318][T18623] netlink: 'syz.0.3055': attribute type 1 has an invalid length. [ 572.485783][T18625] lo speed is unknown, defaulting to 1000 [ 573.145589][T18550] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.156500][T18550] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.164717][T18550] bridge_slave_0: entered allmulticast mode [ 573.167249][T17605] Bluetooth: hci3: command tx timeout [ 573.172382][T18550] bridge_slave_0: entered promiscuous mode [ 573.187581][T18550] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.203590][T18647] netlink: 'syz.1.3059': attribute type 8 has an invalid length. [ 573.211351][T18647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 573.220352][T18550] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.227658][T18550] bridge_slave_1: entered allmulticast mode [ 573.235360][T18550] bridge_slave_1: entered promiscuous mode [ 573.259899][T18647] bond0: entered promiscuous mode [ 573.307051][T18647] bond_slave_0: entered promiscuous mode [ 573.313901][T18647] bond_slave_1: entered promiscuous mode [ 573.325955][T18647] gretap0: entered promiscuous mode [ 573.340854][T18647] dummy0: entered promiscuous mode [ 573.350549][T18647] hsr1: entered promiscuous mode [ 573.401637][T18653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3061'. [ 573.448368][T18550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.460283][T18550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.513121][T18550] team0: Port device team_slave_0 added [ 573.522156][T18550] team0: Port device team_slave_1 added [ 573.589818][T18550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.622122][T18550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.648041][T18550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.661245][T18550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.668211][T18550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.694094][T18550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.736742][T17605] block nbd2: Receive control failed (result -1) [ 573.752377][T17605] [ 573.754746][T17605] ====================================================== [ 573.761786][T17605] WARNING: possible circular locking dependency detected [ 573.768880][T17605] syzkaller #0 Not tainted [ 573.773330][T17605] ------------------------------------------------------ [ 573.778098][T18550] hsr_slave_0: entered promiscuous mode [ 573.780360][T17605] kworker/u9:1/17605 is trying to acquire lock: [ 573.786685][T18550] hsr_slave_1: entered promiscuous mode [ 573.792108][T17605] ffff888055df1d60 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 573.798264][T18550] debugfs: 'hsr0' already exists in 'hsr' [ 573.807212][T17605] [ 573.807212][T17605] but task is already holding lock: [ 573.807221][T17605] ffff888078195668 [ 573.812917][T18550] Cannot create hsr debugfs directory SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 573.820254][T17605] (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 573.820384][T17605] [ 573.820384][T17605] which lock already depends on the new lock. [ 573.820384][T17605] [ 573.820392][T17605] [ 573.820392][T17605] the existing dependency chain (in reverse order) is: [ 573.820400][T17605] [ 573.820400][T17605] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 573.820496][T17605] __mutex_lock+0x19d/0x1550 [ 573.820517][T17605] nbd_queue_rq+0x373/0x1150 [ 573.820536][T17605] blk_mq_dispatch_rq_list+0x499/0x1990 [ 573.820632][T17605] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 573.820685][T17605] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 573.820703][T17605] blk_mq_run_work_fn+0x16c/0x300 [ 573.820725][T17605] process_scheduled_works+0xa8e/0x14e0 [ 573.820750][T17605] worker_thread+0xa47/0xfb0 [ 573.820774][T17605] kthread+0x388/0x470 [ 573.820791][T17605] ret_from_fork+0x514/0xb70 [ 573.820826][T17605] ret_from_fork_asm+0x1a/0x30 [ 573.820847][T17605] [ 573.820847][T17605] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 573.820875][T17605] __mutex_lock+0x19d/0x1550 [ 573.820890][T17605] nbd_queue_rq+0xc1/0x1150 [ 573.820908][T17605] blk_mq_dispatch_rq_list+0x499/0x1990 [ 573.820933][T17605] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 573.820952][T17605] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 573.820970][T17605] blk_mq_run_work_fn+0x16c/0x300 [ 573.820991][T17605] process_scheduled_works+0xa8e/0x14e0 [ 573.821014][T17605] worker_thread+0xa47/0xfb0 [ 573.821038][T17605] kthread+0x388/0x470 [ 573.821055][T17605] ret_from_fork+0x514/0xb70 [ 573.821073][T17605] ret_from_fork_asm+0x1a/0x30 [ 573.821093][T17605] [ 573.821093][T17605] -> #4 (set->srcu){.