last executing test programs: 2.361749024s ago: executing program 4 (id=5679): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0xfff0, @empty}, 0x10) getpeername$l2tp(r0, 0x0, &(0x7f00000001c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x3a, r4, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) setsockopt$inet6_udp_int(r6, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000000)={0x1, 0x6}, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000000), 0x4) 1.958761204s ago: executing program 4 (id=5685): r0 = socket(0x22, 0x2, 0x1) ioctl$IMGETVERSION(r0, 0x80044944, &(0x7f0000000000)) 1.860152493s ago: executing program 4 (id=5686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x8, 0x8, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}}, 0x0) 1.857256971s ago: executing program 3 (id=5688): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="00009e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe, &(0x7f00000001c0)=0x80) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = socket(0x2d, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000380)=""/70, 0x46}], 0x3, 0xfffffff7, 0x407) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000440)=""/83, 0x53, 0x40, &(0x7f00000005c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}}, 0x810) 1.732636586s ago: executing program 4 (id=5691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) 1.697266663s ago: executing program 3 (id=5692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2c2900, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x40005) close(r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0xd, 0x7}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x10000008ebc, 0x0) splice(r8, 0x0, r11, 0x0, 0x25a5, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES8=r3, @ANYRES32=r7, @ANYBLOB="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", @ANYRES64=0x0], 0x20) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000000c0)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.622184745s ago: executing program 4 (id=5693): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xa199c036}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/236, 0xec}], 0x1}}], 0x2, 0x10020, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) 1.268284884s ago: executing program 2 (id=5699): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000014c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000000)="ceb33066681ef88b962f3d196ab4223f04cbb450d264f00a522fa9492890d032b3b5a6e3b62b65099bd2c4158697158c4c4db8434f66a3a953d8537a03f5ce4f8b2bf636f280f1da3de4e16b19fbfd355ec612d0c83983ecfd80a355def97d4d578ad5231cb88744eadaf23fd7c51904ee4878e398ace8775310942e3b8de354d351fb8c68bc52de0b", &(0x7f0000000180)=""/132, &(0x7f00000004c0)="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", &(0x7f00000002c0)="582c07e637bda21dc3c480aa6eef4f5b0f03c428fc40b888ec4f970b368c3b6a5c4ea17844bb7b4f7138e89420b8057ee8b37a6d7ce8b545105ffbc1f2451fc5bade411f6713307ec0a801fed72f4f49d1e3ad26b9795c3b136781a700f70f746b559e5c9cb0d994964cc53cdb7a7b90cfc3d6251afbef1e0367cbaba53b97f16cdb20f9b763d2617673cf18326f3eec7307dacc7f672a9a4442f5cdb69b552e54545c6fe5a3a6f4674c7ac17cf5656e053fa1c80e739fc2d75f76b445c62909b46004374a006f987cd11d1f8c3862fab163a417", 0x1000, r1}, 0x38) 1.141166812s ago: executing program 2 (id=5702): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x1412, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r6}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@deltclass={0x50, 0x29, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xfff3, 0xffe0}, {0xd, 0xb}}, [@tclass_kind_options=@c_cbs, @TCA_RATE={0x6, 0x5, {0xc3, 0x9}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x80, 0x4}}]}, 0x50}}, 0x0) (rerun: 64) 1.062623405s ago: executing program 1 (id=5703): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xc, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x61, 0x5f]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 980.74336ms ago: executing program 0 (id=5704): pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0x400, 0x0, 0x0, 0x3ff, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 980.241817ms ago: executing program 1 (id=5705): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x30, 0x0]}}, 0x0, 0x1c, 0x0, 0x0, 0xbd}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r4, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x3e, 0x0, 0x60}, 0x90) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000180)={'gre0\x00', 0x8}) 923.65676ms ago: executing program 2 (id=5706): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000000c0)={{r0}, 0x2, &(0x7f0000000080)=[0x0, 0xffffffffffffff80], 0x9, 0x0, 0x1}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000140)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x200, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x7, 0x0, 