last executing test programs: 2m17.842477903s ago: executing program 2 (id=3337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000011d000000bc152366455fc800000000000000000a54000000060a0b040000000000e67b0000000200000028000480240001800900f5090000000000000000140002800800014008000000080002400000000b0900010073797a30000000000900020073797a320000007ef5132844531f001400000011000100000000"], 0x7c}}, 0x0) 2m17.525056884s ago: executing program 2 (id=3341): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYBLOB="00040000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r2) syz_emit_ethernet(0x2e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x7, 0x4, 0x4}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40006}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x3d, '\x00', 0x0, @sk_reuseport}, 0x94) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @remote}, 0x2, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='dvmrp0\x00', 0x0, 0x5, 0x4}) 2m17.311180856s ago: executing program 2 (id=3344): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x1000, 0x4, @mcast1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="497eaafdb943b1ed7d04a2e72e5eceaa3e357d122b22fc3bea6c3308e448cc5982fd299ca59606306da8131a50aa37f1a5a8261cd574764c229feada7e000400000000000083884eedf94945bba4a4cf06c609ca6ca4ad3e0f42415b5c715bd8c06f51a015f8cf1927587c1fb3a78a308aa335dc458da72aaebbcbe5bb9c44ace80ad2b400a7d6e07f87dfdf88e8628ecbb0319c6af1", 0x96}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x71, &(0x7f0000000100)="1a00000002000000", 0x8) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 2m17.201116172s ago: executing program 2 (id=3346): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m17.094790856s ago: executing program 2 (id=3349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0xffff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000002c0)={r5, 0x1f, "3dab63af456a2d546d0fc635615a113e147b51d82c6469ec356b17a221f8e2"}, &(0x7f0000000300)=0x27) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000440007010300000000000000017c00000c0002142d8f3d3d238670af33349aff3d5f693f0611b7"], 0x20}, 0x1, 0x0, 0x0, 0x4c8c4}, 0xc000) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r2, 0x1) 2m16.085619031s ago: executing program 2 (id=3359): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async, rerun: 64) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000780)=0x1, 0x4) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async, rerun: 64) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000000001000000fdffffff0000010000000000e327380f331d4ebaf9ec04d7c6"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 64) listen(r6, 0x7c2) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaa98003c0000000000060700000000b98487fcb1dc92283b2652e9b7222c12000000000000004e22a21f4527241d7fcac59ddc93d71574e1b2f886478a0a3f8e6bc6cdbff96c3bd2a4510aac4295ebb742d7a655799b92f62a1f6e73ead7d282c49c6b7094fc5f2797636368c3dbfab2ee147d862bee3a418b0b354928f802d04da6653b1e768a4623bbe3032c07b90029369e72172b8ebb3221a75c5cc9da8d67a1b504131a18d75fc227a8f533b289a5c7bc2e3a693510259b8191676715938b992e11cf4920bff3f85f1dc72ffd60aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0100000907800001312689c292f0f994d9c52794649ca8b7d490000"], 0x0) (async, rerun: 64) sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f0000000140)=@l2={0x1f, 0xa16d, @none, 0x63, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="d1d15c696ea5f44369b70e37b09e1c056e686906f3005ab8730d7908e1858cfddfd40553551cddf837e9bc06537d792bd76810353522469de431e88a07ab641d28752c436763e390fab7098daf848b4390f35f63c7577ec4d7fc9dd2d9dec12800", 0x61}, {&(0x7f0000000000)="acf494f1ee4594688dd2ced4a4", 0xd}, {&(0x7f00000003c0)="881114141a72392a73b366c9c6efa88841b0f50158278622bde8730f6727eacaf2619eb4addc2bffd60b349a316d3e10627bc641ab47147eb42aec3a4e14ab0e5c37c34a826351dfe7441135920fa4db7521d775a9c379169105cb1749b213925d32ded91609b043b0fb9eac9d6d25f1856e7571aa73288dba3e54ef765c0d69890c9ca4a9ba827e", 0x88}, {&(0x7f00000001c0)="662187", 0x3}, {&(0x7f00000002c0)="0c4e52d8e1e3e18aaeabddffea0613458e2cf299e8a31c812c734481e184e8e51dea63e62f852718a7483c1540df6a3fcce56ca77465fb4d3ea80b40d78e78fce3ccd9df84bc78a55aa7d189351ae606f0adb9106509e66af7437428224825f8304415b30a128cf8c602", 0x6a}], 0x5, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x31}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}], 0x78}, 0x0) (async, rerun: 64) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2m1.067007063s ago: executing program 32 (id=3359): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async, rerun: 64) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000780)=0x1, 0x4) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async, rerun: 64) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000000001000000fdffffff0000010000000000e327380f331d4ebaf9ec04d7c6"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 64) listen(r6, 0x7c2) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaa98003c0000000000060700000000b98487fcb1dc92283b2652e9b7222c12000000000000004e22a21f4527241d7fcac59ddc93d71574e1b2f886478a0a3f8e6bc6cdbff96c3bd2a4510aac4295ebb742d7a655799b92f62a1f6e73ead7d282c49c6b7094fc5f2797636368c3dbfab2ee147d862bee3a418b0b354928f802d04da6653b1e768a4623bbe3032c07b90029369e72172b8ebb3221a75c5cc9da8d67a1b504131a18d75fc227a8f533b289a5c7bc2e3a693510259b8191676715938b992e11cf4920bff3f85f1dc72ffd60aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0100000907800001312689c292f0f994d9c52794649ca8b7d490000"], 0x0) (async, rerun: 64) sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f0000000140)=@l2={0x1f, 0xa16d, @none, 0x63, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="d1d15c696ea5f44369b70e37b09e1c056e686906f3005ab8730d7908e1858cfddfd40553551cddf837e9bc06537d792bd76810353522469de431e88a07ab641d28752c436763e390fab7098daf848b4390f35f63c7577ec4d7fc9dd2d9dec12800", 0x61}, {&(0x7f0000000000)="acf494f1ee4594688dd2ced4a4", 0xd}, {&(0x7f00000003c0)="881114141a72392a73b366c9c6efa88841b0f50158278622bde8730f6727eacaf2619eb4addc2bffd60b349a316d3e10627bc641ab47147eb42aec3a4e14ab0e5c37c34a826351dfe7441135920fa4db7521d775a9c379169105cb1749b213925d32ded91609b043b0fb9eac9d6d25f1856e7571aa73288dba3e54ef765c0d69890c9ca4a9ba827e", 0x88}, {&(0x7f00000001c0)="662187", 0x3}, {&(0x7f00000002c0)="0c4e52d8e1e3e18aaeabddffea0613458e2cf299e8a31c812c734481e184e8e51dea63e62f852718a7483c1540df6a3fcce56ca77465fb4d3ea80b40d78e78fce3ccd9df84bc78a55aa7d189351ae606f0adb9106509e66af7437428224825f8304415b30a128cf8c602", 0x6a}], 0x5, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x31}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}], 0x78}, 0x0) (async, rerun: 64) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2.709196579s ago: executing program 1 (id=4727): unshare(0x28000400) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x4000000, 'aegis128-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 2.556068676s ago: executing program 1 (id=4730): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000080"], 0x26}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x1, 0x5, 0x2000000}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={0x0, 0xb, 0x101, 0x8, 0x1, 0xad5, 0x1, 0x4, {r2, @in={{0x2, 0x4e23, @multicast1}}, 0x2, 0x4, 0x3a, 0x6, 0x2}}, &(0x7f0000000340)=0xb0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000000c0)=""/201, &(0x7f00000001c0)=0xc9) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61e0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x10001}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 2.03599082s ago: executing program 5 (id=4736): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) 1.961437154s ago: executing program 3 (id=4737): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000fff3fb9f8123a23e4f20b95b1664e38eca5a3e9fd68bb270dc43086f71", @ANYRES32=0x0, @ANYBLOB="00270200502a0c00280012800b00010069703667726500001800028014000700ff02000000000000000000000000000108000a00", @ANYRES32=r1, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x8005}, 0x40040) 1.775711538s ago: executing program 5 (id=4739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05220000000000003400128009000100766c616e00000000240002800c0002001900000000000000100003800c000100030000000800000004000480440012800b000100697036677265000034040280060010004e2300000800042009000000060011004e201d0008000d000500000006000000000000000000000000000000a79912323fcc9bc5de1e406450605fd3836cf61a2ec16e0356e38c7837cf99583bf5c8ce568a74d3e91b5c6a0a3b1dee5af99f3b75a854cf902d284f9cf08d44d26c91cf6d03e91885d4208949c92a20e3f35a782a35c08e4ac935df810a53dfb2a00d85f160d3174263280a5b59a37fc2b924f1177c4ceb0f3ca2563edb9d3e6bb2b65a78be6951bbe38945ba5d6ee1fc4a5ad09fe8"], 0x98}, 0x1, 0xba01}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @broadcast}, &(0x7f0000000080)=0xc) bind(r1, &(0x7f0000000140)=@xdp={0x2c, 0xd, r3, 0x23}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f00000001c0)=@ethtool_rx_ntuple={0x35, {0xe, @tcp_ip4_spec={@private=0xa010100, @remote, 0x4e21, 0x4e21, 0xb}, @hdata="c6e044c36078bdcf2f37df4e8c50c0ec4db2b2461ef56ee523a6f9b61168b88b52c8097de91a25f44bb0ebbcfb816a62f6758c3ef1c907ae4dbe0a3c4ca613e2c2945a5f5c4ee90f", 0xe2, 0xde, 0x8, 0x9, 0xfffffffffffffffe}}}) 1.691217981s ago: executing program 3 (id=4741): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000018003b1d00f8ffffff007f000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028005001600020000000500170000000000080018000000000004001200"], 0x50}}, 0x0) 1.496414365s ago: executing program 3 (id=4744): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x4, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x408c4) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 32) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async, rerun: 32) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) (async) r7 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000000100)='b', 0x1, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000000c0)={0x8, 0xb}) (rerun: 32) 1.48968667s ago: executing program 5 (id=4745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x21010000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0xa, 0x8, 0x3, 0x0, 0xfffffffffffffffc}, @generic={0x5, 0x7, 0x1, 0xd}], &(0x7f0000000480)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x64}, 0x94) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x64, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "32c04842bd74d1b8d278d793b28532f5"}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="8514ee67a73d38ab292e0f580c5005303de39d51fdacb7fe"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ba96ca241c00"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) ioctl$sock_proto_private(r2, 0x8b15, &(0x7f0000000080)) (async, rerun: 64) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c00"], 0x1c}], 0x1}, 0x0) (rerun: 64) 1.41290127s ago: executing program 4 (id=4747): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000d13c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) 1.337159097s ago: executing program 1 (id=4748): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x20050}, 0x40080) 1.296556639s ago: executing program 0 (id=4749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x10}, {0x6, 0x0, 0x0, 0x8007}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) 1.185739599s ago: executing program 1 (id=4750): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xc}, 0x10}, 0x94) 1.072741991s ago: executing program 3 (id=4751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000140)={{r2}, {@void, @max}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56747, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe0, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2a90137b}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r9, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0x18, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000100696010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000001800128008000100687372000c00028008000100", @ANYRES32=r12, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 987.221661ms ago: executing program 1 (id=4752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x48, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x48}}, 0x4c094) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000010) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e8860"}]}}}}}}, 0x0) 959.383998ms ago: executing program 4 (id=4753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) listen(r2, 0x3ff) recvmmsg$unix(r2, &(0x7f0000006700)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000006e40)=""/135, 0x87}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f00000004c0)=""/224, 0xe0}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/58, 0x3a}], 0x1, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000000800)=""/80, 0x50}, {&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000740)=""/47, 0x2f}, {&(0x7f0000000900)=""/68, 0x44}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000980)=""/135, 0x87}, {&(0x7f0000000a40)=""/139, 0x8b}, {&(0x7f0000000b00)=""/124, 0x7c}, {&(0x7f0000006d00)=""/96, 0x60}], 0x9, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000d40)=""/26, 0x1a}, {&(0x7f0000000d80)=""/229, 0xe5}, {&(0x7f0000000e80)=""/70, 0x46}, {&(0x7f0000000f00)=""/64, 0x40}, {&(0x7f0000000f40)=""/162, 0xa2}, {&(0x7f0000001000)=""/166, 0xa6}, {&(0x7f00000010c0)=""/81, 0x51}, {&(0x7f0000001140)=""/74, 0x4a}, {&(0x7f00000011c0)=""/99, 0x63}], 0x9, &(0x7f0000001240)}}, {{&(0x7f00000023c0)=@abs, 0x6e, &(0x7f0000004780)=[{&(0x7f0000002440)=""/189, 0xbd}, {&(0x7f0000002500)=""/166, 0xa6}, {&(0x7f0000001240)=""/3, 0x3}, {&(0x7f00000025c0)=""/178, 0xb2}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/235, 0xeb}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x7, &(0x7f0000006cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004840), 0x6e, &(0x7f0000005c00)=[{&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)}, {&(0x7f0000005900)=""/252, 0xfc}, {&(0x7f0000005a00)=""/116, 0x74}, {&(0x7f0000005a80)=""/138, 0x8a}, {&(0x7f0000005b40)=""/150, 0x96}], 0x6, &(0x7f0000005c80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005cc0)=""/153, 0x99}, {&(0x7f0000005d80)=""/146, 0x92}, {&(0x7f0000005e40)=""/139, 0x8b}, {&(0x7f0000005f00)=""/22, 0x16}], 0x4, &(0x7f0000005f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000005fc0), 0x6e, &(0x7f00000065c0)=[{&(0x7f0000006040)=""/131, 0x83}, {&(0x7f0000006100)=""/228, 0xe4}, {&(0x7f0000006200)=""/175, 0xaf}, {&(0x7f0000006300)=""/194, 0xc2}, {&(0x7f0000006400)=""/184, 0xb8}, {&(0x7f00000062c0)=""/26, 0x1a}, {&(0x7f00000064c0)=""/230, 0xe6}], 0x7, &(0x7f0000006640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}], 0x8, 0x40000000, &(0x7f0000006900)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7, 0xc}, {0x1}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xffff}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x2000c014) r6 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, 0x0, 0x0) recvmmsg(r3, &(0x7f00000058c0)=[{{&(0x7f0000006940)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001280)=[{&(0x7f00000069c0)=""/158, 0x9e}, {&(0x7f0000006a80)=""/151, 0x97}, {&(0x7f0000006b40)=""/90, 0x5a}, {&(0x7f0000006bc0)=""/169, 0xa9}], 0x4}, 0x1}], 0x1, 0x2000, &(0x7f0000006c80)={0x77359400}) 880.316009ms ago: executing program 0 (id=4754): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @empty}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=@dellink={0x1d8, 0x11, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x2840, 0x10000}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_MAP={0x24, 0xe, {0xbcc, 0x80000001, 0x7ff, 0x5, 0xcf}}, @IFLA_VF_PORTS={0xe0, 0x18, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ee57e9eedbe3bc2b17bd30363f4eb065"}, @IFLA_PORT_VF={0x8, 0x1, 0x80}, @IFLA_PORT_PROFILE={0x6, 0x2, ')\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6e10c2b8662bd6104e66a5d3e64edd65"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4ba7dc7afc6e04165ad8ebae76d93e08"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d2b83fe3380fa4f9e1090e6d0550ffe3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ef4fb39956c1d5655c0c438dc998721f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fb153ea5cae34808b7a558eb489e2993"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6750239ce65639b5b66cd441d5a1a3b1"}, @IFLA_PORT_PROFILE={0x7, 0x2, '+%\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe9}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '$\\$\x00'}, @IFLA_PORT_PROFILE={0xa, 0x2, '-y:)%\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x401}]}]}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'wg1\x00'}, {0x14}, {0x14, 0x35, 'bond_slave_1\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000340)={r2, 0x2, 0x7, 0x8}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000380)={'IDLETIMER\x00'}, &(0x7f00000003c0)=0x1e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x7, 0xff, 0x200, 0x1, r4, 0x5, '\x00', 0x0, r3, 0x2, 0x2, 0x2}, 0x50) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000004c0)={'nat\x00', 0x0, [0x2, 0x9, 0x39f4, 0x7e5, 0x180000]}, &(0x7f0000000540)=0x54) r6 = accept4$x25(r3, &(0x7f0000000580), &(0x7f00000005c0)=0x12, 0x0) connect$pppl2tp(r3, &(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @loopback}, 0x4, 0x0, 0x1, 0x1}}, 0x2e) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000640)=0x7, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) r7 = socket(0x8, 0x800, 0xffff129d) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_1\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_COMMENT={0xc, 0x1a, '}\\,!i:[\x00'}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000008c0)=0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000900)=@assoc_id=r8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000980)={0x1140, 0x2a, 0x20, 0x70bd25, 0x25dfdbfc, {0x3}, [@typed={0x2b, 0x5d, 0x0, 0x0, @binary="87a1ac5c3376479bed81e8e2af29d455ae1b1556529e845258f85a9d63c43251dcc9490cc38ba0"}, @generic="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", @nested={0xf6, 0x121, 0x0, 0x1, [@nested={0x4, 0xd2}, @typed={0x4, 0x8a}, @generic="910332dabdcd0e7cbf01d75b8acb4f901e7dfd7c7c04d021e28c922779983a7146c9272b98352bd3ee31ae9abd42c55bc743c2a76a320261d6089b1407d2502eafc0dd0a4308703f6e4918cc8f38704c5996c9a47bfcb8f4d1fa0608e2de98c54d6b0eb1cacb4eba7010247fee0aead3213dbaf78a653ab64d1b9c2811e171f0a8ea425060233994953e691c1b97cb788ddee9b777b54e3ffa0ade189c7524bcbbf8282a837a533b00cef3df98989700f32e9d6df2c8843bb313106d77436ed59f44717d045b3d17af5b919f24480ba6a97edc5a35e07d8775e14a53b76c65cc6f0adde130fde34295aa"]}, @typed={0x8, 0xab, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1140}, 0x1, 0x0, 0x0, 0x4000}, 0xc5) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001b40), r9) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001bc0), r9) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000002100)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000020c0)={&(0x7f0000001c00)={0x484, r10, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd09d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x21}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @local, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @private0, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @empty, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x311}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x746}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x484}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000811) socket$alg(0x26, 