+.+}-{0:0}: [ 573.821120][T17605] __synchronize_srcu+0xc9/0x2f0 [ 573.821144][T17605] elevator_switch+0x1e8/0x7b0 [ 573.821216][T17605] elevator_change+0x2fa/0x480 [ 573.821241][T17605] elevator_set_default+0x375/0x440 [ 573.821266][T17605] blk_register_queue+0x3f3/0x4e0 [ 573.821311][T17605] __add_disk+0x6cb/0xe30 [ 573.821341][T17605] add_disk_fwnode+0xfb/0x4b0 [ 573.821361][T17605] nbd_dev_add+0x733/0xb60 [ 573.821379][T17605] nbd_init+0x15f/0x1e0 [ 573.821490][T17605] do_one_initcall+0x250/0x870 [ 573.821509][T17605] do_initcall_level+0x10a/0x1a0 [ 573.821594][T17605] do_initcalls+0x59/0xa0 [ 573.821613][T17605] kernel_init_freeable+0x29d/0x3e0 [ 573.821635][T17605] kernel_init+0x1d/0x1d0 [ 573.821654][T17605] ret_from_fork+0x514/0xb70 [ 573.821672][T17605] ret_from_fork_asm+0x1a/0x30 [ 573.821693][T17605] [ 573.821693][T17605] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 573.821720][T17605] __mutex_lock+0x19d/0x1550 [ 573.821735][T17605] elevator_change+0x1af/0x480 [ 573.821760][T17605] elevator_set_none+0xb5/0x140 [ 573.821785][T17605] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 573.821805][T17605] nbd_start_device+0x189/0xb30 [ 573.821823][T17605] nbd_genl_connect+0x1597/0x1c10 [ 573.821841][T17605] genl_family_rcv_msg_doit+0x233/0x340 [ 573.821935][T17605] genl_rcv_msg+0x614/0x7a0 [ 573.821958][T17605] netlink_rcv_skb+0x226/0x4a0 [ 573.821976][T17605] genl_rcv+0x28/0x40 [ 573.821997][T17605] netlink_unicast+0x7bb/0x940 [ 573.822013][T17605] netlink_sendmsg+0x813/0xb40 [ 573.822032][T17605] sock_sendmsg_nosec+0x13a/0x180 [ 573.822116][T17605] ____sys_sendmsg+0x54e/0x850 [ 573.822133][T17605] ___sys_sendmsg+0x2a5/0x360 [ 573.822151][T17605] __x64_sys_sendmsg+0x1b1/0x290 [ 573.822169][T17605] do_syscall_64+0x174/0x580 [ 573.822185][T17605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.822202][T17605] [ 573.822202][T17605] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 573.822243][T17605] blk_alloc_queue+0x544/0x690 [ 573.822267][T17605] __blk_mq_alloc_disk+0x194/0x390 [ 573.822285][T17605] nbd_dev_add+0x494/0xb60 [ 573.822302][T17605] nbd_init+0x15f/0x1e0 [ 573.822326][T17605] do_one_initcall+0x250/0x870 [ 573.822345][T17605] do_initcall_level+0x10a/0x1a0 [ 573.822366][T17605] do_initcalls+0x59/0xa0 [ 573.822385][T17605] kernel_init_freeable+0x29d/0x3e0 [ 573.822406][T17605] kernel_init+0x1d/0x1d0 [ 573.822430][T17605] ret_from_fork+0x514/0xb70 [ 573.822448][T17605] ret_from_fork_asm+0x1a/0x30 [ 573.822469][T17605] [ 573.822469][T17605] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 573.822496][T17605] fs_reclaim_acquire+0x71/0x100 [ 573.822528][T17605] __kmalloc_noprof+0xbc/0x720 [ 573.822553][T17605] tls_sw_sendmsg+0x599/0x2860 [ 573.822639][T17605] sock_sendmsg_nosec+0x90/0x180 [ 573.822661][T17605] sock_sendmsg+0x1ca/0x2d0 [ 573.822682][T17605] splice_to_socket+0xb5e/0x12a0 [ 573.822712][T17605] direct_splice_actor+0x101/0x160 [ 573.822730][T17605] splice_direct_to_actor+0x57b/0xcb0 [ 573.822748][T17605] do_splice_direct+0x195/0x290 [ 573.822766][T17605] do_sendfile+0x52e/0x7c0 [ 573.822790][T17605] __se_sys_sendfile64+0x144/0x1a0 [ 573.822814][T17605] do_syscall_64+0x174/0x580 [ 573.822830][T17605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.822848][T17605] [ 573.822848][T17605] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 573.822875][T17605] __lock_acquire+0x1520/0x2cf0 [ 573.822898][T17605] lock_acquire+0x106/0x350 [ 573.822915][T17605] lock_sock_nested+0x41/0x100 [ 573.822964][T17605] inet_shutdown+0x6a/0x390 [ 573.822988][T17605] nbd_mark_nsock_dead+0x2cb/0x550 [ 573.823008][T17605] recv_work+0x1cee/0x1e10 [ 573.823028][T17605] process_scheduled_works+0xa8e/0x14e0 [ 573.823051][T17605] worker_thread+0xa47/0xfb0 [ 