0x5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x81, 0x0, 0x13, @local, @private1, 0x3800, 0x20, 0x7, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', r3, 0x80, 0x1, 0xcd8, 0x1, {{0xe, 0x4, 0x0, 0x39, 0x38, 0x65, 0x0, 0x4, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@timestamp_prespec={0x44, 0x24, 0xa7, 0x3, 0x1, [{@rand_addr=0x64010100, 0x531}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6e1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0xd}]}]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0xd8d, 0x7, 0x80000001, 0x202, r2, 0x6, '\x00', r3, r2, 0x1, 0x1, 0x1}, 0x50) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000400)={0x1, 'veth1_to_team\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x56}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x8890) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000580)={0x0, r4, 0x6, 0x0, 0x3}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x4, 0xc9, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1ec, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "a823eb0dff6f52f3a7d44cf5aa259e2057545ef8792e0f30f4d6511b56b21e04fc1b29f319232a996b835965d25dcf63d1ffe2ed421f66ce23b77b0b0511245a6c81c979705afff7b2f55390ae7cf2efd08fb8bd37ceaa27c9f622d6a615c5caa573"}, @ETHTOOL_A_BITSET_MASK={0x24, 0x5, "2674960e22acc66d4a074c5c26737e2bb19d2c77ed47cf0a7c44384e3b1ad085"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "b02307b4593fb747d5fe4e5adcb970d738765cbbbcb6c1f748aaff74bfbcdd2c9b3ea24a33753d0a9c83658cc6a0b2124162be3da2a37d436940b1501aa1c0f5e562a49b7ab91f4d66f18c192fbf713cd691dbb8022ddc08274d134e21d8826dce7f7823def303aed0ebdafd1b52d7d21a9548aa7f"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "0ff2d71733cb0a83e1e4198c1f79bc2d6ed5b534f517617d0f2cb0c299a68c94fce64cca8ad0d53a98570b30510d33d33cb85096e2823635fdb9b0761d641089d10e6e11b16666e38a7aaec171b733ea180f63497eea7f59e59d97d9db10add046bc1c3d4ecebd407a0bcf6836d3302e4686a1066a6d6de567e0a884bb"}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4040814}, 0x40) sendto$rxrpc(r2, &(0x7f00000009c0)="4668f3fed783629e4f5b736cb9f6e94c3d208e784d1c9d3792ff18149a13b501c2203ecfb66c41c6160dc2601147a37d9f6b", 0x32, 0x4000, &(0x7f0000000a00)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000a40)={0x4, 0x9}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, r7, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6ec}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c004}, 0x820) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000e40)) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x448d5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001a00)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f0000000fc0)={0x9d4, r6, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x202a}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\x94\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '-:%{\xca(^\xc4:,-/-#-/]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+(#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#$\'\\-)\x86[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!\'+]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffe}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbd}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "b28766488ad25e475cd08e457e7a64ee9edcb429f9004ea09fe50cd801d4ecff4eb3c729d5fb409005e1dc42f25cda7a5d6fe11b01b6053eb221185357ede570f1"}, @ETHTOOL_A_BITSET_MASK={0xf1, 0x5, "101197cbee673607a9bc4a172593c2100b1d07c5d99ce3d6e68945fbab798e3d6f1e2396a9256dcb63b396ebd20aeea9fc592deca4ebe3674a154970caec1ace55e0b140398cb6f61b5a4cb0ee8b8146b08b9405aedbfb1429e2d3c5d72bc3aa675209fd7793523045fda35914d0df1dd077e5d2d35d2d2c594ec6b89409f6f5b6ed1c92151a8f1f9e0c0078f1e1d5ea53eca866cdc285c78d9be51a9d8734c6621a8f330314bd50382f18f0e2111ba48cfbab3e8f5e279119354eac9d4d646344de8ad673cd4c1923297da9948a1db914f922fe67952386b5c14e13c2429a5c3f02f581dc6b1831805041c32c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "c6723207cbc208e83eb58ecd139977b57c9773d7c0c698389f8188232c18bd3a8822637a911573315521b7cfe3506ce0070eb5fdd7dde716d18cf3554fcaf755efbb9356c94ef0dc14d35ead48695d59ba6526ddf95b42b8be207f7e686ee238e4f03650187868a49a1e9c3c46abac977e0c354229efbf1e3f4e5a7026cd735705eab74616fda416601fbdfcb90d58a5e0b21f9436c6d163cc57314c15c6f5f8a95d1547"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0xb6, 0x5, "a0e0c633d692453427f61531bbebf9b56fa23e698543d0d039b13ffdb605d13282b280331c3e3331e590b37a6da5842e6907d4a957e9fa32cd6e19271a34f9b9ce2dad231f16c3032268834a846469b78f67ec3f8ba57a7dca87128343fdf304aff77a91ae2e1e1e130aeedf0ec620ddfe0769d11e1c97267d1efcec11caf571638223b21a31fb800a57f5a4cf3203340add09f58ddcbfc358c4e8cdcfac39d871f07298947c7008306bc1431e39ae8f192c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x1b8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']&*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x30, 