0x5, 0x0) r11 = socket(0x28, 0x5, 0x1fe00) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r11, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x50, r12, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008080}, 0xc000) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4048001) 480.594691ms ago: executing program 4 (id=4755): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x9, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r2, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) (async) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x100000001, 0xfffffffffffffff7, 0xfffffffffffffff5}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x100000001, 0xfffffffffffffff7, 0xfffffffffffffff5}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="7a654d452c43dd2eb9c9196258a67f80859fa668652d17c08d943cc5b67becce49205326bb68961f6f38aa0adf427d1837b9f2079412d02f74eb9955bb60bf59ec56936dc3ab4ca3cb21a3039fb23cec2e6dbc467e09b569fc6abfacb279683327436c7a5a6aa53535c1cab5970de99c7133dbdf24bd59d4eb3f08801cc4914b9f37d84e226f6a6276d86f4d683a4e3c9695861b5e4ca3ae575f4005ca43a1c14491abc5134b84ee6559da3f187ee8a74c029a41ab5ade09a800d9034c7b8670777c253b9c66ecf1a33476f38f0b3fdc01305eb5d03db2b00b908e0130823c0d96ca6bdeec05", @ANYRES16=r3, @ANYBLOB="010028b97000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f7ffffff08000600", @ANYRES32=r6, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="7a654d452c43dd2eb9c9196258a67f80859fa668652d17c08d943cc5b67becce49205326bb68961f6f38aa0adf427d1837b9f2079412d02f74eb9955bb60bf59ec56936dc3ab4ca3cb21a3039fb23cec2e6dbc467e09b569fc6abfacb279683327436c7a5a6aa53535c1cab5970de99c7133dbdf24bd59d4eb3f08801cc4914b9f37d84e226f6a6276d86f4d683a4e3c9695861b5e4ca3ae575f4005ca43a1c14491abc5134b84ee6559da3f187ee8a74c029a41ab5ade09a800d9034c7b8670777c253b9c66ecf1a33476f38f0b3fdc01305eb5d03db2b00b908e0130823c0d96ca6bdeec05", @ANYRES16=r3, @ANYBLOB="010028b97000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f7ffffff08000600", @ANYRES32=r6, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) 478.999262ms ago: executing program 1 (id=4756): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r2, 0x0) r3 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r3, 0x400461f5, &(0x7f00000000c0)) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x9, {{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x891d, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xffffffffffffffb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}}, 0x0) 476.998987ms ago: executing program 0 (id=4757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408fa000000000073113a00000000009510000002000000ffffffff000000009500c200000002009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) 475.243043ms ago: executing program 0 (id=4758): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="90007f0a0a0002000180c200000300000600050003"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@newtfilter={0xd78, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xd4c, 0x2, [@TCA_BPF_POLICE={0x1c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8db}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_BPF_ACT={0x210, 0x1, [@m_skbmod={0xd0, 0x12, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x0, 0x0, 0x6, 0x100}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x142, 0x7, 0x6, 0x7}, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}]}, {0x43, 0x6, "6bf05a5e47154fb06ee381cfcb7216a536cc6ed5bbc5a8305f5c28be0cdf6bc72bc401c026d29decd6ad2193b44e1f3ecab42350d346cd83389422a114f20e"}, {0xc}, {0xc, 0x8, {0x3, 0x7}}}}, @m_connmark={0x13c, 0x1f, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x0, 0x10}, 0x908f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x1, 0xfffff9ef, 0x3}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x40, 0x10000000, 0x9, 0x10000}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x1, 0x61b, 0x3}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x3, 0x1237b5fd, 0xfffffe00}, 0x10}}]}, {0x7d, 0x6, "d9826d4379fc9ece694b02a7bdf0107547313819627e9205d29b1b49e446c37b8615ac5bdcd153f77c4150adfc0f303f44129723c7594916235cf738db4682a415a8afeda96851f1ed98060ff1b6db8b4e2efaf467038a331d9e05254fe205f1688eb694f1c9697d2685759a6ca858b63b10e37b308f1e80d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x2, 0x2, 0x2}, {0x3, 0x1, 0x0, 0xfff}, {0x6, 0x41, 0x4, 0x100}, {0x7e, 0x4, 0x4, 0x8}]}}, @TCA_BPF_ACT={0x2ec, 0x1, [@m_bpf={0x194, 0xe, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x8000, 0x1, 0x2, 0x5995}]}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x2, 0x8, 0x86, 0x4}, {0x401, 0x51, 0xf2, 0xd0}, {0x1000, 0x6, 0x2, 0x2}, {0xfff8, 0x2, 0x24, 0x200}, {0x1, 0x9, 0x5}, {0x8, 0x1, 0x3, 0x8}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10001, 0x2, 0x7, 0x1, 0xf}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x102, 0x6, "e01520da6bc123692c5695ca4e36f2f72efd34e66e24d45113b8bcd76670d7c88ae3acb1bfd1fed4edce6f276b5e433ece658f913f3cd87ea3004a708e1c8259195a24261eb373c14f3734ccdf1a5fd23291f10c67999e09a27e2e2ab63b847f613b172e8bf83ffc61f5557bcabe53d4bbe5fb45c8a6aaa0da72b75691b64ea0b0c0647f7af762a5999c10909b9d66d285b0780667a4019bf4ebecdee7c2fd96972620914bb9a8680a842bac3785f7ee0605a1c74d9d2ab22281fb720c64917b41f2ed9880b539ea29a5306f2ff8147f8c2a81f33de0ab7e2db74bf5d68c9746c6c5dce07dd5c8d2bb3cdc164e156e2e750b86b375515a696e0195999eb5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xb0, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x4, 0x8, 0x56a4d689, 0x2020000}}]}, {0x6b, 0x6, "d8f9b22719fb82237b11b1bb612dd6aae52683b5d092ef3c84bfd9b845e0298c3a55c82daa4949e2e5341165fb3c4cf8e852879bb73bb58022020e3d1ab227e663b9b274f7ba86930ca8cde98ea1ca6a4bb57902dfcf9a15c95ed88ac40ea5d1e94eb66d1bdc81"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0xa4, 0x15, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x7, 0x800, 0x7}}}]}, {0x60, 0x6, "5b73cbf1998caa0fde8123294c0fcf9074d2cb2289b224e4e734ae080b5f465b695b4a95e50ab9822e4266628d82a5d33ba2fa769410c8c9e393868cd9466681464cb7ee269bbf67d7fb6b0e3bdf537821932ab8ba5696e654b4a580"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_ACT={0x7d4, 0x1, [@m_skbedit={0x190, 0x9, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6cc8a3a6, 0x100, 0xffffffffffffffff, 0x1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x7}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3e8ba3dd}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4cf6, 0x2, 0x0, 0x2daf, 0x7}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x8}}]}, {0xfc, 0x6, "e4110b7113b7e27409a04f0601911bcb75886e26c59cc19bd7910c8ae9c718397b92ae22ad4d71ede1df1ee4ecf3ab735cd2bdbae0781b9cd7a6b94ea98e29fc2aa84af337590179e48ae16c8895f21559bec3674645043e7f8e9a93292620c448a2e8c553bdb18a973b469524d91772f2c03645b8e82c053012033117b54f44fe6e77072503e0955cc1a6619e9b28e8505ae0e0bf97b771ffcec31bcfc9246d8be6ed237653960046983b67e47a33ecf9cfee155a5dec1242d4cddb761c29f1adb8191fafddcd340bbf1257dc8c2428495d586eb28e6ceb0b030ce34da82726a2a390e66888dee860c548ff65b83d3a7e586403324060b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1b8, 0x16, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0x6, 0x5, 0x200}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0xfffffffffffffffe, 0x7ff, 0xf}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x101, 0x20000000, 0x7, 0x1}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0x20000000, 0xfff, 0x7}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xecff, 0xffff, 0x2, 0x0, 0x8001}, 0x1, r7}}]}, {0xec, 0x6, "4f9f42467841efcc88b32bf63c145b998dd449896a806af37244a200cc278ab1ed605c19571b9488ef8d2273db69d8b0b45cb3577c8164afae6f09a5d6f53b52e47ad2a39fa39b0a661661119f8efa1795c43c0115f11ab0febc7ca3213a4e4b6cbe1745a26ffe1e31b913f0ceb8e11f3115ca390db06c233b4680313de554ddaadaf06be01d2cea555687c05d883b89b98b4885747c87bf701df7aeb867a0149b930a1ee7e0acc5b9a8221c5ab2b63bafb636acec0b0dd4fcfd6f8c7ba4600760fd312c9147a436df87675a6ecfaa56b0298be346121d504513990d14cd0f1376da8b18c3fca452"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xbc, 0x18, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x100, 0x3, 0x3, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x53, 0x6, "06c9a4e4820f1799cb4409aec0d7a037a52c03f156f9c4a9894ec991053bcb44d172e71efaf9fb2f19a51aa367c7bdbd2fa9e6155ae56ecd398545602b50ea32ba85225d455051bb6401311e09a9f9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x1b4, 0x19, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x1, 0xb8}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfff, 0x8, 0x2, 0x4}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xdcd9, 0x0, 0x1, 0x1, 0x5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf3c5, 0x8, 0x10000000, 0x8f, 0x2}, 0x35b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x76e2, 0x3af, 0xffffffffffffffff, 0x8, 0x7}, 0x8d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x4, 0x4, 0x8}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x2, 0xffff9aa5, 0x6}, 0x91}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x5, 0x5, 0x5, 0x5}, 0x4}}]}, {0xa2, 0x6, "768f2d99d7100f769287e6ebf4441385cc07fc033b05adccbfa30814fd182ce7475b81818849d323df585c6ec7bef9e6fca34e5f98bccf2af9629267465f5776e70572984ee84841e0b3b3150a08dfd61e7435a5f187a8d00d5b8d8148e83b233d3c87f6c8fa3dd0a55512cebe869cb3d1b1aa15eae26951a4975f9e689402b7e715db011c9c59db71e47ec9c9174618092d3f02cdf2a56bdf034d0be672"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5}}}}, @m_ct={0x11c, 0x3, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "126734fc570aae0c3d142784aa2e1b89"}, @TCA_CT_ZONE={0x6, 0x4, 0x7}, @TCA_CT_LABELS_MASK={0x14, 0x8, "7b38a0a464db0664c94b868a80eb3782"}]}, {0xc1, 0x6, "0dbdf266008dfd59da905fb7e1b9084126459936358a893b57788e0cec84fab05f27a087cd353f3b0a7341ed850884587260364d27d5d6679db184156884bd748da1485374b8eff5c876e29429e7c509e3c74b64d62dc3b7c7fe84170e8f152d344c98d933322818432070c18bdc640183d52c92c5fbd9a6c17abc8e64b24100c4cba1a599686d1c6c96b336e7a18176c4f1e355f011e175d5c5572708e88b7d6fd2daaea69e9df5b221e6a17f5c15f1296cb895020ffc0c25d6eeaad9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0xfc, 0x14, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe196, 0x20, 0x3, 0x200, 0xfffffc01}, 0x55}}]}, {0xb4, 0x6, "a10234cf1712ce0d5ca31ed998d1c10c7055362ca226f8e6853c16db423ba89a48f556f3d7f543965c86fe132e7e23614ef2a39f7a4cf0cfbc8f775bfacbb3cb398ac5db4fb8364849b1061b79839ac5a9ba95afbcbd5ef19deb8bacf77df42012785e8eaba3922c1201fc0f50738f04e49b7e28813529dafcec35c72f56ab7bb7ded0d8f5e60af01ac2eacadbd97ca8e9e1df4f026a04f72b3e32b5e1aeb63bc0d1142ba862d0917e49cd58707e25df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x1, 0x9, 0x10}]}}]}}]}, 0xd78}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 417.800292ms ago: executing program 3 (id=4759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[], 0x18}}], 0x1, 0x0) bind$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendto$inet(r1, &(0x7f0000000000)="2222d0548a25fd9a78fe5f8d3c26d7540afae5a3b7e7c536cfd2001464ae0c7a7708fc54b3eb2245f0b76e75383eccf6c82081e594db4e7167f44011f733b6d049ccfc8346cf42309b86b8367422e229777acf1f8edf768d55dc0365fd17438e01c6a1ee59356b9efeefc0", 0x6b, 0x4, 0x0, 0x0) 411.866249ms ago: executing program 4 (id=4760): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local, @val={@void, {0x4305, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x6}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000000080104000000000000000007000007140004800800024000000009080001000000fa2e050003002f00000006000240080500000600024008050000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 341.695605ms ago: executing program 5 (id=4761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x4b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x40010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000540)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000580)=0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'pci\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x404c}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x6, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x1}, @datasec={0xf, 0x1, 0x0, 0xf, 0x3, [{0x3, 0x3, 0x5}], "15f520"}, @struct={0xd, 0x1, 0x0, 0x4, 0x0, 0x9, [{0x4, 0x5, 0xfffffffc}]}, @float={0x8, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000000800)=""/204, 0x6a, 0xcc, 0x1, 0xd}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0], 0x0, 0xf0, &(0x7f0000000a80)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f0000000740)='GPL\x00', 0xffff627f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f0000000940)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x0, 0x4, 0x1}, 0x10, r7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008801}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xe4, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001100)={'pim6reg0\x00', @remote}) syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, r9, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20004001) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r11 = ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100014}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r9, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f00000013c0)=0xfff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c055}, 0x4000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001540), r12) 207.385652ms ago: executing program 0 (id=4762): syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xd}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 207.06961ms ago: executing program 4 (id=4763): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba02000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 192.104249ms ago: executing program 5 (id=4764): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) connect$rose(r2, &(0x7f0000001740)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x40) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, &(0x7f0000000180)=0x2c) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001480)={'ip6_vti0\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x4, 0xfd, 0x3, 0x200, 0x70, @private1, @local, 0x700, 0x7, 0xf, 0x8}}) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000014c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xffff, '\x00', r4, r5, 0x3, 0x5, 0x2}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r7, 0x0) syz_extract_tcp_res(&(0x7f0000001580)={0x41424344}, 0x7, 0x6) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, r9, 0x0, 0x4, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}, @fastopen={0x22, 0x2}, @mss={0x2, 0x4, 0x2}, @mss={0x2, 0x4, 0x6}]}}}}}}}}, 0x0) (async) write$tun(r7, &(0x7f00000015c0)={@void, @void, @ipv6=@tcp={0x2, 0x6, "590b91", 0x12c, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[@dstopts={0x62, 0x8, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x9, 0x8, [0x8, 0xc27, 0xfffffffffffffffb, 0x7, 0xae68]}}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x969f}, @enc_lim={0x4, 0x1, 0x81}]}, @fragment={0x5c, 0x0, 0x5, 0x1, 0x0, 0x1d, 0x64}, @srh={0x62, 0x4, 0x4, 0x2, 0x5, 0x40, 0x4, [@loopback, @loopback]}], {{0x4e22, 0x4e24, r8, r9, 0x1, 0x0, 0x24, 0x0, 0x8000, 0x0, 0xc, {[@mptcp=@mp_join={0x1e, 0x3, 0x2}, @mptcp=@remove_addr={0x1e, 0x78, 0x0, 0x0, "fd60cd7da04bdb639be3725faccd22962e4f829a161963f6d87ec9a5b905623c00df3d5fb2d26a479c898333b96fd76b023ec99de93c304790177f9b8499c588dde8876ea8137bd891c157dd4eb77a17264073a69bf9ccb064ad478c3671292ce4e6c0e972505e1110479f92ea084e73c15e875025"}]}}, {"eff4ea848bdd2d710d480e987454bcf9e7c8e89009ce4d7ef9f6d964"}}}}}, 0x154) (async) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={r6, 0xf3}) 64.939583ms ago: executing program 3 (id=4765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac0a}, @typed={0x5a, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xfe7, &(0x7f0000001e00)=""/4071, 0x100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x9}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x2c}}, 0x0) 40.374597ms ago: executing program 5 (id=4766): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r5, 0x3, {0x1, 0xff, 0x4}, 0xfe}, 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="e8020000000000002900000004000000", @ANYBLOB="9b64d9"], 0x2e8}}], 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept(r7, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r8) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[], 0xfe0}, 0x1, 0x0, 0x0, 0x1}, 0x1) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)={0x60, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48004}, 0x884) 14.635623ms ago: executing program 0 (id=4767): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='highspeed\x00', 0xa) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac00028008000300010000000800010010000000010004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x40, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x40}}, 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) (async) r7 = accept4(r3, 0x0, &(0x7f0000000000), 0x80800) sendmsg$nl_generic(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0x6, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1f, 0x800, 0x70bd28, 0x25dfdbff, {0x9}, [@typed={0x8, 0xd0, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40001) 0s ago: executing program 4 (id=4768): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) sendto$ax25(r2, 0x0, 0x0, 0xc891, 0x0, 0x0) kernel console output (not intermixed with test programs): 2 bytes leftover after parsing attributes in process `syz.3.3012'. [ 421.680302][ T5185] Bluetooth: hci1: command tx timeout [ 422.144961][T16178] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.152471][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.161459][T16178] bridge_slave_0: entered allmulticast mode [ 422.169658][T16178] bridge_slave_0: entered promiscuous mode [ 422.178915][T16350] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 422.217882][T16350] bond7: entered promiscuous mode [ 422.222997][T16350] bond7: entered allmulticast mode [ 422.239539][T16350] 8021q: adding VLAN 0 to HW filter on device bond7 [ 422.303598][T16178] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.322291][T16178] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.333242][T16178] bridge_slave_1: entered allmulticast mode [ 422.343214][T16178] bridge_slave_1: entered promiscuous mode [ 422.417420][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 422.455988][T16379] netlink: 'syz.3.3017': attribute type 1 has an invalid length. [ 422.544876][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3017'. [ 422.557933][T16379] 8021q: adding VLAN 0 to HW filter on device bond8 [ 422.602828][T16178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.624901][T16389] netlink: 'syz.2.3018': attribute type 1 has an invalid length. [ 422.644890][T16178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.656275][T16389] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3018'. [ 