573.823075][T17605] kthread+0x388/0x470 [ 573.823091][T17605] ret_from_fork+0x514/0xb70 [ 573.823109][T17605] ret_from_fork_asm+0x1a/0x30 [ 573.823131][T17605] [ 573.823131][T17605] other info that might help us debug this: [ 573.823131][T17605] [ 573.823138][T17605] Chain exists of: [ 573.823138][T17605] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 573.823138][T17605] [ 573.823201][T17605] Possible unsafe locking scenario: [ 573.823201][T17605] [ 573.823214][T17605] CPU0 CPU1 [ 573.823249][T17605] ---- ---- [ 573.823261][T17605] lock(&nsock->tx_lock); [ 573.823276][T17605] lock(&cmd->lock); [ 573.823291][T17605] lock(&nsock->tx_lock); [ 573.823307][T17605] lock(sk_lock-AF_INET6-NBD); [ 573.823322][T17605] [ 573.823322][T17605] *** DEADLOCK *** [ 573.823322][T17605] [ 573.823328][T17605] 3 locks held by kworker/u9:1/17605: [ 573.823365][T17605] #0: ffff8880274ea140 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 573.823454][T17605] #1: ffffc9001d267c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 573.823508][T17605] #2: ffff888078195668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 573.823556][T17605] [ 573.823556][T17605] stack backtrace: [ 573.823567][T17605] CPU: 1 UID: 0 PID: 17605 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 573.823590][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 573.823603][T17605] Workqueue: nbd2-recv recv_work [ 573.823624][T17605] Call Trace: [ 573.823633][T17605] [ 573.823642][T17605] dump_stack_lvl+0xe8/0x150 [ 573.823664][T17605] print_circular_bug+0x2e1/0x300 [ 573.823689][T17605] check_noncircular+0x12e/0x150 [ 573.823715][T17605] __lock_acquire+0x1520/0x2cf0 [ 573.823742][T17605] ? irqentry_exit+0x218/0x8f0 [ 573.823768][T17605] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.823796][T17605] ? inet_shutdown+0x6a/0x390 [ 573.823820][T17605] lock_acquire+0x106/0x350 [ 573.823837][T17605] ? inet_shutdown+0x6a/0x390 [ 573.823870][T17605] lock_sock_nested+0x41/0x100 [ 573.823893][T17605] ? inet_shutdown+0x6a/0x390 [ 573.823919][T17605] inet_shutdown+0x6a/0x390 [ 573.823947][T17605] nbd_mark_nsock_dead+0x2cb/0x550 [ 573.823969][T17605] recv_work+0x1cee/0x1e10 [ 573.824003][T17605] ? __pfx_recv_work+0x10/0x10 [ 573.824023][T17605] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.824049][T17605] ? irqentry_exit+0x218/0x8f0 [ 573.824074][T17605] ? trace_irq_disable+0x3b/0x140 [ 573.824101][T17605] ? rcu_is_watching+0x15/0xb0 [ 573.824123][T17605] ? process_scheduled_works+0xa20/0x14e0 [ 573.824148][T17605] process_scheduled_works+0xa8e/0x14e0 [ 573.824185][T17605] ? __pfx_process_scheduled_works+0x10/0x10 [ 573.824213][T17605] ? assign_work+0x3cf/0x5d0 [ 573.824239][T17605] worker_thread+0xa47/0xfb0 [ 573.824276][T17605] kthread+0x388/0x470 [ 573.824295][T17605] ? __pfx_worker_thread+0x10/0x10 [ 573.824319][T17605] ? __pfx_kthread+0x10/0x10 [ 573.824338][T17605] ret_from_fork+0x514/0xb70 [ 573.824359][T17605] ? __pfx_ret_from_fork+0x10/0x10 [ 573.824379][T17605] ? __switch_to+0xc89/0x1420 [ 573.824407][T17605] ? __pfx_kthread+0x10/0x10 [ 573.824431][T17605] ret_from_fork_asm+0x1a/0x30 [ 573.824460][T17605] [ 575.239736][T17605] Bluetooth: hci3: command tx timeout [ 575.523077][T11376] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.575285][T11376] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.625755][T11376] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.676216][T11376] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.801886][T11376] bridge_slave_1: left allmulticast mode [ 575.808829][T11376] bridge_slave_1: left promiscuous mode [ 575.815019][T11376] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.825508][T11376] bridge_slave_0: left allmulticast mode [ 575.833039][T11376] bridge_slave_0: left promiscuous mode [ 575.839591][T11376] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.003485][T11376] gretap0 (unregistering): left promiscuous mode [ 576.027814][T11376] bond0 (unregistering): left promiscuous mode [ 576.034349][T11376] bond_slave_0: left promiscuous mode [ 576.041972][T11376] bond_slave_1: left promiscuous mode [ 576.054180][T11376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.071364][T11376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.084873][T11376] bond0 (unregistering): Released all slaves [ 576.171926][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 576.500903][T11376] dummy0: left promiscuous mode [ 576.527764][T11376] hsr_slave_0: left promiscuous mode [ 576.535741][T11376] hsr_slave_1: left promiscuous mode [ 576.541768][T11376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.549335][T11376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.557314][T11376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.564725][T11376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.577123][T11376] veth1_macvtap: left promiscuous mode [ 576.582623][T11376] veth0_macvtap: left promiscuous mode [ 576.588416][T11376] veth1_vlan: left promiscuous mode [ 576.593680][T11376] veth0_vlan: left promiscuous mode [ 576.788749][T11376] team0 (unregistering): Port device team_slave_1 removed [ 576.801060][T11376] team0 (unregistering): Port device team_slave_0 removed [ 576.866753][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 577.166115][T11376] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.211769][T11376] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.299838][T11376] team0: Port device netdevsim1 removed [ 577.306465][T11376] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.321389][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 577.375149][T11376] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.485035][T11376] bridge_slave_1: left allmulticast mode [ 577.494361][T11376] bridge_slave_1: left promiscuous mode [ 577.500230][T11376] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.509533][T11376] bridge_slave_0: left allmulticast mode [ 577.515220][T11376] bridge_slave_0: left promiscuous mode [ 577.521538][T11376] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.535360][T11376] bridge_slave_1: left allmulticast mode [ 577.546224][T11376] bridge_slave_1: left promiscuous mode [ 577.552029][T11376] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.561026][T11376] bridge_slave_0: left allmulticast mode [ 577.566709][T11376] bridge_slave_0: left promiscuous mode [ 577.572977][T11376] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.872856][T11376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.885003][T11376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.894991][T11376] bond0 (unregistering): Released all slaves [ 577.903588][T11376] bond1 (unregistering): Released all slaves [ 577.940963][T11376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.952811][T11376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.963517][T11376] bond0 (unregistering): Released all slaves [ 577.973712][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 578.530896][T11376] hsr_slave_0: left promiscuous mode [ 578.536711][T11376] hsr_slave_1: left promiscuous mode [ 578.543003][T11376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.550871][T11376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.564306][T11376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.572124][T11376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.579899][T11376] hsr_slave_0: left promiscuous mode [ 578.585695][T11376] hsr_slave_1: left promiscuous mode [ 578.591598][T11376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.599249][T11376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.610275][T11376] veth1_macvtap: left promiscuous mode [ 578.615766][T11376] veth0_macvtap: left promiscuous mode [ 578.621461][T11376] veth1_vlan: left promiscuous mode [ 578.626713][T11376] veth0_vlan: left promiscuous mode [ 578.768908][T11376] team0 (unregistering): Port device team_slave_1 removed [ 578.783046][T11376] team0 (unregistering): Port device team_slave_0 removed [ 578.878819][T11376] team0 (unregistering): Port device team_slave_1 removed [ 578.899278][T11376] team0 (unregistering): Port device team_slave_0 removed [ 578.962656][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 579.341627][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 579.698502][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 580.000518][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8