0x2, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}]}, {0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x62}, @ETHTOOL_A_BITSET_BIT_NAME={0x30, 0x2, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[]-\\[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0x73, 0x5, "13ea10933d81869759de1389c262939878b0abac3be720df3cbb6c281d774c369a0f724e5a359234b9c4757c7955cf215c9e68baf41c893806cb6ecded1b67e1bf7b6aebfdd90b08d39d588a6a4b2665aa6eacce522230781d09be9f85455bc5ac8766add146327c0ce14a0b04a739"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "1f48e5e0c0f48b8ed8032e4dd14822929bcc2daef095579e1901f8c635a66d7abb78b9ac9d479afd73ed32905e220372adc0b08c1b5b4e9556c2c33f730c765850712b45d9d518c7c4bbd5bfec834d0f5db7a9cb898ab829a29f438d56fa1e1f3c7cab265d18853d33403c55aa98d23b3b765c8aa4ff9a4e4306704a65e12d548f0560edee262a06bde9c65531bf1673b00f3f4e2bfe49764a3aa416e1c907846fcfd5c487d967ce791b7908d50af5b4ce09812b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xed1}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1063}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '*)[:*,*$}\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "ccb29783cdfa3ae3fa39ae74685acd403c851f16cdcba5a50e43e4f98f60c7638fc1b19429df3a66d3b2b6dbfe73e0bbc68159755893cbfa591bc8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}]}, @ETHTOOL_A_DEBUG_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3e}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x75}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$$\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[]\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, ')\\,$\x86{\\\xc7I:+\x88\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xafe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[\'\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x89}]}]}, 0x9d4}, 0x1, 0x0, 0x0, 0x2002c844}, 0x4000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, r8, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001b80)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xa0, 0xffffffff, 0x9, 0x5, 0x96c9}, &(0x7f0000001c40)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001c80)={r9, @in6={{0xa, 0x4e24, 0x0, @mcast1}}, 0xffff, 0x0, 0x0, 0x8, 0x7}, &(0x7f0000001d40)=0x98) 919.622926ms ago: executing program 3 (id=5707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xc, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, r9, {0x4}, {0x0, 0xb}, {0xa, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x4008000) writev(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r11, 0x1, 0x4}, &(0x7f00000000c0)=0xc) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r13, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$inet_udp(0x2, 0x2, 0x0) 844.120249ms ago: executing program 1 (id=5708): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xb}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffc}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000003ab8dbd9f463f8ed4ea02da2be3c943ba730e1b749edb034872126db98edae808f17210f392c28983f17a6858cdecfca7c5066c4f582030a2ec955", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4850) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES16=0x0, @ANYRESOCT=r0], 0x1c}}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) syz_emit_ethernet(0x176, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000801403afffc000000000000000000000000000001ff0200000000000000000000000000010c0c040602000e00fc0000000000000000000000000000012001000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000aafe800000000000000000000000000043fc000000000040000000000000000000000000000000000004010800000000003c0a040503100500fc020000000000000000000000000000fe8000000000000000000000000000aafc020000000000000000000000000001fc020000000000000000000000000000000000000000000000000000000000011603000000000000c9102001000000000000000000000000000105020006c204000000c8000000000101000000000000010600000000000004010100000000008700907800000000fe8000000000000000000000000000aafc0200000000000000000000000000010e012025b07f3c58"], 0x0) 743.635735ms ago: executing program 2 (id=5709): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x1, 'lc\x00', 0x12, 0x6}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000000040)={0x20000000000084, @remote, 0x0, 0x1, 'none\x00', 0x20, 0x0, 0x1}, 0x2c) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, r2}) r4 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4000001c}]}}}]}, 0x44}}, 0x0) r7 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="7a89173f05dafa09d3909c3aa57be6515c575ee379547e818f3800dcadc7e71e27650709583fdbf287550074aedcf948177fb1b5b7448d8aba5f74fa23924ed4c3d95e4f7aa773ab3dc465097d84c7a796322505af946779280f29bc37f1aadace7fa5924437d58edc5d6df5c261c3234caf58c4dec50927610922e1287956d4480fc0ebc7812382a580cab9832e82cf8fd9b0b8f1913545dcc583b9c047687be6a90335f7f635cd30672f589613fe78ed227b17091932dff171add0f2f4daf283354d3eb014f08455c2702beeea952cf18d8e4857dbae4bace1864b67e6520c61663243c3c3ed0e3d44cba28c7ae70e72b4345be0db", 