422.687768][T16379] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 422.808072][T16178] team0: Port device team_slave_0 added [ 422.828528][T16178] team0: Port device team_slave_1 added [ 423.320732][T16178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.333212][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.398124][T16178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.426146][T16418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.488257][T16178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.508059][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.576832][T16178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.704644][T16428] pim6reg: entered allmulticast mode [ 423.714333][ T1155] IPVS: stop unused estimator thread 0... [ 423.756844][ T5185] Bluetooth: hci1: command tx timeout [ 423.758125][T16434] pim6reg: left allmulticast mode [ 424.132211][T16178] hsr_slave_0: entered promiscuous mode [ 424.155491][T16178] hsr_slave_1: entered promiscuous mode [ 424.179242][T16178] debugfs: 'hsr0' already exists in 'hsr' [ 424.195336][T16178] Cannot create hsr debugfs directory [ 424.383749][T16437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 424.423187][T16437] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 424.446120][T16463] __nla_validate_parse: 1 callbacks suppressed [ 424.446142][T16463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3030'. [ 424.479720][T16437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 424.506635][T16437] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 425.036364][T16437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 425.042337][T16437] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 425.320641][T16437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 425.327987][T16437] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 425.897251][T16517] netlink: 'syz.2.3041': attribute type 29 has an invalid length. [ 425.919257][T16518] netlink: 'syz.2.3041': attribute type 29 has an invalid length. [ 425.951170][T16517] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3041'. [ 426.212322][T16178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.214333][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3044'. [ 426.245001][T16178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.324636][T16178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.392940][T16178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 426.480168][T16544] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.501219][T16553] veth1_to_bond: entered allmulticast mode [ 426.527429][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3046'. [ 426.683762][T16553] veth1_to_bond (unregistering): left allmulticast mode [ 426.986441][T16178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.030434][T16178] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.066643][T13238] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.073925][T13238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.131517][T13238] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.138858][T13238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.354378][T16595] veth0: renamed from veth1_vlan [ 427.839630][T16178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.889771][T16619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.912996][T10842] lo speed is unknown, defaulting to 1000 [ 427.919199][T16622] netlink: 'syz.1.3061': attribute type 6 has an invalid length. [ 427.927732][T16623] netlink: 'syz.1.3061': attribute type 6 has an invalid length. [ 427.932416][T10842] syz0: Port: 1 Link ACTIVE [ 427.944517][ T5927] lo speed is unknown, defaulting to 1000 [ 428.007986][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3060'. [ 428.068581][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'. [ 428.108914][T16178] veth0_vlan: entered promiscuous mode [ 428.148643][T16178] veth1_vlan: entered promiscuous mode [ 428.274747][T16178] veth0_macvtap: entered promiscuous mode [ 428.305334][T16178] veth1_macvtap: entered promiscuous mode [ 428.370817][T16178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.402779][T16178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.463301][ T3535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.492355][ T3535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.536250][ T3535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.565451][ T3535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.640423][T16644] tipc: Enabling of bearer rejected, already enabled [ 428.673751][T16647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.898808][T16660] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3070'. [ 428.929036][T13237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.939749][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'. [ 428.960832][T16665] netlink: 'syz.3.3071': attribute type 21 has an invalid length. [ 428.967277][T13237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.994987][T16661] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 429.012074][T16661] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 429.040002][T16661] gretap1: entered promiscuous mode [ 429.049723][T16661] gretap1: entered allmulticast mode [ 429.129904][T13220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.148689][T13220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.256141][T16682] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3076'. [ 429.660569][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3079'. [ 429.672822][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3079'. [ 429.694326][T16695] netlink: 'syz.4.3079': attribute type 6 has an invalid length. [ 430.251760][T16716] FAULT_INJECTION: forcing a failure. [ 430.251760][T16716] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 430.285956][T16716] CPU: 1 UID: 0 PID: 16716 Comm: syz.0.3085 Not tainted syzkaller #0 PREEMPT(full) [ 430.285986][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.286007][T16716] Call Trace: [ 430.286016][T16716] [ 430.286026][T16716] dump_stack_lvl+0x189/0x250 [ 430.286067][T16716] ? __pfx____ratelimit+0x10/0x10 [ 430.286098][T16716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.286123][T16716] ? __pfx__printk+0x10/0x10 [ 430.286151][T16716] ? __might_fault+0xb0/0x130 [ 430.286191][T16716] should_fail_ex+0x414/0x560 [ 430.286223][T16716] _copy_from_user+0x2d/0xb0 [ 430.286247][T16716] ___sys_recvmsg+0x12e/0x510 [ 430.286278][T16716] ? __pfx____sys_recvmsg+0x10/0x10 [ 430.286319][T16716] ? __fget_files+0x3a0/0x420 [ 430.286343][T16716] do_recvmmsg+0x307/0x770 [ 430.286370][T16716] ? __pfx_do_recvmmsg+0x10/0x10 [ 430.286399][T16716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 430.286430][T16716] __x64_sys_recvmmsg+0x190/0x240 [ 430.286452][T16716] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 430.286470][T16716] ? rcu_is_watching+0x15/0xb0 [ 430.286491][T16716] ? do_syscall_64+0xbe/0x3b0 [ 430.286510][T16716] do_syscall_64+0xfa/0x3b0 [ 430.286524][T16716] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.286548][T16716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.286565][T16716] ? clear_bhb_loop+0x60/0xb0 [ 430.286585][T16716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.286605][T16716] RIP: 0033:0x7f2fd8d8ebe9 [ 430.286621][T16716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.286636][T16716] RSP: 002b:00007f2fd6ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 430.286654][T16716] RAX: ffffffffffffffda RBX: 00007f2fd8fc5fa0 RCX: 00007f2fd8d8ebe9 [ 430.286666][T16716] RDX: 0000000000000001 RSI: 00002000000010c0 RDI: 0000000000000005 [ 430.286676][T16716] RBP: 00007f2fd6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 430.286686][T16716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.286696][T16716] R13: 00007f2fd8fc6038 R14: 00007f2fd8fc5fa0 R15: 00007fff5b304fe8 [ 430.286722][T16716] [ 430.570042][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 430.580976][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 430.590493][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 430.600568][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 430.612136][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.617464][T16727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3086'. [ 430.677501][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 430.900102][T16726] lo speed is unknown, defaulting to 1000 [ 430.924833][T13238] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.950067][T13238] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.105351][T13238] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.143242][T13238] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.248524][T13238] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.272519][T13238] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.383591][T13238] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.416305][T13238] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.729972][T16778] netlink: 'syz.4.3097': attribute type 21 has an invalid length. [ 431.792683][T16780] netlink: 'syz.4.3097': attribute type 8 has an invalid length. [ 431.831729][T16778] netlink: 'syz.4.3097': attribute type 6 has an invalid length. [ 431.843213][T16778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3097'. [ 432.557798][T16806] netlink: 'syz.0.3103': attribute type 9 has an invalid length. [ 432.620810][T16808] netlink: 'syz.0.3103': attribute type 9 has an invalid length. [ 432.731876][ T5864] Bluetooth: hci0: command tx timeout [ 433.031894][T13238] smc: removing net device bond0 with user defined pnetid SYZ2 [ 433.044958][T13238] bond0 (unregistering): Released all slaves [ 433.272892][T13238] bond1 (unregistering): Released all slaves [ 433.302552][T13238] bond2 (unregistering): Released all slaves [ 433.462256][T13238] bond3 (unregistering): Released all slaves [ 433.664254][T13238] : left promiscuous mode [ 433.756625][T16829] tipc: Enabled bearer , priority 0 [ 433.772838][T16838] syzkaller0: entered promiscuous mode [ 433.796459][T16838] syzkaller0: entered allmulticast mode [ 433.884706][T16843] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3107'. [ 433.928108][T13238] tipc: Disabling bearer [ 433.941052][T13238] tipc: Disabling bearer [ 433.969538][T13238] tipc: Left network mode [ 434.029000][T16829] tipc: Resetting bearer [ 434.247605][T16867] netlink: 'syz.3.3112': attribute type 33 has an invalid length. [ 434.290778][T16868] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3110'. [ 434.307730][T16827] tipc: Resetting bearer [ 434.314012][T16868] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 434.351702][T16827] tipc: Disabling bearer [ 434.577132][T16879] netlink: 'syz.2.3115': attribute type 1 has an invalid length. [ 434.660731][T16726] chnl_net:caif_netlink_parms(): no params data found [ 434.796127][ T5864] Bluetooth: hci0: command tx timeout [ 434.861623][T16896] netlink: 'syz.4.3116': attribute type 1 has an invalid length. [ 435.024096][T16903] openvswitch: netlink: Duplicate or invalid key (type 0). [ 435.036944][T16903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.339197][T16726] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.367603][T16726] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.382962][T16726] bridge_slave_0: entered allmulticast mode [ 435.413476][T16726] bridge_slave_0: entered promiscuous mode [ 435.469690][T13238] hsr_slave_0: left promiscuous mode [ 435.480806][T13238] hsr_slave_1: left promiscuous mode [ 435.498118][T13238] veth1_macvtap: left promiscuous mode [ 435.523373][T13238] veth0_macvtap: left promiscuous mode [ 436.784332][T16726] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.791808][T16726] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.800815][T16726] bridge_slave_1: entered allmulticast mode [ 436.809456][T16726] bridge_slave_1: entered promiscuous mode [ 436.835066][T16935] tipc: Enabled bearer , priority 0 [ 436.863751][T16948] netlink: 'syz.2.3129': attribute type 4 has an invalid length. [ 436.878326][ T5864] Bluetooth: hci0: command tx timeout [ 436.997967][T16935] tipc: Disabling bearer [ 437.143468][T16726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.160173][T16961] netlink: 'syz.0.3130': attribute type 10 has an invalid length. [ 437.168508][T16961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3130'. [ 437.181218][T16970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3132'. [ 437.191120][T16969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3132'. [ 437.271915][T16961] team0: Port device geneve0 added [ 437.323061][T16726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.367097][T16970] 8021q: VLANs not supported on nlmon0 [ 437.373192][T16969] 8021q: VLANs not supported on nlmon0 [ 437.528300][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3134'. [ 437.572992][T16726] team0: Port device team_slave_0 added [ 437.586927][T16991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3135'. [ 437.609838][T16726] team0: Port device team_slave_1 added [ 437.629390][T16985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3136'. [ 437.796368][T16726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.813736][T16726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.814037][T13238] IPVS: stop unused estimator thread 0... [ 437.845770][T16726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.893983][T16726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.908388][T16726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.964716][T16726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.044813][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3141'. [ 438.088786][T17009] netlink: 'syz.0.3141': attribute type 11 has an invalid length. [ 438.104995][T17009] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3141'. [ 438.179172][T17018] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3142'. [ 438.228685][T16726] hsr_slave_0: entered promiscuous mode [ 438.256657][T16726] hsr_slave_1: entered promiscuous mode [ 438.349589][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3144'. [ 438.383097][T17023] netlink: 'syz.4.3144': attribute type 12 has an invalid length. [ 438.396040][T17023] netlink: 'syz.4.3144': attribute type 5 has an invalid length. [ 438.885525][T17047] bridge0: entered allmulticast mode [ 438.944587][T17046] netlink: 'syz.3.3150': attribute type 4 has an invalid length. [ 438.959070][ T5864] Bluetooth: hci0: command tx timeout [ 439.340635][T17055] netlink: 'syz.2.3152': attribute type 1 has an invalid length. [ 439.572790][T16726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 439.598108][T16726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 439.660752][T17076] bridge0: port 3(syz_tun) entered disabled state [ 439.702278][T17078] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 439.720005][T16726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 439.807897][T16726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.183030][T16726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.244541][T16726] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.274827][T17123] netlink: 'syz.2.3172': attribute type 10 has an invalid length. [ 440.291803][T17121] mac80211_hwsim hwsim27 ý: renamed from wlan1 (while UP) [ 440.332419][T17123] bridge0: port 3(team0) entered blocking state [ 440.346241][T17123] bridge0: port 3(team0) entered disabled state [ 440.352867][T17123] team0: entered allmulticast mode [ 440.363131][T17123] team_slave_0: entered allmulticast mode [ 440.372128][T17123] team_slave_1: entered allmulticast mode [ 440.398539][T17123] team0: entered promiscuous mode [ 440.414000][T17123] team_slave_0: entered promiscuous mode [ 440.424386][T17123] team_slave_1: entered promiscuous mode [ 440.442257][T17123] bridge0: port 3(team0) entered blocking state [ 440.448740][T17123] bridge0: port 3(team0) entered forwarding state [ 440.518520][T17128] sctp: [Deprecated]: syz.3.3173 (pid 17128) Use of int in max_burst socket option. [ 440.518520][T17128] Use struct sctp_assoc_value instead [ 440.606848][T13238] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.614156][T13238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.648766][T13238] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.656037][T13238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.788635][ T1155] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 440.821982][T16726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.906656][T17158] bridge12: entered promiscuous mode [ 440.912892][T17158] bridge12: entered allmulticast mode [ 441.619413][T16726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.787348][T16726] veth0_vlan: entered promiscuous mode [ 441.828806][T16726] veth1_vlan: entered promiscuous mode [ 442.032238][T16726] veth0_macvtap: entered promiscuous mode [ 442.068611][T17212] 8021q: VLANs not supported on ip_vti0 [ 442.079998][T17215] netlink: 'syz.3.3195': attribute type 1 has an invalid length. [ 442.090700][T16726] veth1_macvtap: entered promiscuous mode [ 442.154925][T16726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.227660][T16726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.312750][T13238] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.373835][T13238] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.412121][T13238] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.440618][T17232] tunl0: entered promiscuous mode [ 442.471278][T13211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.493800][T17242] __nla_validate_parse: 52 callbacks suppressed [ 442.493821][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3202'. [ 442.630821][T13220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.643943][T13220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.690971][T13238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.701747][T13238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.790512][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3203'. [ 442.918902][T17261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.962567][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.983014][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.992704][T17262] netlink: 'syz.1.3207': attribute type 16 has an invalid length. [ 443.010068][T17262] netlink: 'syz.1.3207': attribute type 17 has an invalid length. [ 443.085173][T17262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.505537][ T5873] syz_tun (unregistering): left allmulticast mode [ 443.520004][ T25] block nbd1: Possible stuck request ffff888025247000: control (read@0,1024B). Runtime 270 seconds [ 443.531116][ T25] block nbd1: Possible stuck request ffff8880252471c0: control (read@1024,1024B). Runtime 270 seconds [ 443.542695][ T25] block nbd1: Possible stuck request ffff888025247380: control (read@2048,1024B). Runtime 270 seconds [ 443.545288][ T5873] syz_tun (unregistering): left promiscuous mode [ 443.555725][ T25] block nbd1: Possible stuck request ffff888025247540: control (read@3072,1024B). Runtime 270 seconds [ 443.579602][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.585711][ T5873] bridge0: port 3(syz_tun) entered disabled state [ 443.590209][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.603640][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.612355][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.620389][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.668772][T17269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3209'. [ 443.694378][T17272] lo: entered allmulticast mode [ 443.702935][T17272] lo: left allmulticast mode [ 443.740927][T17274] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 443.798352][T17282] netlink: 'syz.4.3213': attribute type 4 has an invalid length. [ 443.842671][T17275] lo speed is unknown, defaulting to 1000 [ 444.045891][T17286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3215'. [ 444.330718][T17288] lo speed is unknown, defaulting to 1000 [ 444.556080][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 444.688008][T17311] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3219'. [ 444.767501][T17314] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3220'. [ 444.872998][T17275] chnl_net:caif_netlink_parms(): no params data found [ 444.984058][T17319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3222'. [ 445.039627][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3222'. [ 445.091414][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3222'. [ 445.133936][T17324] netlink: 'syz.1.3223': attribute type 27 has an invalid length. [ 445.151744][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3222'. [ 445.440332][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.679416][ T5864] Bluetooth: hci3: command tx timeout [ 445.698525][T17275] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.705908][T17275] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.713842][T17275] bridge_slave_0: entered allmulticast mode [ 445.735051][T17275] bridge_slave_0: entered promiscuous mode [ 445.751771][T17275] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.759580][T17275] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.769816][T17275] bridge_slave_1: entered allmulticast mode [ 445.781134][T17275] bridge_slave_1: entered promiscuous mode [ 445.961333][T17275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.027132][T17275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.148728][T17362] tipc: Enabled bearer , priority 0 [ 446.164684][T17364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.183066][T17275] team0: Port device team_slave_0 added [ 446.200151][T17275] team0: Port device team_slave_1 added [ 446.217555][T17359] syzkaller0: entered promiscuous mode [ 446.223098][T17359] syzkaller0: entered allmulticast mode [ 446.238386][T17367] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 446.253341][T17359] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 446.263344][T17359] tipc: Enabled bearer , priority 10 [ 446.374212][T17359] tipc: Resetting bearer [ 446.384461][T17275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.402183][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.444605][T17275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.461133][T17358] tipc: Resetting bearer [ 446.480773][T17358] tipc: Disabling bearer [ 446.500683][T17275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.508261][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.534773][T17275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.691779][T17275] hsr_slave_0: entered promiscuous mode [ 446.726571][T17275] hsr_slave_1: entered promiscuous mode [ 446.733217][T17275] debugfs: 'hsr0' already exists in 'hsr' [ 446.758243][T17275] Cannot create hsr debugfs directory [ 446.850250][T17386] netlink: 'syz.4.3242': attribute type 1 has an invalid length. [ 446.976051][T17389] gretap2: entered promiscuous mode [ 447.021193][T17389] bond8: (slave gretap2): making interface the new active one [ 447.079198][T17389] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 447.481785][T17399] syzkaller0: entered promiscuous mode [ 447.490858][T17399] syzkaller0: entered allmulticast mode [ 447.512848][T17275] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 447.756046][ T5864] Bluetooth: hci3: command tx timeout [ 447.855021][T17431] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 447.860229][T17433] __nla_validate_parse: 2 callbacks suppressed [ 447.860250][T17433] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3256'. [ 447.882927][T17434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3256'. [ 448.153096][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3259'. [ 449.431585][T17275] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 449.461594][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'. [ 449.554845][T17275] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 449.667144][T17275] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 449.836755][ T5864] Bluetooth: hci3: command tx timeout [ 449.914568][T17461] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3267'. [ 449.970061][T17275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 449.999992][T17275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 450.061358][T17464] syzkaller0: entered promiscuous mode [ 450.083738][T17464] syzkaller0: entered allmulticast mode [ 450.095280][T17275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 450.133966][T17275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 450.212959][T17471] tipc: Enabled bearer , priority 0 [ 450.260530][T17471] syzkaller0: entered promiscuous mode [ 450.272999][T17471] syzkaller0: entered allmulticast mode [ 450.285054][T17471] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 450.332879][T17471] tipc: Resetting bearer [ 450.342628][T17471] netlink: 'syz.2.3270': attribute type 1 has an invalid length. [ 450.438562][T17470] tipc: Resetting bearer [ 450.463256][T17470] tipc: Disabling bearer [ 450.534299][T17275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.595592][T17275] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.614813][T13240] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.622061][T13240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.670490][T13240] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.677745][T13240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.172979][ T6842] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0 [ 451.209970][ T6842] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 451.284393][T17534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.305071][T17275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.347795][T17538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3288'. [ 451.362077][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3288'. [ 451.391051][T17538] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 451.470399][T17275] veth0_vlan: entered promiscuous mode [ 451.484909][T17542] tipc: Started in network mode [ 451.490920][T17542] tipc: Node identity 52c6cd318dad, cluster identity 4711 [ 451.501823][T17542] tipc: Enabled bearer , priority 0 [ 451.512522][T17542] syzkaller0: entered promiscuous mode [ 451.519340][T17542] syzkaller0: entered allmulticast mode [ 451.533042][T17546] netlink: 'syz.1.3290': attribute type 4 has an invalid length. [ 451.576788][T17275] veth1_vlan: entered promiscuous mode [ 451.589627][T17539] tipc: Resetting bearer [ 451.653014][T17539] tipc: Disabling bearer [ 451.774955][T17275] veth0_macvtap: entered promiscuous mode [ 451.802370][T17275] veth1_macvtap: entered promiscuous mode [ 451.841702][T17275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.890922][T17275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.926979][ T5864] Bluetooth: hci3: command tx timeout [ 451.944927][T13208] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.979568][T13208] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.005515][T13208] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.036479][T13208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.278527][T13240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.315100][T13240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.385556][T17573] tipc: Enabling of bearer rejected, failed to enable media [ 452.424523][T13208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.458801][T13208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.939749][T17596] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3304'. [ 453.479888][T17604] netlink: 'syz.2.3306': attribute type 11 has an invalid length. [ 453.510533][T17604] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3306'. [ 453.637709][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'. [ 453.647453][T17610] netlink: 'syz.0.3307': attribute type 1 has an invalid length. [ 453.655278][T17610] netlink: 'syz.0.3307': attribute type 1 has an invalid length. [ 453.663581][T17610] netlink: 'syz.0.3307': attribute type 2 has an invalid length. [ 453.671634][T17610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3307'. [ 453.686960][T17591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 453.694793][T17591] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 453.794312][T17591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 453.822491][T17591] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 453.867125][T17619] netlink: 'syz.0.3309': attribute type 83 has an invalid length. [ 453.934523][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.947118][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.955492][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.962719][T17622] netlink: 'syz.3.3310': attribute type 2 has an invalid length. [ 453.972226][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.986621][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.007156][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.031545][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.040887][T17622] netlink: 'syz.3.3310': attribute type 1 has an invalid length. [ 454.046000][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.075728][T17622] netlink: 'syz.3.3310': attribute type 1 has an invalid length. [ 454.100623][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.109834][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.177971][T17609] lo speed is unknown, defaulting to 1000 [ 454.188802][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3312'. [ 454.493317][T17645] netlink: 'syz.0.3316': attribute type 1 has an invalid length. [ 454.614149][T17649] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3318'. [ 454.684045][T17652] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 454.736495][T17652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3316'. [ 454.785295][T17645] veth3: entered promiscuous mode [ 454.806651][T17645] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 454.864581][T17652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.871100][ T1155] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 454.997554][T13238] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 455.059983][T17664] syzkaller1: entered promiscuous mode [ 455.134697][T17664] syzkaller1: entered allmulticast mode [ 455.270836][T17609] chnl_net:caif_netlink_parms(): no params data found [ 455.323851][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'. [ 455.337665][ T6842] IPVS: starting estimator thread 0... [ 455.436480][T17678] IPVS: using max 30 ests per chain, 72000 per kthread [ 455.507944][T17655] infiniband syz!: set active [ 455.512938][T17655] infiniband syz!: added team_slave_0 [ 455.524835][T17687] validate_nla: 1 callbacks suppressed [ 455.524855][T17687] netlink: 'syz.2.3327': attribute type 1 has an invalid length. [ 455.546091][T17687] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3327'. [ 455.565169][T17655] RDS/IB: syz!: added [ 455.577778][T17655] smc: adding ib device syz! with port count 1 [ 455.590377][T17655] smc: ib device syz! port 1 has pnetid [ 455.930531][T17609] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.951239][T17609] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.969409][T17609] bridge_slave_0: entered allmulticast mode [ 455.988629][T17609] bridge_slave_0: entered promiscuous mode [ 456.025113][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3329'. [ 456.029361][T17609] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.055874][T17609] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.063205][T17609] bridge_slave_1: entered allmulticast mode [ 456.095168][T17609] bridge_slave_1: entered promiscuous mode [ 456.155902][ T5864] Bluetooth: hci5: command tx timeout [ 456.249128][T17609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.282352][T17609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.497336][T17609] team0: Port device team_slave_0 added [ 456.529179][T17609] team0: Port device team_slave_1 added [ 456.651897][T17609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.666713][T17609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.694375][T17609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.780321][T17609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.809010][T17609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.859306][T17609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.079471][T17609] hsr_slave_0: entered promiscuous mode [ 457.109010][T17609] hsr_slave_1: entered promiscuous mode [ 457.122884][T17609] debugfs: 'hsr0' already exists in 'hsr' [ 457.130317][T17609] Cannot create hsr debugfs directory [ 457.794455][T17609] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 457.977715][T17609] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 458.164065][T17609] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 458.249706][ T51] Bluetooth: hci5: command tx timeout [ 458.285356][T17609] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 458.583947][T17609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 458.681637][T17609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 458.736354][T17609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 458.808414][T17609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 459.042073][T17609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.081061][T17809] __nla_validate_parse: 1 callbacks suppressed [ 459.081080][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3359'. [ 459.151705][T17609] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.331542][T13238] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.338809][T13238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.388580][T13238] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.395928][T13238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.504936][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 459.511666][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 459.519641][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 459.527631][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 459.535537][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 459.543538][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 459.551410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 459.559383][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 459.567257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 459.575235][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 459.583111][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 459.591079][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 459.598959][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 459.606953][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 459.614788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 460.051002][T17609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.082103][T17830] lo speed is unknown, defaulting to 1000 [ 460.322168][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 460.559564][T17609] veth0_vlan: entered promiscuous mode [ 460.591620][T17609] veth1_vlan: entered promiscuous mode [ 460.659447][T17609] veth0_macvtap: entered promiscuous mode [ 460.681238][T17609] veth1_macvtap: entered promiscuous mode [ 460.756965][T17609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.789893][T17609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.817127][T13208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.835768][T13208] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.855033][T13208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.875161][T13208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.200572][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3367'. [ 461.289592][T13238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.338726][T13238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.513296][T13208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.556411][T13208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.225427][T17869] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3375'. [ 462.259169][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3375'. [ 462.313157][T17874] Bluetooth: MGMT ver 1.23 [ 462.396595][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'. [ 462.401144][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 462.468047][T17880] netlink: 'syz.4.3379': attribute type 2 has an invalid length. [ 462.481033][T17883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3380'. [ 462.494428][T17880] netlink: 'syz.4.3379': attribute type 2 has an invalid length. [ 462.504440][T17880] netlink: 'syz.4.3379': attribute type 2 has an invalid length. [ 462.513794][T17880] netlink: 'syz.4.3379': attribute type 2 has an invalid length. [ 462.523186][T17880] netlink: 'syz.4.3379': attribute type 2 has an invalid length. [ 462.532022][T17880] netlink: 'syz.4.3379': attribute type 2 has an invalid length. [ 462.533492][T17883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3380'. [ 462.543258][T17880] netlink: 'syz.4.3379': attribute type 2 has an invalid length. [ 462.580957][T17880] netlink: 'syz.4.3379': attribute type 2 has an invalid length. [ 462.605166][T17880] netlink: 'syz.4.3379': attribute type 2 has an invalid length. [ 462.631494][T17887] netlink: 'syz.1.3381': attribute type 29 has an invalid length. [ 462.891502][T17903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3384'. [ 462.942049][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 463.145367][T17914] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.153881][T17914] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.161024][T17914] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.167658][T17914] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.192226][T17914] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.224179][T17914] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.245123][T17914] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.289019][T17924] syzkaller0: entered promiscuous mode [ 463.294621][T17924] syzkaller0: entered allmulticast mode [ 463.314425][T17924] sch_tbf: peakrate 9 is lower than or equals to rate 11740492367495556209 ! [ 463.747685][T17946] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3400'. [ 463.858981][T17951] sctp: [Deprecated]: syz.3.3402 (pid 17951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.858981][T17951] Use