0xf6, 0x4895, &(0x7f0000000000)={0xa, 0x4e20, 0x7fff, @mcast2, 0x200005}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0xc, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000436f70c001811d5", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f00000003c0)={@remote, @private=0xa010101, @broadcast}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=@deltclass={0xcc0, 0x29, 0x10, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0xfff3, 0x1}, {0x3, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x5}, @TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0x1, 0x7fff, 0x4, 0x0, 0x6}, {0x2, 0x1, 0x2, 0x6, 0x4, 0x7e8e}, 0xd0c, 0x72effe4, 0x1, 0x1, 0x4}}]}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_RATE={0x6, 0x5, {0xd7, 0xbb}}, @TCA_RATE={0x6, 0x5, {0xf, 0x9}}, @TCA_RATE={0x6, 0x5, {0x10, 0x6}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_htb={{0x8}, {0xc10, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfa04, 0x4cf8, 0x3c, 0xffff, 0x2, 0x0, 0x3, 0xd8, 0x7, 0x8, 0x5, 0x4c, 0x9, 0x40, 0x6, 0x2, 0xfffffffc, 0x5, 0xdf, 0x8, 0xffff, 0x6, 0x0, 0x4, 0xfffffffc, 0x7, 0x6d, 0x100, 0x9, 0x8, 0x40, 0xa03, 0x5c0a, 0x7, 0x0, 0x9, 0x7, 0xd4, 0x0, 0x2, 0x4, 0x4cf6, 0x5, 0x8, 0x0, 0x38f8, 0xfffffdf7, 0x0, 0x7, 0x8, 0x5, 0x80, 0x1, 0x10, 0x8, 0xfffffffc, 0x1ff, 0x7, 0x81, 0x957f, 0x6, 0x40400, 0x4, 0x7, 0x0, 0x3, 0x7, 0x3, 0xfffffffa, 0x9, 0x400, 0x0, 0x0, 0x40, 0x6ff3, 0x1ff, 0x2, 0x3, 0xbd9f, 0x10000, 0x101, 0x86c, 0x7, 0x6e30, 0x2, 0x4, 0x9, 0x800, 0xc06e, 0x1, 0x7f, 0xe9, 0x0, 0x2, 0xa, 0x10000, 0xf, 0x800, 0x8, 0x4, 0x7, 0xf, 0x0, 0xfff, 0x40, 0x0, 0x472, 0x0, 0x7, 0x10001, 0xf198, 0x7, 0x1ff, 0x1, 0xfffffff1, 0x3609, 0xfffffe01, 0x3, 0x3, 0x1, 0xffffc26f, 0x9, 0x7ff, 0x80000000, 0x5, 0x9aa7, 0x10001, 0x0, 0x400, 0x0, 0x8, 0x1, 0x9, 0x6, 0x8, 0x6, 0x14, 0xfffffff8, 0x2, 0x8, 0x2d61, 0x9, 0x1ff, 0x9, 0xfff, 0x0, 0x56, 0xb, 0x3, 0x40, 0x40, 0x3, 0x3, 0x5, 0x9, 0x1, 0x3, 0x7fff, 0x7, 0x9, 0x0, 0x2, 0xb, 0x2, 0x3, 0xfffffff6, 0x3, 0x4, 0x0, 0x7, 0xffff, 0x913, 0x37, 0x6, 0x2, 0x215, 0x6, 0x5, 0x6, 0x4, 0x9, 0xc832, 0xfffffffc, 0x800, 0x7, 0x1, 0x1, 0x6, 0x7, 0x4, 0x7, 0xf8bb, 0x9, 0x7, 0x400, 0x4, 0x80000000, 0x8, 0x1b52cbcc, 0x3, 0xb, 0x855, 0x4, 0x4, 0x6, 0x3, 0x80000001, 0x7, 0x4e40, 0x9, 0x0, 0x6, 0x1, 0x80000001, 0xe80, 0x5, 0x2, 0xa, 0x1, 0x5, 0xb1d, 0x40, 0x800, 0x2, 0x7, 0x12c, 0x9, 0x5b, 0x2, 0xd143, 0xb, 0x101, 0xff, 0x10, 0xfffffffc, 0x6, 0x6, 0x10001, 0xffff, 0xe6, 0x0, 0x800, 0xd53, 0x800, 0x3, 0x2, 0x6, 0x8, 0x5, 0x908, 0x800, 0xc0000000, 0x80, 0x9, 0x6]}, @TCA_HTB_RTAB={0x404, 0x4, [0xd, 0x10, 0x66c7, 0x7f01409f, 0x2, 0x5, 0x6, 0x2, 0x3, 0x4710, 0x4, 0x6, 0xfffff488, 0x2, 0x800, 0x8, 0x1, 0x9, 0xfffffffc, 0x5, 0x6, 0x2, 0x1af00000, 0x0, 0xffffffff, 0xff, 0xfffffff3, 0x800, 0xc9ef, 0x6, 0x5, 0x5, 0x4f7, 0x4, 0x4, 0xb15, 0x5, 0xe, 0x6f, 0x70a, 0x0, 0xfffffff7, 0x2, 0x3, 0x82, 0x7, 0x518d1099, 0x1, 0x1000, 0x62dd, 0x10000, 0x6, 0x7, 0xf, 0x6, 0x6, 0x5, 0x6, 0x3, 0x7, 0x5, 0x3, 0x2, 0x8, 0x0, 0xfff, 0x9, 0x43, 0x6, 0x401, 0x2e, 0x4c, 0x1000, 0x0, 0x7, 0x7, 0x9, 0x81, 0x5, 0x6, 0x0, 0x1, 0x5, 0x401, 0x8, 0x7, 0x1, 0x0, 0x9, 0x3, 0xfffffff8, 0x427, 0x3, 0x0, 0x9, 0x7, 0x9, 0x800, 0x3, 0x8, 0xc, 0x800, 0x40, 0x80000000, 0x1, 0x8, 0x8001, 0x7fffffff, 0x0, 0x8, 0x9, 0xf, 0xfffeffff, 0x6, 0x3, 0xa47d, 0x9, 0x182000, 0x7f, 0x1, 0x101, 0xc, 0x4, 0x7f000, 0x1ff, 0x40, 0x10001, 0xd, 0x0, 0x6, 0x1, 0x5, 0x3, 0x97, 0x7ff, 0x10000, 0x2, 0x800, 0x6, 0xfffff874, 0x4, 0x9c, 0x5967, 0x4c77, 0x6f00, 0x3, 0x5, 0x7, 0x10, 0xff, 0x3ff, 0x2, 0x8, 0x800, 0xe, 0xfff, 0x6, 0x60, 0x7, 0xfffffffd, 0x8, 0x80000000, 0x5, 0xb1e, 0x9, 0x8, 0x7, 0x6, 0x24eb, 0x0, 0x5, 0x7, 0xec26, 0x100, 0xf, 0xd, 0x100, 0x0, 0x30be, 0x101, 0x400, 0x4, 0xfff, 0x1, 0x10000, 0x1ff, 0xfffffff9, 0x76, 0x7, 0x400, 0x10, 0xbc45, 0x7, 0x149, 0x5, 0x3, 0x2, 0x8, 0x9, 0x5, 0xd6, 0x6, 0x0, 0x7, 0x0, 0x8, 0x8000, 0x7, 0x8, 0x80000001, 0x5, 0x6, 0x400, 0x7, 0x101, 0x8, 0xfffff1b8, 0x1c, 0x2, 0x9, 0x5, 0x3, 0x1, 0x1, 0x4a, 0x6a88dd00, 0x9, 0x10001, 0x498ba1af, 0x8, 0x81, 0x0, 0x800, 0x1, 0xffff7dfc, 0x400, 0x58b60558, 0x2, 0x8, 0x45ae, 0xa8, 0xd, 0x7, 0x1, 0x1, 0x7, 0x8000, 0x2, 0x10000, 0xc4a, 0x4, 0xc3a, 0x5, 0x7, 0x67e, 0x7]}, @TCA_HTB_CTAB={0x404, 0x3, [0x9, 0x3, 0x5, 0xffffffff, 0x64, 0x4, 0xdc0, 0x2, 0x5, 0x62, 0x8, 0x9, 0xa, 0x1445, 0x7, 0x2, 0x1000, 0xa8000000, 0x7, 0x1ff, 0x7, 0x3, 0xec, 0x1ff, 0x1, 0x9, 0x9, 0x8, 0x0, 0x7, 0x2, 0x0, 0x4, 0xfffffd69, 0x10000, 0x6, 0x6, 0x2, 0x6, 0xe8b, 0x2b, 0x400, 0xffffffff, 0x1faf, 0xd0, 0x43af, 0x8001, 0xfffffffc, 0x9, 0x2, 0x9, 0x9, 0xfffffff7, 0x3, 0x10001, 0x1, 0x2, 0x1, 0x7, 0x2, 0x2, 0x0, 0x4ef, 0x80000000, 0x800, 0x4, 0x2, 0xc, 0x100, 0x0, 0x0, 0x5, 0x0, 0x8, 0x5a8, 0x18, 0x4, 0x8, 0x3, 0x9, 0x1, 0xffffffec, 0xa, 0x81, 0x6, 0x8, 0x80, 0x6, 0x4, 0x4, 0x0, 0xef83, 0xffff, 0xf, 0x7, 0x484, 