struct sctp_sack_info instead [ 464.230284][T17930] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 464.372972][T17972] __nla_validate_parse: 3 callbacks suppressed [ 464.372992][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3408'. [ 464.475904][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 464.870130][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 464.987728][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3417'. [ 464.996877][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3417'. [ 465.007170][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3417'. [ 465.187908][T18013] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 465.224257][T18015] tipc: Enabling of bearer rejected, failed to enable media [ 465.582684][T18030] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 465.603989][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'. [ 465.614300][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3425'. [ 466.213066][T18059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3434'. [ 466.244706][T18063] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3435'. [ 466.275303][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 466.333565][T18063] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 466.389380][T18063] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 466.412100][T18074] sctp: [Deprecated]: syz.4.3436 (pid 18074) Use of int in max_burst socket option. [ 466.412100][T18074] Use struct sctp_assoc_value instead [ 466.454657][T18063] gretap1: entered promiscuous mode [ 466.488801][T18063] gretap1: entered allmulticast mode [ 466.561605][T18078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.657318][T18078] bond2: (slave ip6erspan0): making interface the new active one [ 466.682498][T18083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.690890][T18078] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 466.781352][T18092] syzkaller1: entered promiscuous mode [ 466.794754][T18092] syzkaller1: entered allmulticast mode [ 466.808469][T18094] tipc: Started in network mode [ 466.831470][T18094] tipc: Node identity daeb1438aad2, cluster identity 4711 [ 466.868004][T18094] tipc: Enabled bearer , priority 0 [ 466.885003][T18099] syzkaller0: entered promiscuous mode [ 466.892220][T18099] syzkaller0: entered allmulticast mode [ 466.939908][T18094] tipc: Resetting bearer [ 466.969616][T18090] tipc: Resetting bearer [ 467.004252][T18090] tipc: Disabling bearer [ 467.319961][ T3535] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.396021][ T3535] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.404819][ T3535] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.430735][ T3535] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.640704][T18133] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20001 [ 467.838826][T18143] tipc: Started in network mode [ 467.857632][T18143] tipc: Node identity 02c1bbc3f999, cluster identity 4711 [ 467.871730][T18143] tipc: Enabled bearer , priority 0 [ 468.109859][T18146] syzkaller0: entered promiscuous mode [ 468.115397][T18146] syzkaller0: entered allmulticast mode [ 468.128082][T18146] tipc: Resetting bearer [ 468.163630][T18140] tipc: Resetting bearer [ 468.876509][T10840] tipc: Node number set to 4216896451 [ 470.058427][T18140] tipc: Disabling bearer [ 470.236246][T18173] Bluetooth: MGMT ver 1.23 [ 470.256586][T18173] __nla_validate_parse: 8 callbacks suppressed [ 470.256605][T18173] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3465'. [ 470.340306][T18181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3467'. [ 470.350383][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'. [ 470.368316][T18183] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3468'. [ 470.474323][T18190] validate_nla: 31 callbacks suppressed [ 470.474344][T18190] netlink: 'syz.3.3469': attribute type 1 has an invalid length. [ 470.550921][T18190] bond1: entered promiscuous mode [ 470.556815][T18190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.607737][T18195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.643905][T18195] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 470.655109][T18195] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 470.673179][T18195] bond1: (slave wireguard0): making interface the new active one [ 470.684612][T18203] sctp: [Deprecated]: syz.4.3470 (pid 18203) Use of int in maxseg socket option. [ 470.684612][T18203] Use struct sctp_assoc_value instead [ 470.699093][T18195] wireguard0: entered promiscuous mode [ 470.702223][T18195] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 470.834257][T18207] vxcan1: tx address claim with dlc 1 [ 470.843771][T18203] tipc: New replicast peer: 0.0.0.0 [ 470.850363][T18203] tipc: Enabled bearer , priority 10 [ 470.856952][T18207] tipc: Enabling of bearer rejected, already enabled [ 470.901165][T18213] tipc: Enabling of bearer rejected, failed to enable media [ 470.931756][T18214] syzkaller0: entered promiscuous mode [ 470.956356][T18214] syzkaller0: entered allmulticast mode [ 471.305413][T18240] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 471.317771][T18242] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3480'. [ 471.337042][T18242] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3480'. [ 471.438827][T18246] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3483'. [ 471.976368][ T6842] tipc: Node number set to 1882788920 [ 472.459248][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3498'. [ 472.632298][T18319] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 472.753492][T18325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3504'. [ 472.841768][T18333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3506'. [ 473.163130][T18349] dvmrp0: entered allmulticast mode [ 473.327698][T18358] netlink: 'syz.1.3511': attribute type 58 has an invalid length. [ 473.601057][ T25] block nbd1: Possible stuck request ffff888025247000: control (read@0,1024B). Runtime 300 seconds [ 473.612064][ T25] block nbd1: Possible stuck request ffff8880252471c0: control (read@1024,1024B). Runtime 300 seconds [ 473.623619][ T25] block nbd1: Possible stuck request ffff888025247380: control (read@2048,1024B). Runtime 300 seconds [ 473.636974][ T25] block nbd1: Possible stuck request ffff888025247540: control (read@3072,1024B). Runtime 300 seconds [ 473.669951][T18378] veth1_to_bond: entered allmulticast mode [ 473.677927][T18378] netlink: 'syz.3.3518': attribute type 4 has an invalid length. [ 473.694593][T18377] veth1_to_bond: left allmulticast mode [ 474.704211][T18425] bridge_slave_0: left allmulticast mode [ 474.718294][T18425] bridge_slave_0: left promiscuous mode [ 474.724163][T18425] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.763163][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 474.773437][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 474.785776][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 474.797741][T18425] bridge_slave_1: left allmulticast mode [ 474.803694][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 474.811318][T18425] bridge_slave_1: left promiscuous mode [ 474.819580][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.819996][T18425] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.860640][T18425] bond0: (slave bond_slave_0): Releasing backup interface [ 474.902050][T18425] bond0: (slave bond_slave_1): Releasing backup interface [ 474.943607][T18425] team0: Port device team_slave_0 removed [ 474.988082][T18425] team0: Port device team_slave_1 removed [ 475.012487][T18425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.044860][T18425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.065482][T18425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.075107][T18425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.108350][T18425] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 475.186403][ T5927] syz!: Port: 1 Link DOWN [ 475.241639][T18428] lo speed is unknown, defaulting to 1000 [ 475.243694][T18449] xt_socket: unknown flags 0x50 [ 475.774198][T18457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.913072][T18474] __nla_validate_parse: 13 callbacks suppressed [ 475.913102][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3548'. [ 475.964281][T18457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.148318][T18457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.201153][T18480] netlink: 'syz.0.3550': attribute type 21 has an invalid length. [ 476.234767][T18480] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 476.311348][T18457] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.401771][T18484] veth5: entered promiscuous mode [ 476.594192][T18494] block nbd2: Unsupported socket: shutdown callout must be supported. [ 476.620455][T13237] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.662235][T13237] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.724506][T13237] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.876286][ T51] Bluetooth: hci4: command tx timeout [ 476.916767][T13240] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.252101][T18519] openvswitch: netlink: Missing key (keys=40, expected=80) [ 477.323119][T18428] chnl_net:caif_netlink_parms(): no params data found [ 477.404363][T18523] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3563'. [ 477.680620][T18428] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.701888][T18428] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.710670][T18428] bridge_slave_0: entered allmulticast mode [ 477.727656][T18428] bridge_slave_0: entered promiscuous mode [ 477.736797][T18428] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.744236][T18428] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.751931][T18428] bridge_slave_1: entered allmulticast mode [ 477.770910][T18428] bridge_slave_1: entered promiscuous mode [ 477.861920][T18428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.887928][T18428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.943521][T18549] sock: sock_set_timeout: `syz.4.3571' (pid 18549) tries to set negative timeout [ 477.964747][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3569'. [ 477.979531][T18428] team0: Port device team_slave_0 added [ 478.004798][T18428] team0: Port device team_slave_1 added [ 478.013208][T18552] netlink: zone id is out of range [ 478.031712][T18552] netlink: del zone limit has 4 unknown bytes [ 478.137085][T18428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.148265][T18428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.182405][T18428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.224934][T18556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.233790][T18428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.248031][T18428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.280542][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3574'. [ 478.283301][T18428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.326195][T18561] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3575'. [ 478.358792][T18559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3574'. [ 478.423612][T18562] netlink: 'syz.1.3575': attribute type 4 has an invalid length. [ 478.448478][T18562] netlink: 'syz.1.3575': attribute type 4 has an invalid length. [ 478.500335][T18428] hsr_slave_0: entered promiscuous mode [ 478.514610][T18428] hsr_slave_1: entered promiscuous mode [ 478.521633][T18428] debugfs: 'hsr0' already exists in 'hsr' [ 478.533751][T18428] Cannot create hsr debugfs directory [ 478.555322][T18562] netlink: 'syz.1.3575': attribute type 4 has an invalid length. [ 478.574361][T18562] netlink: 'syz.1.3575': attribute type 4 has an invalid length. [ 478.664575][T18562] netlink: 'syz.1.3575': attribute type 4 has an invalid length. [ 478.691741][T18562] netlink: 'syz.1.3575': attribute type 4 has an invalid length. [ 478.700319][T18562] netlink: 'syz.1.3575': attribute type 4 has an invalid length. [ 478.732211][T18562] netlink: 'syz.1.3575': attribute type 4 has an invalid length. [ 478.740878][T18562] netlink: 'syz.1.3575': attribute type 4 has an invalid length. [ 478.760715][T18568] lo speed is unknown, defaulting to 1000 [ 478.763373][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3580'. [ 478.950754][T18578] ip6gre2: entered allmulticast mode [ 478.956572][ T51] Bluetooth: hci4: command tx timeout [ 479.261098][T18586] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 479.275414][T18587] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 479.562449][T18428] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 479.613751][T18428] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 479.849270][T18428] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 479.908921][T18610] veth0_to_team: entered promiscuous mode [ 479.923442][T18610] veth0_to_team: entered allmulticast mode [ 479.949221][T18428] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.963693][T18616] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3591'. [ 480.185384][T18633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3596'. [ 480.410610][T18428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.510618][T18428] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.541960][T13238] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.549208][T13238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.594613][T18647] sctp: [Deprecated]: syz.3.3600 (pid 18647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.594613][T18647] Use struct sctp_sack_info instead [ 480.615817][T13238] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.623037][T13238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.697292][T18650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3602'. [ 480.859739][T18656] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 480.957813][T18658] sctp: [Deprecated]: syz.0.3604 (pid 18658) Use of int in maxseg socket option. [ 480.957813][T18658] Use struct sctp_assoc_value instead [ 480.984404][T18660] syzkaller1: entered promiscuous mode [ 481.006059][T18660] syzkaller1: entered allmulticast mode [ 481.037069][ T51] Bluetooth: hci4: command tx timeout [ 481.421046][T18428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.518934][T18685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3613'. [ 481.552365][T18679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3611'. [ 481.741152][T18694] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3614'. [ 481.861914][T18705] validate_nla: 25 callbacks suppressed [ 481.861935][T18705] netlink: 'syz.3.3618': attribute type 4 has an invalid length. [ 481.882486][T18707] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3617'. [ 481.904599][T18706] netlink: 'syz.3.3618': attribute type 4 has an invalid length. [ 482.174310][T18722] macvlan0: entered promiscuous mode [ 482.182276][T18722] macvlan0: entered allmulticast mode [ 482.269030][T18729] gretap0: entered promiscuous mode [ 482.274702][T18729] vlan2: entered promiscuous mode [ 482.326976][T18735] netlink: 'syz.3.3625': attribute type 16 has an invalid length. [ 482.335491][T18735] netlink: 'syz.3.3625': attribute type 17 has an invalid length. [ 482.404039][T18735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.420742][T18428] veth0_vlan: entered promiscuous mode [ 482.970008][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3628'. [ 483.126300][ T51] Bluetooth: hci4: command tx timeout [ 484.523065][T18737] netlink: 'syz.0.3626': attribute type 11 has an invalid length. [ 484.534110][T18742] net veth1_virt_wifi .: renamed from virt_wifi0 [ 484.608418][T18428] veth1_vlan: entered promiscuous mode [ 484.739610][T18428] veth0_macvtap: entered promiscuous mode [ 484.778860][T18428] veth1_macvtap: entered promiscuous mode [ 484.837049][T18763] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 484.898541][T18428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.950590][T18428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.041005][ T1155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.075140][ T1155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.095406][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3635'. [ 485.107610][ T1155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.134577][ T1155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.322286][T18782] netlink: 'syz.3.3638': attribute type 10 has an invalid length. [ 485.334309][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.342310][T18782] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 485.365293][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.462373][T13240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.490490][T13240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.572514][T13237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.595480][T13237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.794465][T18804] delete_channel: no stack [ 486.069417][T18809] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.264302][T18809] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.454665][T18809] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.589305][T18831] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.596999][T18831] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.878036][T18831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.940603][T18831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.053964][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3657'. [ 487.064359][T18854] netlink: 'syz.3.3657': attribute type 30 has an invalid length. [ 487.072527][T18854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3657'. [ 487.298543][T18809] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.316780][T18836] tipc: Enabling of bearer rejected, media not registered [ 487.357998][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.372515][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.435186][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.466564][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.607651][T18864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3660'. [ 487.623606][T18864] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3660'. [ 487.643188][T18866] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3661'. [ 487.662792][T18864] netlink: 'syz.0.3660': attribute type 39 has an invalid length. [ 487.822875][T13208] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.853528][T13237] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.889741][T13208] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.929747][T13208] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.953554][T18876] netlink: 'syz.3.3664': attribute type 12 has an invalid length. [ 488.031715][T18880] netlink: 'syz.5.3667': attribute type 2 has an invalid length. [ 501.760225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.676690][ T25] block nbd1: Possible stuck request ffff888025247000: control (read@0,1024B). Runtime 330 seconds [ 503.687652][ T25] block nbd1: Possible stuck request ffff8880252471c0: control (read@1024,1024B). Runtime 330 seconds [ 503.698797][ T25] block nbd1: Possible stuck request ffff888025247380: control (read@2048,1024B). Runtime 330 seconds [ 503.711159][ T25] block nbd1: Possible stuck request ffff888025247540: control (read@3072,1024B). Runtime 330 seconds [ 506.880694][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.169475][T18907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3677'. [ 519.195307][T18908] netlink: 'syz.5.3675': attribute type 29 has an invalid length. [ 519.343940][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3680'. [ 519.424188][T18925] netlink: 'syz.4.3681': attribute type 3 has an invalid length. [ 519.634335][T18935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3683'. [ 519.657303][T18940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3686'. [ 519.667742][T18936] netlink: 212240 bytes leftover after parsing attributes in process `syz.1.3685'. [ 519.685849][T18935] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 519.886474][T18950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3689'. [ 520.201616][T18972] netlink: 'syz.1.3696': attribute type 33 has an invalid length. [ 520.205218][T18968] ip6erspan0: entered promiscuous mode [ 520.522526][T18990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3702'. [ 520.795357][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3709'. [ 520.854122][T19007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.891176][T19007] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 521.276956][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 521.394726][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3720'. [ 521.492567][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3721'. [ 521.513343][ T5927] IPVS: starting estimator thread 0... [ 521.614807][T19046] IPVS: using max 26 ests per chain, 62400 per kthread [ 521.675140][T19054] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 521.686982][T19054] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 522.061960][T19070] tipc: Started in network mode [ 522.069659][T19070] tipc: Node identity 1699c860d5d8, cluster identity 4711 [ 522.086216][T19070] tipc: Enabled bearer , priority 0 [ 522.145041][T19070] syzkaller0: entered promiscuous mode [ 522.150878][T19070] syzkaller0: entered allmulticast mode [ 522.209855][T19073] wg1: entered promiscuous mode [ 522.227581][T19070] tipc: Resetting bearer [ 522.306631][T19070] tipc: Disabling bearer [ 522.464673][T19092] sock: sock_timestamping_bind_phc: sock not bind to device [ 522.632360][T19100] netlink: 'syz.5.3739': attribute type 1 has an invalid length. [ 522.663156][T19100] netlink: 'syz.5.3739': attribute type 1 has an invalid length. [ 522.684328][T19100] netlink: 'syz.5.3739': attribute type 1 has an invalid length. [ 522.699452][T19103] syzkaller1: entered promiscuous mode [ 522.720588][T19103] syzkaller1: entered allmulticast mode [ 522.772465][T19111] netlink: 'syz.4.3743': attribute type 1 has an invalid length. [ 522.874568][T19117] bond3: (slave geneve2): making interface the new active one [ 522.954285][T19117] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 522.965332][T13220] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 523.018615][T13220] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 523.057878][T13220] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 523.095725][T13220] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 523.500472][T19147] IPVS: length: 8 != 1152 [ 525.023706][T19214] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.039636][T19217] __nla_validate_parse: 12 callbacks suppressed [ 525.039655][T19217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3770'. [ 525.186054][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3774'. [ 525.349333][T19233] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3776'. [ 525.484663][T19241] netlink: 'syz.1.3778': attribute type 6 has an invalid length. [ 525.584301][T19243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3779'. [ 525.650507][T19251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3781'. [ 525.680811][T19252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3781'. [ 525.778539][T19260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3784'. [ 525.811464][T19260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3784'. [ 525.897903][T19271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3788'. [ 526.037990][ T5927] IPVS: starting estimator thread 0... [ 526.112055][T19277] bridge_slave_0: left allmulticast mode [ 526.120229][T19277] bridge_slave_0: left promiscuous mode [ 526.129298][T19277] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.142693][T19281] IPVS: using max 26 ests per chain, 62400 per kthread [ 526.154844][T19277] bridge_slave_1: left allmulticast mode [ 526.166062][T19277] bridge_slave_1: left promiscuous mode [ 526.181424][T19277] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.292768][T19277] bond0: (slave bond_slave_0): Releasing backup interface [ 526.329351][T19277] bond0: (slave bond_slave_1): Releasing backup interface [ 526.388135][T19277] team0: Port device team_slave_0 removed [ 526.406358][T19277] team0: Port device team_slave_1 removed [ 526.415481][T19277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.432664][T19303] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3798'. [ 526.444611][T19277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.464851][T19277] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 526.699016][T19311] netlink: 'syz.3.3801': attribute type 4 has an invalid length. [ 527.360455][T19348] netlink: 'syz.5.3810': attribute type 83 has an invalid length. [ 527.421983][T19348] veth0_to_team: entered promiscuous mode [ 527.441110][T19350] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 527.449560][T19348] veth0_to_team: entered allmulticast mode [ 527.482533][T19350] sctp: [Deprecated]: syz.3.3811 (pid 19350) Use of int in maxseg socket option. [ 527.482533][T19350] Use struct sctp_assoc_value instead [ 527.505027][T19355] netlink: 'syz.0.3813': attribute type 1 has an invalid length. [ 528.147355][T19397] netlink: 'syz.3.3827': attribute type 6 has an invalid length. [ 528.562130][T19422] netlink: 'syz.4.3833': attribute type 1 has an invalid length. [ 528.834858][T19421] bond4: (slave gretap1): making interface the new active one [ 528.843247][T19421] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 529.134896][T19458] netlink: 'syz.5.3842': attribute type 1 has an invalid length. [ 529.282899][T19465] netlink: 'syz.5.3842': attribute type 75 has an invalid length. [ 529.288508][T19458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.381178][T19461] vlan2: entered promiscuous mode [ 529.386701][T19461] bond1: entered promiscuous mode [ 529.392013][T19461] vlan2: entered allmulticast mode [ 529.397240][T19461] bond1: entered allmulticast mode [ 529.420829][T19458] gretap1: entered promiscuous mode [ 529.434106][T19458] bond1: (slave gretap1): making interface the new active one [ 529.442214][T19458] gretap1: entered allmulticast mode [ 529.448998][T19458] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 529.463911][T19474] tipc: Enabling of bearer rejected, failed to enable media [ 529.564942][T19478] sctp: [Deprecated]: syz.4.3850 (pid 19478) Use of int in maxseg socket option. [ 529.564942][T19478] Use struct sctp_assoc_value instead [ 529.603298][T19480] Bluetooth: MGMT ver 1.23 [ 529.770842][T19491] lo: entered allmulticast mode [ 529.776350][T19491] lo: left allmulticast mode [ 530.060155][ T30] audit: type=1800 audit(1757228638.341:4): pid=19494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3853" name="memory.events" dev="tmpfs" ino=556 res=0 errno=0 [ 530.306424][T19505] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 530.397579][T19507] netlink: 'syz.4.3857': attribute type 23 has an invalid length. [ 530.433173][T19509] netlink: 'syz.1.3859': attribute type 1 has an invalid length. [ 530.449508][T19511] __nla_validate_parse: 16 callbacks suppressed [ 530.449532][T19511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3858'. [ 530.698962][T19524] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3862'. [ 530.712091][T19528] sctp: [Deprecated]: syz.4.3863 (pid 19528) Use of int in max_burst socket option. [ 530.712091][T19528] Use struct sctp_assoc_value instead [ 530.734779][T19528] sctp: [Deprecated]: syz.4.3863 (pid 19528) Use of int in max_burst socket option. [ 530.734779][T19528] Use struct sctp_assoc_value instead [ 530.993271][T19539] netlink: zone id is out of range [ 531.014443][T19539] netlink: zone id is out of range [ 531.021561][T19539] netlink: zone id is out of range [ 531.033675][T19539] netlink: zone id is out of range [ 531.045078][T19539] netlink: zone id is out of range [ 531.092860][T19539] netlink: zone id is out of range [ 531.154080][T19539] netlink: zone id is out of range [ 531.202818][T19545] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3866'. [ 531.265993][T19549] tipc: Enabled bearer , priority 0 [ 531.287234][T19549] syzkaller0: entered promiscuous mode [ 531.292760][T19549] syzkaller0: entered allmulticast mode [ 531.408999][T19549] tipc: Resetting bearer [ 531.439084][T19558] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3871'. [ 531.440070][T19547] tipc: Resetting bearer [ 531.510176][T19547] tipc: Disabling bearer [ 532.123714][T19595] netlink: 'syz.4.3886': attribute type 6 has an invalid length. [ 532.203885][T19595] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3886'. [ 532.414234][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3894'. [ 532.610433][T19627] sit0: entered promiscuous mode [ 532.634835][T19627] netlink: 'syz.4.3896': attribute type 1 has an invalid length. [ 532.653129][T19627] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3896'. [ 532.702243][T19638] netlink: 'syz.5.3897': attribute type 10 has an invalid length. [ 532.846108][T19638] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 533.002445][T19646] nbd: must specify an index to disconnect [ 533.210789][T19664] netlink: 'syz.4.3906': attribute type 10 has an invalid length. [ 533.228776][T19664] team0: Device ipvlan1 failed to register rx_handler [ 533.596694][T19684] netlink: 152064 bytes leftover after parsing attributes in process `syz.3.3913'. [ 533.617147][T19684] net_ratelimit: 18 callbacks suppressed [ 533.617166][T19684] netlink: zone id is out of range [ 533.636333][T19684] netlink: zone id is out of range [ 533.656399][T19684] netlink: zone id is out of range [ 533.661577][T19684] netlink: zone id is out of range [ 533.686520][T19684] netlink: zone id is out of range [ 533.692138][T19684] netlink: zone id is out of range [ 533.705239][T19695] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3914'. [ 533.705700][T19684] netlink: zone id is out of range [ 533.733242][T19684] netlink: zone id is out of range [ 533.743998][T19684] netlink: zone id is out of range [ 533.749497][T19684] netlink: zone id is out of range [ 533.776951][ T25] block nbd1: Possible stuck request ffff888025247000: control (read@0,1024B). Runtime 360 seconds [ 533.788542][ T25] block nbd1: Possible stuck request ffff8880252471c0: control (read@1024,1024B). Runtime 360 seconds [ 533.799831][ T25] block nbd1: Possible stuck request ffff888025247380: control (read@2048,1024B). Runtime 360 seconds [ 533.811715][ T25] block nbd1: Possible stuck request ffff888025247540: control (read@3072,1024B). Runtime 360 seconds [ 534.185498][T19720] sctp: [Deprecated]: syz.3.3922 (pid 19720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 534.185498][T19720] Use struct sctp_sack_info instead [ 534.576126][T19749] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3931'. [ 534.640204][T19756] netlink: 'syz.3.3932': attribute type 3 has an invalid length. [ 534.662466][T19756] netlink: 'syz.3.3932': attribute type 3 has an invalid length. [ 534.693423][T19756] netlink: 'syz.3.3932': attribute type 3 has an invalid length. [ 535.460771][T19799] __nla_validate_parse: 1 callbacks suppressed [ 535.460790][T19799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3941'. [ 535.486959][T19798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3941'. [ 535.558831][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3942'. [ 535.744276][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'. [ 536.138516][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3949'. [ 536.409950][T19838] netlink: 'syz.0.3953': attribute type 1 has an invalid length. [ 536.472569][T19841] bond4 (unregistering): Released all slaves [ 536.504089][T19851] pim6reg1: entered promiscuous mode [ 536.515270][T19851] pim6reg1: entered allmulticast mode [ 536.756701][T19867] syzkaller1: entered promiscuous mode [ 536.780900][T19867] syzkaller1: entered allmulticast mode [ 536.808424][T19878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3961'. [ 537.873474][T19936] team0: entered allmulticast mode [ 537.879248][T19936] geneve0: entered allmulticast mode [ 538.163831][T19953] netlink: 'syz.0.3983': attribute type 11 has an invalid length. [ 538.179945][T19953] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3983'. [ 538.244286][T19953] netlink: 'syz.0.3983': attribute type 10 has an invalid length. [ 538.358303][T19964] netlink: 'syz.5.3984': attribute type 1 has an invalid length. [ 538.384438][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3984'. [ 538.401924][T19961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3986'. [ 538.416985][T19963] netlink: 'syz.5.3984': attribute type 3 has an invalid length. [ 538.425316][T19963] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3984'. [ 538.564877][T19976] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20000 [ 538.734740][T19969] net_ratelimit: 218 callbacks suppressed [ 538.734763][T19969] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 538.882875][T19982] macvtap1: entered promiscuous mode [ 538.889517][T19982] vlan0: entered promiscuous mode [ 538.895246][T19982] macvtap1: entered allmulticast mode [ 538.910583][T19982] vlan0: entered allmulticast mode [ 538.940554][T19982] veth0_vlan: entered allmulticast mode [ 539.202977][T20008] nbd: must specify at least one socket [ 539.514731][T19992] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 539.536611][T19992] bond5: (slave vcan1): Error -95 calling set_mac_address [ 539.657139][T20018] dvmrp1: entered allmulticast mode [ 539.662624][T20022] dvmrp1: left allmulticast mode [ 540.377043][T20065] nbd: must specify a size in bytes for the device [ 540.509073][T20072] netlink: zone id is out of range [ 540.515273][T20072] netlink: zone id is out of range [ 540.522387][T20072] netlink: zone id is out of range [ 540.545768][T20072] netlink: zone id is out of range [ 540.550947][T20072] netlink: zone id is out of range [ 540.583993][T20072] netlink: del zone limit has 4 unknown bytes [ 540.645962][T20072] __nla_validate_parse: 13 callbacks suppressed [ 540.645983][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4014'. [ 540.672560][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4018'. [ 540.791899][T20086] IPVS: set_ctl: invalid protocol: 2 172.30.1.6:20004 [ 540.848109][T20096] : renamed from bridge_slave_0 [ 540.859501][T20098] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4021'. [ 540.869191][T20092] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4021'. [ 540.886391][T20087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4019'. [ 540.899396][T20087] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 540.901835][T20097] ip6gre2: entered allmulticast mode [ 540.923692][T20096] netlink: 561 bytes leftover after parsing attributes in process `syz.1.4022'. [ 541.127636][T20100] lo speed is unknown, defaulting to 1000 [ 541.171236][T20111] tipc: Enabling of bearer rejected, media not registered [ 541.298275][T20115] IPv4: Oversized IP packet from 127.202.26.0 [ 541.318472][T20115] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4028'. [ 541.480557][T20117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4029'. [ 541.562207][T20117] lo speed is unknown, defaulting to 1000 [ 541.638925][T20124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4031'. [ 541.688784][T20127] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4032'. [ 542.064291][T20136] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20002 [ 542.384749][T20140] warn_alloc: 1 callbacks suppressed [ 542.384767][T20140] syz.3.4034: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 542.435801][T20140] CPU: 0 UID: 0 PID: 20140 Comm: syz.3.4034 Not tainted syzkaller #0 PREEMPT(full) [ 542.435833][T20140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.435847][T20140] Call Trace: [ 542.435855][T20140] [ 542.435865][T20140] dump_stack_lvl+0x189/0x250 [ 542.435901][T20140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.435929][T20140] ? __pfx__printk+0x10/0x10 [ 542.435961][T20140] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 542.435987][T20140] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 542.436020][T20140] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 542.436049][T20140] warn_alloc+0x214/0x310 [ 542.436083][T20140] ? stack_depot_save_flags+0x40/0x860 [ 542.436116][T20140] ? __pfx_warn_alloc+0x10/0x10 [ 542.436150][T20140] ? kasan_save_track+0x4f/0x80 [ 542.436178][T20140] ? xskq_create+0x56/0x170 [ 542.436207][T20140] ? xsk_init_queue+0xb0/0x110 [ 542.436234][T20140] ? xsk_setsockopt+0x4dc/0x8d0 [ 542.436261][T20140] ? do_sock_setsockopt+0x17c/0x1b0 [ 542.436281][T20140] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 542.436302][T20140] ? do_syscall_64+0xfa/0x3b0 [ 542.436320][T20140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.436350][T20140] __vmalloc_node_range_noprof+0x125/0x12f0 [ 542.436417][T20140] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 542.436465][T20140] ? __kasan_kmalloc+0x93/0xb0 [ 542.436498][T20140] vmalloc_user_noprof+0xad/0xf0 [ 542.436529][T20140] ? xskq_create+0xbf/0x170 [ 542.436561][T20140] xskq_create+0xbf/0x170 [ 542.436595][T20140] xsk_init_queue+0xb0/0x110 [ 542.436628][T20140] xsk_setsockopt+0x4dc/0x8d0 [ 542.436660][T20140] ? __pfx_xsk_setsockopt+0x10/0x10 [ 542.436689][T20140] ? __pfx_aa_sk_perm+0x10/0x10 [ 542.436725][T20140] ? aa_sock_opt_perm+0xff/0x1b0 [ 542.436749][T20140] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 542.436772][T20140] ? __pfx_xsk_setsockopt+0x10/0x10 [ 542.436802][T20140] do_sock_setsockopt+0x17c/0x1b0 [ 542.436830][T20140] __x64_sys_setsockopt+0x13f/0x1b0 [ 542.436859][T20140] do_syscall_64+0xfa/0x3b0 [ 542.436877][T20140] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.436909][T20140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.436929][T20140] ? clear_bhb_loop+0x60/0xb0 [ 542.436956][T20140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.436977][T20140] RIP: 0033:0x7f33b018ebe9 [ 542.436995][T20140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.437013][T20140] RSP: 002b:00007f33b0f6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 542.437036][T20140] RAX: ffffffffffffffda RBX: 00007f33b03c5fa0 RCX: 00007f33b018ebe9 [ 542.437051][T20140] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 542.437064][T20140] RBP: 00007f33b0211e19 R08: 0000000000000004 R09: 0000000000000000 [ 