0x5, 0x5, 0x4, 0x5, 0x6, 0x101, 0x4, 0x5, 0x18000, 0xffffff7c, 0x4, 0x5, 0x2, 0x9, 0x6, 0x9, 0x10000, 0x7fffffff, 0x5, 0x0, 0x8, 0x7, 0xc, 0x8eea, 0x1, 0x401, 0x6, 0x3, 0xc1, 0x10001, 0x8001, 0x0, 0x0, 0x3, 0x3, 0xb, 0x4, 0x40, 0x6, 0xfff, 0x3, 0x6, 0x46a, 0xffff, 0xb, 0x10001, 0x4, 0xfffffff7, 0x3, 0xa, 0x5, 0x3, 0x1, 0x9, 0x1000, 0x1, 0xc9, 0x3, 0x5, 0xae, 0x8, 0x337, 0x80000001, 0x1, 0x7f, 0xc9b000, 0x9, 0x9, 0x5, 0x7ff, 0x4, 0x0, 0xfffffffc, 0x5, 0xe, 0x9, 0x80000000, 0x9, 0x1, 0x2, 0x6ff, 0x4, 0x8, 0xfffff55d, 0x3, 0x1, 0x2, 0x2, 0xe987, 0x0, 0x5, 0x4, 0x8, 0x7aca, 0x2, 0xff, 0x2, 0x4, 0x9, 0x2, 0x3, 0xffffffff, 0x7ff, 0x8713, 0x5, 0x3, 0x6cff, 0x1000, 0x64d2, 0x2, 0x7, 0x0, 0x6, 0x1, 0x23e, 0x2, 0x9aea, 0x1, 0x3, 0x8001, 0x6, 0xba, 0x95d6, 0x5, 0xf9c0, 0x7fffffff, 0x0, 0x3, 0x800, 0x4, 0x4, 0x5, 0x6, 0x6, 0x5, 0x10000, 0x6, 0x0, 0x5, 0x7fff, 0xf, 0x8, 0x3, 0x7, 0x10000, 0x100, 0x0, 0x51, 0xffffffff, 0x0, 0x2, 0xd0e, 0x5746, 0x2400000, 0xffffff94, 0x0, 0xbc, 0x6, 0x1, 0x1ff]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0xcc0}, 0x1, 0x0, 0x0, 0x20020000}, 0x40) 728.404376ms ago: executing program 0 (id=5710): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@default, @default, @netrom, @rose, @default, @null, @remote, @default]}, &(0x7f0000000000)=0x48, 0xc00) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@RTM_NEWNSID={0x14, 0x58, 0x500, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x80) 699.423179ms ago: executing program 4 (id=5711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) 547.114851ms ago: executing program 0 (id=5712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="30000000210a010800000000000000000a0400010900020073797a31000000000900010073797a3100000000040003"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblc\x00', 0x20, 0x400000, 0x4}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffe0}, {0x2, 0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b7}, 0x24008004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffe0}, {0x2, 0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b7}, 0x24008004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @bcast}, [@rose, @remote, @rose, @rose, @netrom, @rose, @null, @default]}, &(0x7f0000000340)=0x48, 0x800) 539.345223ms ago: executing program 1 (id=5713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x28}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_connect\x00', r2}, 0x18) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @loopback}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 412.946891ms ago: executing program 3 (id=5714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 349.004101ms ago: executing program 2 (id=5715): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001000), 0x101000, 0x0) write$ppp(r0, &(0x7f0000001040)="3bb6b1547217b4727eb33c0f6e95f8832ec97fc8eccd8cefcffbe570b9a8ffd57d2889b3deb7df2b02d13733e9c07f833a2f02631d26d57d8286c824b5b6d4e924b0335c5c8c8021a34eed75db386e9da39f55c0b4b52df4d728854cf65e4169b66e81fdff92b328e0e5097a30ee5630a1ccee", 0x73) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r1, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r2, 0x0, 0x12, 0x32, &(0x7f00000000c0)="b44cd9b8ffa197aacb1bf528f416f35cb86e", &(0x7f0000000e00)=""/50, 0x40, 0x0, 0x88, 0x78, &(0x7f0000000e40)="054f2eed0ebdba49e928065e6a3b86d9f3c63c3229e317777a9a97506d93b3060ce4d86eb4663920b5097554dd622a9a18f4867e93ca74f2711aeaa727b816147614a8ab618eeccf681ce533de3add325c7ebff3191736448e6ff5025459aaccd51dc7649c35cbba40ebf3cad5d81caae28ede0e33ab125fde434c759f7f1a554e5f72a979c04f27", &(0x7f0000000f00)="cb4900008bcca3bbdd71094aa1170719e1b26276549badc4e2a3cd2e267717ca638a8d0094eae6c848d7825935fad11d9fa4d49c6b32adccf1ec4c598babfa12ac1501415f7f1f65e67a0c3a0855f9d4c9f21881f37e78278d8764a1245cf3f060c4b9305b577850a501963357edbfd8b6ddb20a9faa28a6", 0x2, 0x0, 0x81}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="c0000000000821010000000000000000000000092c000480080007080000000a0800054000000004080001400000072508000740000100000800064000000000050003001100000005000300840000001c000480080001400000000708000140000000f808000140000000050900010073797a300000000006000240dada000034000480080005400000069208000a400000000608000b40000013f008000340800000e8080007400000000508000240000000090900010073797a3100000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x30) 292.298493ms ago: executing program 0 (id=5716): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0xc00) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x7, 0x0, 0x39, r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) r3 = accept4(r1, &(0x7f0000000280), &(0x7f0000000300)=0x80, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r3}) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000900)={0x9, &(0x7f00000003c0)=[{@none}, {}, {}, {@none}, {@none}, {}, {}, {}, {@fixed}]}) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000940)) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000980)={{r3}, "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"}) getsockopt$inet6_buf(r6, 0x29, 0x2d, &(0x7f0000001980)=""/40, &(0x7f00000019c0)=0x28) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) (async) sendmsg$inet6(r1, &(0x7f0000002f80)={&(0x7f0000001a80)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000002ec0)=[{&(0x7f0000001ac0)="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", 0xff}, {&(0x7f0000001bc0)="c3e5c1da132d904babb7d2432874c0561d112327e11375100b4587ecdd7eeea79f5d0a44d8d3e832f199b19173cd4febc3a6bfde990b41ec87fef58c8c5ba6b3287830d7fc84e724d65d8f550450c875b354aa35be3fac89dbd1edd6f72a9dabdd8e3d04b493c328bd94ce3aa2304ef6f4d339b6", 0x74}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="5469aebab88445526d503a1b8370af4829cfb39a95c7b5c63429afe6bcb71247", 0x20}, {&(0x7f0000002c80)="aa636b91e9a45837b86615d7113370bba989", 0x12}, {&(0x7f0000002cc0)="dec67bb51b89217648232c1eb999d94d8001658a0371cece4533a6ef351058d7bb6532f824987bcce4aa5d8bf5c7281f063d7d2ce3abdd23634ddeec12f7ba9262ab62a9b6ff40f5c040652de8176301756185d8dfd6194591e7c7d50c5284f015339e6ecb9c79cbda95c059dcfe87874592dd27bbb963c8a3be819a14531825a6cc8c7749976c6177c1763c03e65a18473646141e91de32c58dc15a65bdf6199e26598242c9426acf11d14e9e198c7e7fb786cd3fcd9399529934d531a28b0c7b694445f9068290a30fca77680ffec671322fac", 0xd4}, {&(0x7f0000002dc0)="abd88f9fbe6d9f80", 0x8}, {&(0x7f0000002e00)="cc79c7004999e58516ab650e630b583a42b4e27774c3157a88885dda29cb835ac6141c9374d5c376b1af9c1f6e7d84b282ee5f1f76d83f1e24ecbb8b0608862f511bdfb51baaebb1644c169d83a1801b93d62ae9b05f3bfd6105923f67629c1dab4d619f5484b9ed3aec905d7cbd3f60956064", 0x73}, {&(0x7f0000002e80)="f8c3ce", 0x3}], 0x9}, 0x40) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x44, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000003100), 0x82, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000003140)={'vcan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000003180)=r9) (async) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000031c0), &(0x7f0000003200)=0x4) r10 = syz_init_net_socket$ax25(0x3, 0x0, 0x6) ioctl$FS_IOC_MEASURE_VERITY(r10, 0xc0046686, &(0x7f0000003240)={0x1, 0x98, "cdbb21094a6a959ca416ecec1d287700c53e5deba41629a2e7cde3ba02c2e2237a3fcb41eed8dd7000de7459c14ad48c8ffd45799e4bf914cc63b7cb30014f8e3c30aa834ea8c57124290bbad4d6126239b087f57597c35eb0315a83bb16b0e9864a452624e1876d815dde19a0c26fea26e34225df08bbbff8859fffb742d183202163c64473790df557269ce5e3c0e73a7dacaf2888b406"}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003780)={r5, 0xe0, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000034c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000003500)=[0x0], &(0x7f0000003540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000003580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000035c0), &(0x7f0000003600), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000003640)}}, 0x10) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000037c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x80000001, '\x00', r9, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003840)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003880)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000039c0)={0xe, 0x6, &(0x7f0000003300)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffff8}, @generic={0x3, 0x6, 0xa, 0x9, 0x7}, @func, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000003340)='syzkaller\x00', 0x40, 0xbc, &(0x7f0000003380)=""/188, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000003440)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000003480)={0x4, 0x2, 0x10}, 0x10, r11, r5, 0xa, &(0x7f00000038c0)=[r5, r12, r13, r14], &(0x7f0000003900)=[{0x4, 0x3, 0x1, 0x2}, {0x5, 0x5, 0xa}, {0x0, 0x5, 0x8, 0x1}, {0x4, 0x1, 0x8, 0xa}, {0x4, 0x1, 0x7, 0x7}, {0x5, 0x2, 0x1, 0x5}, {0x1, 0x1, 0x7, 0x4}, {0x4, 0x4, 0x2, 0x2}, {0x3, 0x1, 0xe}, {0x3, 0x3, 0x4, 0xb}], 0x10, 0x896}, 0x94) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000003a80)=0xab2b, 0x4) 268.659023ms ago: executing program 1 (id=5717): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x82}], 0x2, &(0x7f0000001fc0)=""/65, 0xfffffffffffffe76}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="b635763d393429c783", 0x9}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000001c0)="48000000140081fb7059ff00000004000aff0f030000038130216266c808222e40d6ee11000000006fabca1b4e7d06a6bd7cf750375ed08a562ad6e74703c48f93b82a0200000046", 0x48}], 0x1}, 0x10004000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x82}], 0x2, &(0x7f0000001fc0)=""/65, 0xfffffffffffffe76}, 0x1}], 0x1, 0x40002122, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="b635763d393429c783", 0x9}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000001c0)="48000000140081fb7059ff00000004000aff0f030000038130216266c808222e40d6ee11000000006fabca1b4e7d06a6bd7cf750375ed08a562ad6e74703c48f93b82a0200000046", 