542.437076][T20140] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.437089][T20140] R13: 00007f33b03c6038 R14: 00007f33b03c5fa0 R15: 00007ffe11fd8408 [ 542.437124][T20140] [ 542.442493][T20140] Mem-Info: [ 542.750886][T20140] active_anon:7511 inactive_anon:0 isolated_anon:0 [ 542.750886][T20140] active_file:3016 inactive_file:40002 isolated_file:0 [ 542.750886][T20140] unevictable:768 dirty:83 writeback:0 [ 542.750886][T20140] slab_reclaimable:13199 slab_unreclaimable:134414 [ 542.750886][T20140] mapped:34270 shmem:1365 pagetables:1135 [ 542.750886][T20140] sec_pagetables:0 bounce:0 [ 542.750886][T20140] kernel_misc_reclaimable:0 [ 542.750886][T20140] free:1276941 free_pcp:12260 free_cma:0 [ 542.800316][T20140] Node 0 active_anon:30244kB inactive_anon:0kB active_file:12064kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137080kB dirty:332kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15380kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 542.833292][T20140] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 542.865353][T20140] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 542.959782][T20140] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 542.998644][T20140] Node 0 DMA32 free:1198272kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30296kB inactive_anon:0kB active_file:12064kB inactive_file:158220kB unevictable:1536kB writepending:332kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:33592kB local_pcp:20828kB free_cma:0kB [ 543.084995][T20140] lowmem_reserve[]: 0 0 1 1 1 [ 543.092659][T20140] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 543.129981][T20140] lowmem_reserve[]: 0 0 0 0 0 [ 543.139985][T20140] Node 1 Normal free:3893732kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15328kB local_pcp:7424kB free_cma:0kB [ 543.211041][T20140] lowmem_reserve[]: 0 0 0 0 0 [ 543.216911][T20140] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 543.230213][T20140] Node 0 DMA32: 829*4kB (ME) 187*8kB (UME) 49*16kB (ME) 337*32kB (UME) 105*64kB (UM) 84*128kB (UME) 21*256kB (UM) 9*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 278*4096kB (UM) = 1197884kB [ 543.249927][T20140] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 543.292561][T20140] Node 1 Normal: 187*4kB (UME) 55*8kB (UME) 42*16kB (UME) 161*32kB (UME) 58*64kB (UME) 14*128kB (UME) 3*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3893732kB [ 543.320709][T20140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 543.343118][T20140] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 543.368186][T20140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 543.389614][T20140] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 543.418297][T20140] 44380 total pagecache pages [ 543.427806][T20140] 0 pages in swap cache [ 543.436594][T20140] Free swap = 124996kB [ 543.448394][T20140] Total swap = 124996kB [ 543.457294][T20140] 2097051 pages RAM [ 543.471977][T20140] 0 pages HighMem/MovableOnly [ 543.478827][T20140] 425667 pages reserved [ 543.483146][T20140] 0 pages cma reserved [ 544.228579][T20182] IPVS: Error joining to the multicast group [ 544.847207][T20201] netlink: 'syz.5.4054': attribute type 1 has an invalid length. [ 545.050417][T20207] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 545.064628][T20207] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 545.082936][T20207] bond2: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 545.161469][T20210] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 545.174670][T20210] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 545.432162][T20228] pim6reg: entered allmulticast mode [ 545.529267][T20236] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 545.578408][T20236] 0ªî{X¹¦: entered allmulticast mode [ 545.596967][T20236] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 545.764706][T20246] __nla_validate_parse: 7 callbacks suppressed [ 545.764726][T20246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4068'. [ 545.873445][T20252] TC_ACT_REPEAT abuse ? [ 545.878391][T20252] TC_ACT_REPEAT abuse ? [ 545.882794][T20252] TC_ACT_REPEAT abuse ? [ 545.896569][T20252] TC_ACT_REPEAT abuse ? [ 545.902439][T20252] TC_ACT_REPEAT abuse ? [ 545.907313][T20252] TC_ACT_REPEAT abuse ? [ 545.913090][T20252] TC_ACT_REPEAT abuse ? [ 545.917575][T20252] TC_ACT_REPEAT abuse ? [ 545.922095][T20252] TC_ACT_REPEAT abuse ? [ 546.071297][T20262] netlink: 536 bytes leftover after parsing attributes in process `syz.5.4073'. [ 546.692130][T20297] bridge1: entered promiscuous mode [ 546.698050][T20297] bridge1: entered allmulticast mode [ 546.921536][T20313] netlink: 'syz.5.4090': attribute type 1 has an invalid length. [ 546.939326][T20313] netlink: 'syz.5.4090': attribute type 4 has an invalid length. [ 546.960453][T20313] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4090'. [ 547.364369][T20337] netlink: 'syz.1.4096': attribute type 11 has an invalid length. [ 547.381190][T20339] bridge0: port 1(batadv1) entered blocking state [ 547.389039][T20339] bridge0: port 1(batadv1) entered disabled state [ 547.396039][T20339] batadv1: entered allmulticast mode [ 547.404700][T20339] batadv1: entered promiscuous mode [ 547.415061][T20336] tipc: Started in network mode [ 547.422237][T20341] netlink: 'syz.3.4098': attribute type 28 has an invalid length. [ 547.422436][T20336] tipc: Node identity def01f9e4818, cluster identity 4711 [ 547.438618][T20341] netlink: 'syz.3.4098': attribute type 3 has an invalid length. [ 547.447001][T20341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4098'. [ 547.447505][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4097'. [ 547.475107][T20336] tipc: Enabled bearer , priority 0 [ 547.502054][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4097'. [ 547.502777][T20343] syzkaller0: entered promiscuous mode [ 547.527659][T20343] syzkaller0: entered allmulticast mode [ 547.586035][T20336] tipc: Resetting bearer [ 547.891054][T13237] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 547.900976][T13237] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 547.976199][T20334] tipc: Resetting bearer [ 547.990452][T20359] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4103'. [ 548.008602][T20358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4103'. [ 548.047371][T20334] tipc: Disabling bearer [ 548.234586][T20363] netlink: 'syz.1.4105': attribute type 1 has an invalid length. [ 548.404037][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4107'. [ 548.464543][T20368] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 548.484343][T20372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'. [ 548.658311][T20384] netlink: 'syz.4.4112': attribute type 1 has an invalid length. [ 548.698265][T20384] netlink: 'syz.4.4112': attribute type 1 has an invalid length. [ 549.009337][T20406] netlink: 'syz.3.4119': attribute type 10 has an invalid length. [ 549.050280][T20406] team0: Port device dummy0 added [ 550.108904][T20430] netlink: 'syz.5.4130': attribute type 11 has an invalid length. [ 551.158222][T20479] __nla_validate_parse: 7 callbacks suppressed [ 551.158244][T20479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4145'. [ 551.382003][T20489] macvtap1: entered allmulticast mode [ 551.389668][T20495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'. [ 551.399066][T20489] veth0_macvtap: entered allmulticast mode [ 551.602558][T20489] syzkaller1: entered promiscuous mode [ 551.633175][T20489] syzkaller1: entered allmulticast mode [ 551.716722][T20506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4155'. [ 551.917324][T20508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4156'. [ 552.663902][T20562] tipc: Enabled bearer , priority 0 [ 552.716830][T20562] syzkaller0: entered promiscuous mode [ 552.725839][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4171'. [ 552.735839][T20562] syzkaller0: entered allmulticast mode [ 552.755355][T20539] delete_channel: no stack [ 552.854975][T20562] tipc: Resetting bearer [ 552.886580][T20558] tipc: Resetting bearer [ 552.925417][T20578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4175'. [ 552.947672][T20558] tipc: Disabling bearer [ 552.995411][T20579] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4173'. [ 553.008357][T20578] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4175'. [ 553.018528][T20578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4175'. [ 553.428655][T20603] tipc: New replicast peer: 0.0.0.0 [ 553.448173][T20603] tipc: Enabled bearer , priority 10 [ 553.628667][T20612] sit0: left promiscuous mode [ 553.719175][T20612] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.726835][T20612] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.023868][T20612] wg1: left promiscuous mode [ 554.169551][T20612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.189894][T20612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.294875][T20612] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 554.359107][T20612] ip6erspan0: left promiscuous mode [ 554.426300][T20635] lo: entered promiscuous mode [ 554.441734][T20635] tunl0: entered promiscuous mode [ 554.459727][T20635] gre0: entered promiscuous mode [ 554.500025][T20635] gretap0: entered promiscuous mode [ 554.529882][T20635] erspan0: entered promiscuous mode [ 554.553759][T20635] ip_vti0: entered promiscuous mode [ 554.560253][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4193'. [ 554.581281][T10842] tipc: Node number set to 3275868256 [ 554.834694][T20637] team0 (unregistering): Port device dummy0 removed [ 554.861451][T13211] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.871054][T13211] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.880777][T13211] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 554.973362][T13211] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.016880][T13211] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.026584][T13211] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 555.038027][T13211] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.048772][T13211] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.057886][T13211] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 555.138066][T13211] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.154199][T13211] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.175338][T13211] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 556.221850][T20717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.739167][T20727] __nla_validate_parse: 5 callbacks suppressed [ 556.739184][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4217'. [ 556.754390][T20734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4217'. [ 556.754426][T20734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4217'. [ 556.768725][T13240] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.784991][T20727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4217'. [ 556.814361][T13240] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.843509][T13240] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.889933][T13240] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.985899][T20754] sctp: [Deprecated]: syz.3.4223 (pid 20754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.985899][T20754] Use struct sctp_sack_info instead [ 557.006286][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4226'. [ 557.034107][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4226'. [ 557.177335][T20768] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4231'. [ 557.196763][T20769] netlink: 'syz.3.4229': attribute type 1 has an invalid length. [ 557.363897][T20783] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.4234'. [ 557.375191][T20783] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.4234'. [ 557.414991][T20771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.679138][T20798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4237'. [ 558.061714][T20814] tipc: Enabled bearer , priority 0 [ 558.084583][T20807] syzkaller0: entered promiscuous mode [ 558.106363][T20807] syzkaller0: entered allmulticast mode [ 558.133249][T20807] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 558.199687][T20807] tipc: Resetting bearer [ 558.207266][T20817] netlink: 'syz.4.4240': attribute type 1 has an invalid length. [ 558.248497][T20806] tipc: Resetting bearer [ 558.333781][T20806] tipc: Disabling bearer [ 558.837587][T20842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.867348][T20842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.411194][T20875] tipc: Enabled bearer , priority 0 [ 559.418988][T20875] syzkaller0: entered promiscuous mode [ 559.424493][T20875] syzkaller0: entered allmulticast mode [ 559.501551][T20875] tipc: Resetting bearer [ 559.580919][T20873] tipc: Resetting bearer [ 559.619474][T20873] tipc: Disabling bearer [ 560.233292][T20921] netlink: 'syz.1.4275': attribute type 10 has an invalid length. [ 560.269524][T20921] team0: Device hsr_slave_0 failed to register rx_handler [ 561.831688][T21016] netlink: 'syz.3.4297': attribute type 10 has an invalid length. [ 561.885006][T21018] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 562.109304][T21033] batadv1: entered allmulticast mode [ 562.247445][T21046] __nla_validate_parse: 13 callbacks suppressed [ 562.247466][T21046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4305'. [ 562.333493][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4309'. [ 562.512155][T21061] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.4312'. [ 562.838146][T13211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.848556][T13211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.957591][T21087] netlink: 'syz.5.4320': attribute type 10 has an invalid length. [ 563.149605][T21098] tipc: Failed to remove unknown binding: 66,1,1/0:947350146/947350148 [ 563.198617][T21098] tipc: Failed to remove unknown binding: 66,1,1/0:947350146/947350148 [ 563.219445][T21087] bond3: entered promiscuous mode [ 563.224554][T21087] bond3: entered allmulticast mode [ 563.230366][T21087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 563.359419][T21113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4327'. [ 563.372131][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4330'. [ 563.390989][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4330'. [ 563.489691][T21116] netlink: 'syz.4.4328': attribute type 1 has an invalid length. [ 563.497945][T21116] nbd: error processing sock list [ 563.519806][T21116] block nbd2: shutting down sockets [ 563.543579][T21120] netlink: 'syz.5.4332': attribute type 6 has an invalid length. [ 563.568000][T21119] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4331'. [ 563.630172][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4332'. [ 563.651883][T21123] tipc: Enabled bearer , priority 0 [ 563.682144][T21125] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 563.708413][T21123] syzkaller0: entered promiscuous mode [ 563.715226][T21123] syzkaller0: entered allmulticast mode [ 563.727911][T21128] netlink: 'syz.0.4335': attribute type 12 has an invalid length. [ 563.786691][T21123] net_ratelimit: 51 callbacks suppressed [ 563.786711][T21123] bridge_slave_0: mtu less than device minimum [ 563.827662][T21122] tipc: Resetting bearer [ 563.844850][ T25] block nbd1: Possible stuck request ffff888025247000: control (read@0,1024B). Runtime 390 seconds [ 563.855933][ T25] block nbd1: Possible stuck request ffff8880252471c0: control (read@1024,1024B). Runtime 390 seconds [ 563.867450][ T25] block nbd1: Possible stuck request ffff888025247380: control (read@2048,1024B). Runtime 390 seconds [ 563.879970][ T25] block nbd1: Possible stuck request ffff888025247540: control (read@3072,1024B). Runtime 390 seconds [ 563.932055][T21122] tipc: Disabling bearer [ 563.956286][T21137] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4337'. [ 564.139634][T21147] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4338'. [ 565.540795][T21235] macsec2: entered promiscuous mode [ 565.558724][T21235] bridge0: entered promiscuous mode [ 565.565418][T21235] macsec2: entered allmulticast mode [ 565.586391][T21235] bridge0: entered allmulticast mode [ 565.628206][T21235] bridge0: port 2(macsec2) entered blocking state [ 565.649360][T21235] bridge0: port 2(macsec2) entered disabled state [ 565.692511][T21235] bridge0: left allmulticast mode [ 565.708944][T21235] bridge0: left promiscuous mode [ 566.121660][T21261] syzkaller0: entered promiscuous mode [ 566.127330][T21261] syzkaller0: entered allmulticast mode [ 568.268082][T21284] __nla_validate_parse: 21 callbacks suppressed [ 568.268102][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4387'. [ 568.284172][T21303] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4391'. [ 568.313853][T21303] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4391'. [ 568.343666][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.641527][T21324] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4398'. [ 568.723356][T21326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4396'. [ 568.802104][T21330] netlink: 'syz.3.4401': attribute type 4 has an invalid length. [ 569.291767][T21342] netlink: 'syz.1.4406': attribute type 10 has an invalid length. [ 569.313183][T21342] bridge_slave_1: left allmulticast mode [ 569.335706][T21342] bridge_slave_1: left promiscuous mode [ 569.353050][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4404'. [ 569.364221][T21342] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.437846][T21342] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 569.495701][T21350] netlink: 'syz.1.4406': attribute type 1 has an invalid length. [ 569.503493][T21350] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4406'. [ 569.537886][T21349] pim6reg1: entered promiscuous mode [ 569.547798][T21349] pim6reg1: entered allmulticast mode [ 569.566865][T21360] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 569.976893][T21380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4414'. [ 570.027047][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4415'. [ 570.046343][T21380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4414'. [ 570.053155][T21382] veth0: entered promiscuous mode [ 570.096902][T21386] batman_adv: batadv0: Adding interface: ipvlan2 [ 570.103301][T21386] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.153715][T21386] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 570.203956][T21381] veth0: left promiscuous mode [ 570.423731][T21400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.581112][T21406] IPVS: Error joining to the multicast group [ 570.951106][T21387] lec:lec_atm_close: lec0: Shut down! [ 570.965364][T21423] syzkaller0: entered promiscuous mode [ 570.971266][T21423] syzkaller0: entered allmulticast mode [ 571.101345][T21428] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 571.422398][T21442] smc: net device bond0 applied user defined pnetid SYZ2 [ 571.693346][T21442] smc: removing net device bond0 with user defined pnetid SYZ2 [ 571.702205][T21442] bond0 (unregistering): Released all slaves [ 571.944772][T21475] lo: entered allmulticast mode [ 571.965068][T21475] lo: left allmulticast mode [ 572.325790][T21500] netlink: 'syz.3.4448': attribute type 11 has an invalid length. [ 