0x48}], 0x1}, 0x10004000) (async) 242.954341ms ago: executing program 0 (id=5718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x88, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="a16f", 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r8, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000000)="7084c3d1b35891ae8b1ccb110ec1", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008010) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) 188.743032ms ago: executing program 3 (id=5719): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 115.319172ms ago: executing program 3 (id=5720): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000181a0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000001800)=0x5, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000a1a1011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000200), 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000001c0)={0x1adb9, 0x100c, 0x0, 0x7, 0x1}) sendto$inet(r5, &(0x7f0000000700)="efea11f8e4d93647506ea0608186de7ab177959e129ad0f7a0152ed18e0e6579776d8a0ecb1597f4aa", 0x29, 0x20008800, &(0x7f00000017c0)={0x2, 0x4e21, @empty}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000580)={0xffff, 0x6000, 0x8009, 0x1, 0x80000001, 0x1, 0xfff, 0x4, 0x0}, &(0x7f00000005c0)=0x20) sendmsg$inet_sctp(r5, &(0x7f00000006c0)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="c6884d4e2118d287ce3827dc28c65b38b16264e831402fdff3cdff3ffb1ada59e6dad2539fb99ccd3ef8d5a8729033fb164d3a31012b01616ae28c61710bae5cb321423273da3c149671741b148854b95528f07959f8b298502ac25eeffc0db2f20d2cc5b9277e03d3afce726bf76ab48d34f9ae096a9ae1fb86787befb24b68096e29dc244a6c64bb4146d1e803b82700ddbce05c6d00dcd35a27811b98f239f66da719597a4a434c75e1e1fee4efc01c3f77ef981505cdf76da2edba0b98d46d24693525cf2a635226b1d13a0d6a77953a959d0dbb48ae7c2c20cb61329592a27208d61681c9e4d313694b88ba888c", 0xf0}, {&(0x7f0000000100)="bce2941a437b3efc075f1379e8cbfe5edfec49e6efda0a501dc6a71e3b08d85697661da7e17171b15b4fab3faece5a5b9faf57d862f1def336fabac4c4008584218c085acb521b77ab9328aedcd2ace8250c246bf98b8731a047e56be848d033d13c7e918256624739f1a3fcaeade42ff7d71b16d69a20cf50d9aa2fa1e6560e269cd030cb82a0e1c676a1b1d33ad9dd963ce71a63d9c973", 0x98}, {&(0x7f0000000380)="8713a4c3168df62328ad141d8e0ff5a1ab7c40d514b40d530f3f43ece06f50e170b5b3ff60c6", 0x26}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000400)="1761cf4a6b37e6e9999e52f51e57d7b2b6639871dcd9512eb9adf110d0c8c0ea3cb868c4f0f62ad692487c1a7dcb8a7e5bbceba4cf1ff9a3d875dc9df6bf7a5c0aed4e491c4b7f699998a993bfc97845911af4b846902d582a21ec19a53a48eed45a2d9c445b851d5e5e3b1e05d4f1c75ef10c43939283f55b822584e30c4c0f503ba29f14fe202b00b94b20995d2cc0857f7c5a01ff6b6063d326ac367cc96aca50929b289b0568a653dce28451aa5f097f6c95ff704a3ea6559a9de3b6036e4694c00cb1bf1ea3a6c285bb56e0406510297823c68a838785bc28a9b9668e", 0xdf}], 0x5, &(0x7f0000000600)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x6, 0x8209, 0x0, 0xa, 0xffffffff, 0x0, 0x6, r6}}, @init={0x18, 0x84, 0x0, {0x4, 0x2, 0xf2bb, 0x6239}}, @init={0x18, 0x84, 0x0, {0x3f37, 0x7, 0x3, 0x7f}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @init={0x18, 0x84, 0x0, {0x5, 0x101, 0x4}}], 0x90}, 0x8080) 107.099798ms ago: executing program 2 (id=5721): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x1d, 0x3, 0x1) getpeername$packet(r1, 0x0, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) 68.510975ms ago: executing program 0 (id=5722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_emit_ethernet(0x1d5, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x19f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "0000050000000000260004"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x0, 0xd, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba"}]}}}}}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="4700000001003f", 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7, r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0bb41edc69f5aa83011844711336c00"/35], 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r6, 0x8}, 0x8) 0s ago: executing program 1 (id=5723): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x53c, 0xc, 0xa, 0x205, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x51c, 0x3, 0x0, 0x1, [{0x518, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x17}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x110, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xfffffffa}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x68, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6d99}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x74}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}, @NFTA_SET_ELEM_KEY={0x188, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "c070151a021c6c00"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "954dfb73a23c334e23e80e2ffb7dae68f96ddf0c0f897fdf2875dab964c566b0ec3a5299eaf25b40adaed7140df3675a1de6c9203a2ea80c1b6e932d434a0d543ba078d95543902e8cc23ff1df21e196c0f87aa9c23f012023d59cfb81e08a4b89df7248bd88d9e6f6fadfb4bb6c7b7f782cb5f6b723ebf6f1e0194cf0baef01aa08e27c2c988898814b19c39d42fd0709f6eb36b2bcb10b31fd4b7b4fa4148111"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x31, 