572.430176][T21507] openvswitch: netlink: Message has 24 unknown bytes. [ 572.438274][T21505] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 572.531840][T21510] syz_tun: entered allmulticast mode [ 572.635182][T21516] pim6reg1: entered promiscuous mode [ 572.661064][T21516] pim6reg1: entered allmulticast mode [ 572.745498][T21522] Bluetooth: MGMT ver 1.23 [ 573.176602][T21548] smc: adding net device bond0 with user defined pnetid SYZ2 [ 573.187094][T21548] bond0: entered allmulticast mode [ 573.192761][T21548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.201153][T21548] bridge0: port 1(bond0) entered blocking state [ 573.207839][T21548] bridge0: port 1(bond0) entered disabled state [ 573.216864][T21548] bond0: entered promiscuous mode [ 573.222999][T21548] bridge0: port 1(bond0) entered blocking state [ 573.229397][T21548] bridge0: port 1(bond0) entered forwarding state [ 573.316730][T21552] __nla_validate_parse: 15 callbacks suppressed [ 573.316752][T21552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4466'. [ 573.339578][T13237] bridge0: port 1(bond0) entered disabled state [ 573.355056][T21552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4466'. [ 573.444165][T21557] tipc: Enabling of bearer rejected, failed to enable media [ 573.505916][T21564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4468'. [ 573.560628][T21566] netlink: 'syz.1.4470': attribute type 4 has an invalid length. [ 573.646165][T21572] : left allmulticast mode [ 573.651040][T21572] : left promiscuous mode [ 573.672327][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4471'. [ 573.676029][T21572] bridge0: port 1() entered disabled state [ 573.722025][T21572] bond0: (slave bridge_slave_1): Releasing backup interface [ 573.740934][T21572] bond2: (slave veth0_to_bond): Releasing backup interface [ 573.760535][T21572] bond0: (slave bond_slave_0): Releasing backup interface [ 573.781664][T21572] bond0: (slave bond_slave_1): Releasing backup interface [ 573.817636][T21572] team0: Port device team_slave_0 removed [ 573.828411][T21572] team0: Port device team_slave_1 removed [ 573.834879][T21572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.842569][T21572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.853956][T21572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.861833][T21572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.872234][T21583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4474'. [ 573.892559][T21581] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4474'. [ 574.150356][T21596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4478'. [ 574.249229][T21606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4482'. [ 574.357548][T21610] netlink: 'syz.3.4483': attribute type 1 has an invalid length. [ 574.490634][T21618] netlink: 'syz.0.4486': attribute type 1 has an invalid length. [ 574.505003][T21610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4483'. [ 574.542661][T21618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.574526][T21622] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 575.139576][T21653] delete_channel: no stack [ 575.684989][T21685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.992274][T21693] syzkaller0: entered promiscuous mode [ 576.012235][T21693] syzkaller0: entered allmulticast mode [ 578.488060][T21744] syzkaller0: entered promiscuous mode [ 578.494030][T21744] syzkaller0: entered allmulticast mode [ 578.846350][T21758] netlink: 'syz.0.4526': attribute type 1 has an invalid length. [ 578.902349][T21758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.060074][T21764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4528'. [ 579.237338][T21768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4530'. [ 579.307505][T21770] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 579.360003][T21770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4531'. [ 579.483309][T21790] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4537'. [ 579.492602][T21790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4537'. [ 579.525210][T21790] IPv6: sit1: Disabled Multicast RS [ 579.553558][T21790] sit1: entered allmulticast mode [ 580.368590][T21821] syzkaller0: entered allmulticast mode [ 580.623954][T21836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4549'. [ 580.745763][T21845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4554'. [ 580.915031][T21852] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4557'. [ 580.943591][T21856] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4559'. [ 580.984727][T21851] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4557'. [ 581.546746][T21892] netlink: 'syz.4.4573': attribute type 1 has an invalid length. [ 581.605093][T21892] 8021q: adding VLAN 0 to HW filter on device bond24 [ 581.613023][T21897] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 581.630537][T21895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.648812][T21897] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 582.343666][T21939] netlink: 'syz.1.4589': attribute type 1 has an invalid length. [ 582.378577][T21939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 582.460137][T21945] netlink: 'syz.0.4591': attribute type 11 has an invalid length. [ 582.663854][T21953] sctp: [Deprecated]: syz.0.4594 (pid 21953) Use of int in max_burst socket option deprecated. [ 582.663854][T21953] Use struct sctp_assoc_value instead [ 583.302212][T21985] openvswitch: netlink: Missing key (keys=40, expected=100) [ 583.566986][T21998] netlink: 'syz.5.4608': attribute type 10 has an invalid length. [ 583.685772][ T51] Bluetooth: hci0: command tx timeout [ 583.727276][T21998] team0: Port device geneve0 added [ 583.835348][T22016] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 583.850427][T22021] tipc: New replicast peer: 255.255.255.255 [ 583.857349][T22021] tipc: Enabled bearer , priority 10 [ 583.999828][T22027] sctp: [Deprecated]: syz.5.4616 (pid 22027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.999828][T22027] Use struct sctp_sack_info instead [ 584.024571][T22030] tc_dump_action: action bad kind [ 584.064124][T22034] tc_dump_action: action bad kind [ 584.074876][T22037] sctp: [Deprecated]: syz.0.4620 (pid 22037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 584.074876][T22037] Use struct sctp_sack_info instead [ 584.436287][T22055] netlink: 'syz.3.4626': attribute type 21 has an invalid length. [ 584.541056][T22063] lo speed is unknown, defaulting to 1000 [ 584.919047][T22080] __nla_validate_parse: 14 callbacks suppressed [ 584.919069][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4634'. [ 584.948652][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4634'. [ 585.097278][T22085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4636'. [ 585.826222][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4644'. [ 585.856054][T22119] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 585.863722][T22119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.158565][T22131] veth1_macvtap: left promiscuous mode [ 586.574706][T22154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4652'. [ 586.584889][T22156] netlink: 'syz.5.4652': attribute type 21 has an invalid length. [ 586.766703][T22162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4654'. [ 586.887774][T22166] bond4 (unregistering): Released all slaves [ 586.914059][T22170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4655'. [ 587.414282][T22197] netlink: 'syz.1.4664': attribute type 10 has an invalid length. [ 587.510479][T22200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4662'. [ 587.520193][T22200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4662'. [ 587.890846][T22197] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 588.009407][T22208] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4667'. [ 588.729713][T22246] netlink: 'syz.3.4677': attribute type 33 has an invalid length. [ 588.779388][T22243] lo speed is unknown, defaulting to 1000 [ 589.294611][T22263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.707130][T22282] netlink: 'syz.5.4689': attribute type 11 has an invalid length. [ 590.075316][T22288] __nla_validate_parse: 3 callbacks suppressed [ 590.075339][T22288] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.4687'. [ 590.184908][T13237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.216830][T22298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4693'. [ 590.219519][T22296] bond0: entered allmulticast mode [ 590.231233][T13237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.280323][T22296] bond_slave_0: entered allmulticast mode [ 590.319269][T22296] bond_slave_1: entered allmulticast mode [ 590.325446][T22300] openvswitch: netlink: Flow key attr not present in new flow. [ 590.365725][T22296] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 590.877107][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 591.248642][T22340] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4705'. [ 591.264583][T22340] netlink: 'syz.5.4705': attribute type 25 has an invalid length. [ 591.272850][T22340] netlink: 'syz.5.4705': attribute type 8 has an invalid length. [ 591.326935][T22346] netlink: 'syz.1.4707': attribute type 12 has an invalid length. [ 591.723242][T22362] netlink: 'syz.5.4713': attribute type 6 has an invalid length. [ 591.740786][T22362] netlink: 'syz.5.4713': attribute type 6 has an invalid length. [ 591.946673][T22377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4719'. [ 592.015111][T22379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4718'. [ 592.056310][T22381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4720'. [ 592.391103][T22405] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 592.568627][T22412] tipc: Enabled bearer , priority 0 [ 592.584036][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4731'. [ 592.605995][T22401] netlink: 'syz.4.4725': attribute type 4 has an invalid length. [ 592.651065][T22412] tipc: Resetting bearer [ 592.779742][T22411] tipc: Disabling bearer [ 593.189365][T22439] netlink: 'syz.3.4737': attribute type 3 has an invalid length. [ 593.226408][T22439] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4737'. [ 593.383210][T22445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4740'. [ 593.398216][T22446] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4739'. [ 593.649046][T22453] bridge0: port 2(syz_tun) entered blocking state [ 593.678236][T22453] bridge0: port 2(syz_tun) entered disabled state [ 593.685126][T22453] syz_tun: entered allmulticast mode [ 593.723901][T22453] syz_tun: entered promiscuous mode [ 593.926441][ T25] block nbd1: Possible stuck request ffff888025247000: control (read@0,1024B). Runtime 420 seconds [ 593.937922][ T25] block nbd1: Possible stuck request ffff8880252471c0: control (read@1024,1024B). Runtime 420 seconds [ 593.949315][ T25] block nbd1: Possible stuck request ffff888025247380: control (read@2048,1024B). Runtime 420 seconds [ 593.962710][ T25] block nbd1: Possible stuck request ffff888025247540: control (read@3072,1024B). Runtime 420 seconds [ 594.223328][T22479] syzkaller0: entered promiscuous mode [ 594.230584][T22479] syzkaller0: entered allmulticast mode [ 594.700795][T22506] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 594.772806][T22510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.956457][T22521] netlink: 'syz.5.4764': attribute type 15 has an invalid length. [ 595.112782][T22530] __nla_validate_parse: 3 callbacks suppressed [ 595.112802][T22530] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4767'. [ 595.138590][T22530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4767'. [ 595.147276][T22533] netlink: 'syz.3.4765': attribute type 11 has an invalid length. [ 595.161487][T22532] [ 595.163895][T22532] ====================================================== [ 595.170934][T22532] WARNING: possible circular locking dependency detected [ 595.178000][T22532] syzkaller #0 Not tainted [ 595.182448][T22532] ------------------------------------------------------ [ 595.189493][T22532] syz.4.4768/22532 is trying to acquire lock: [ 595.195582][T22532] ffffffff8f68e918 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 595.204953][T22532] [ 595.204953][T22532] but task is already holding lock: [ 595.212347][T22532] ffff8880460e1170 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 595.221719][T22532] [ 595.221719][T22532] which lock already depends on the new lock. [ 595.221719][T22532] [ 595.232156][T22532] [ 595.232156][T22532] the existing dependency chain (in reverse order) is: [ 595.241202][T22532] [ 595.241202][T22532] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 595.249450][T22532] lock_acquire+0x120/0x360 [ 595.254521][T22532] _raw_spin_lock_bh+0x36/0x50 [ 595.259860][T22532] nr_rt_device_down+0x12a/0x720 [ 595.265414][T22532] nr_device_event+0x137/0x150 [ 595.270734][T22532] notifier_call_chain+0x1b3/0x3e0 [ 595.276387][T22532] __dev_notify_flags+0x18d/0x2e0 [ 595.281952][T22532] netif_change_flags+0xe8/0x1a0 [ 595.287423][T22532] dev_change_flags+0x130/0x260 [ 595.292801][T22532] dev_ioctl+0x7b4/0x1150 [ 595.297668][T22532] sock_do_ioctl+0x22c/0x300 [ 595.302790][T22532] sock_ioctl+0x576/0x790 [ 595.307652][T22532] __se_sys_ioctl+0xfc/0x170 [ 595.312775][T22532] do_syscall_64+0xfa/0x3b0 [ 595.317830][T22532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.324252][T22532] [ 595.324252][T22532] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 595.332083][T22532] lock_acquire+0x120/0x360 [ 595.337125][T22532] _raw_spin_lock_bh+0x36/0x50 [ 595.342423][T22532] nr_rt_device_down+0xa9/0x720 [ 595.347809][T22532] nr_device_event+0x137/0x150 [ 595.353132][T22532] notifier_call_chain+0x1b3/0x3e0 [ 595.358776][T22532] __dev_notify_flags+0x18d/0x2e0 [ 595.364351][T22532] netif_change_flags+0xe8/0x1a0 [ 595.369819][T22532] dev_change_flags+0x130/0x260 [ 595.375202][T22532] dev_ioctl+0x7b4/0x1150 [ 595.380073][T22532] sock_do_ioctl+0x22c/0x300 [ 595.385199][T22532] sock_ioctl+0x576/0x790 [ 595.390061][T22532] __se_sys_ioctl+0xfc/0x170 [ 595.395177][T22532] do_syscall_64+0xfa/0x3b0 [ 595.400209][T22532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.406633][T22532] [ 595.406633][T22532] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 595.414554][T22532] validate_chain+0xb9b/0x2140 [ 595.419857][T22532] __lock_acquire+0xab9/0xd20 [ 595.425078][T22532] lock_acquire+0x120/0x360 [ 595.430377][T22532] _raw_spin_lock_bh+0x36/0x50 [ 595.435689][T22532] nr_remove_neigh+0x25/0xe0 [ 595.440814][T22532] nr_add_node+0x1d9f/0x2570 [ 595.445954][T22532] nr_rt_ioctl+0xc12/0xd50 [ 595.450905][T22532] sock_do_ioctl+0xd9/0x300 [ 595.455944][T22532] sock_ioctl+0x576/0x790 [ 595.460802][T22532] __se_sys_ioctl+0xfc/0x170 [ 595.465925][T22532] do_syscall_64+0xfa/0x3b0 [ 595.470960][T22532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.477380][T22532] [ 595.477380][T22532] other info that might help us debug this: [ 595.477380][T22532] [ 595.487696][T22532] Chain exists of: [ 595.487696][T22532] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 595.487696][T22532] [ 595.501543][T22532] Possible unsafe locking scenario: [ 595.501543][T22532] [ 595.509028][T22532] CPU0 CPU1 [ 595.514398][T22532] ---- ---- [ 595.519766][T22532] lock(&nr_node->node_lock); [ 595.524547][T22532] lock(nr_node_list_lock); [ 595.531671][T22532] lock(&nr_node->node_lock); [ 595.538968][T22532] lock(nr_neigh_list_lock); [ 595.543656][T22532] [ 595.543656][T22532] *** DEADLOCK *** [ 595.543656][T22532] [ 595.551802][T22532] 1 lock held by syz.4.4768/22532: [ 595.556921][T22532] #0: ffff8880460e1170 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 595.566696][T22532] [ 595.566696][T22532] stack backtrace: [ 595.572677][T22532] CPU: 0 UID: 0 PID: 22532 Comm: syz.4.4768 Not tainted syzkaller #0 PREEMPT(full) [ 595.572699][T22532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.572711][T22532] Call Trace: [ 595.572718][T22532] [ 595.572727][T22532] dump_stack_lvl+0x189/0x250 [ 595.572753][T22532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.572772][T22532] ? __pfx__printk+0x10/0x10 [ 595.572794][T22532] ? stack_trace_save+0x9c/0xe0 [ 595.572821][T22532] print_circular_bug+0x2ee/0x310 [ 595.572842][T22532] check_noncircular+0x134/0x160 [ 595.572863][T22532] validate_chain+0xb9b/0x2140 [ 595.572891][T22532] __lock_acquire+0xab9/0xd20 [ 595.572917][T22532] ? nr_remove_neigh+0x25/0xe0 [ 595.572939][T22532] lock_acquire+0x120/0x360 [ 595.572962][T22532] ? nr_remove_neigh+0x25/0xe0 [ 595.572988][T22532] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 595.573008][T22532] ? nr_remove_neigh+0x25/0xe0 [ 595.573030][T22532] _raw_spin_lock_bh+0x36/0x50 [ 595.573052][T22532] ? nr_remove_neigh+0x25/0xe0 [ 595.573074][T22532] nr_remove_neigh+0x25/0xe0 [ 595.573097][T22532] nr_add_node+0x1d9f/0x2570 [ 595.573120][T22532] ? __asan_memcpy+0x40/0x70 [ 595.573139][T22532] ? nr_call_to_digi+0x126/0x1b0 [ 595.573161][T22532] nr_rt_ioctl+0xc12/0xd50 [ 595.573186][T22532] ? kasan_quarantine_put+0xdd/0x220 [ 595.573205][T22532] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 595.573231][T22532] ? apparmor_capable+0x137/0x1b0 [ 595.573255][T22532] ? capable+0x89/0xe0 [ 595.573270][T22532] ? nr_ioctl+0x1b1/0x3b0 [ 595.573288][T22532] sock_do_ioctl+0xd9/0x300 [ 595.573312][T22532] ? __pfx_sock_do_ioctl+0x10/0x10 [ 595.573331][T22532] ? __lock_acquire+0xab9/0xd20 [ 595.573362][T22532] sock_ioctl+0x576/0x790 [ 595.573383][T22532] ? __pfx_sock_ioctl+0x10/0x10 [ 595.573409][T22532] ? __fget_files+0x2a/0x420 [ 595.573422][T22532] ? __fget_files+0x3a0/0x420 [ 595.573435][T22532] ? __fget_files+0x2a/0x420 [ 595.573450][T22532] ? bpf_lsm_file_ioctl+0x9/0x20 [ 595.573469][T22532] ? __pfx_sock_ioctl+0x10/0x10 [ 595.573489][T22532] __se_sys_ioctl+0xfc/0x170 [ 595.573510][T22532] do_syscall_64+0xfa/0x3b0 [ 595.573525][T22532] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.573548][T22532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.573564][T22532] ? clear_bhb_loop+0x60/0xb0 [ 595.573588][T22532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.573604][T22532] RIP: 0033:0x7f764ad8ebe9 [ 595.573620][T22532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.573634][T22532] RSP: 002b:00007f764bba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.573652][T22532] RAX: ffffffffffffffda RBX: 00007f764afc5fa0 RCX: 00007f764ad8ebe9 [ 595.573665][T22532] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000005 [ 595.573676][T22532] RBP: 00007f764ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 595.573686][T22532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.573697][T22532] R13: 00007f764afc6038 R14: 00007f764afc5fa0 R15: 00007ffeca84ca58 [ 595.573717][T22532] [ 595.881661][T22533] netlink: 'syz.3.4765': attribute type 11 has an invalid length. [ 595.889685][T22533] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4765'. [ 595.900407][T22533] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 595.982372][T22537] netlink: 'syz.3.4765': attribute type 1 has an invalid length. [ 596.071337][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4765'. [ 599.785719][T17809] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2