0x1, "cea9668c76a2c97a016c5899ff853664c25fd2b8c4d34b13a459431978a2ecdf16c6c1dfddf21d667aff581220"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x23c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "79205f53b6b2dd56e22e257286b6d5a3a30c290f860fb39434458ab5a108b1a6ab6f4594739599"}, @NFTA_DATA_VALUE={0xa1, 0x1, "744ec24f08af1fcfca68629ab8db6d1abad7185494d2b77f77aea079401f791b27b9540a14c57aeed5f09c573eadb170bc666399c07f9f9a1a9784af0ec104a8a02537e0bf8e04ef070af02f61abdc0fd8837b1dfaff4bd8d9da76b47fbcf819d948b70d006a07268580a8b1fdf3fef2596d2a9afe55d9992693eccf54497b9a6bffa97b55eeb94c4530b41d3f35b676d58968eec49d7e13cc1aaa4eb9"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "bd5766493fc441fa16668b5f973dc83969d87d897ac744e4a4cbfdd56aef5dd244054eafb189fd31fcc00330e44b6f14fc34c7466a0d49d514ddfc1c67d3a0827a8faceeb0288a267920ed630a15222060dce7383b0133f2279e97a180bce62ca8f2bb44ae6c65872aa4ab228d0ca4ddb3db066549c588be844e4f660cd58dcfa22a957e3ec51b19dfec5688bd0b7bf60f1aca2da1b6a2f563378b"}, @NFTA_DATA_VALUE={0x1f, 0x1, "fa7b0682f558472b5155d161a6d5d9beb1d208a7beef0821744054"}, @NFTA_DATA_VALUE={0x85, 0x1, "64d40bfa2482d3c3220402a6dd22fd996416a38629e84f2cbbf3091527d545ac81d71dc4d3b34f185295620a49b37c93fcf4e75c8595e8160101ecb291e03cff94416029e6a477f7f7cb4add8e972016957afb7f6f8036a62619cec706ca649569ebba3ada84e25830ab5580b25a94d1d09eac042d8e7693e7b0afaffd8a6a7616"}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5a0}, 0x1, 0x0, 0x0, 0x4000810}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000004c00)={0x24, r6, 0xb97534d5fe9704cf, 0x2, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x24}}, 0x4000004) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) (async, rerun: 64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r11, 0x607, 0x270bd07, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8480) (async, rerun: 64) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r10, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r12, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x44}}, 0x4000) kernel console output (not intermixed with test programs): ) entered forwarding state [ 372.069489][T17948] syzkaller0: entered promiscuous mode [ 372.076632][T17948] syzkaller0: entered allmulticast mode [ 372.164637][T17938] veth0: left promiscuous mode [ 372.183805][T17833] hsr_slave_0: entered promiscuous mode [ 372.204549][T17833] hsr_slave_1: entered promiscuous mode [ 372.213430][T17833] debugfs: 'hsr0' already exists in 'hsr' [ 372.224248][T17833] Cannot create hsr debugfs directory [ 373.867789][T17960] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 373.957573][T17968] bond1 (unregistering): Released all slaves [ 373.976007][ T5152] Bluetooth: hci3: command tx timeout [ 374.018899][T17969] tipc: Enabling of bearer rejected, failed to enable media [ 374.147349][T17984] netlink: 'syz.3.3364': attribute type 1 has an invalid length. [ 374.162631][T17982] __nla_validate_parse: 1 callbacks suppressed [ 374.162651][T17982] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3365'. [ 374.422149][T17994] bridge0: port 3(ipvlan2) entered blocking state [ 374.429151][T17994] bridge0: port 3(ipvlan2) entered disabled state [ 374.435930][T17994] ipvlan2: entered allmulticast mode [ 374.441284][T17994] bridge0: entered allmulticast mode [ 374.467686][T17999] Bluetooth: MGMT ver 1.23 [ 374.470836][T17994] ipvlan2: left allmulticast mode [ 374.486632][T17994] bridge0: left allmulticast mode [ 374.621435][T17833] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.634136][T17833] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.641242][T18007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3372'. [ 374.645160][T17833] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 374.654707][T18006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3372'. [ 374.664592][T17833] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 374.720277][T18004] netlink: 'syz.0.3371': attribute type 72 has an invalid length. [ 374.738205][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3371'. [ 374.850275][T18017] netlink: 'syz.3.3375': attribute type 1 has an invalid length. [ 374.870607][T17833] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.894368][T17833] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.909189][ T5202] udevd[5202]: worker [5831] /devices/virtual/block/nbd1 timeout; kill it [ 374.927022][ T5202] udevd[5202]: seq 12647 '/devices/virtual/block/nbd1' killed [ 374.951063][T17833] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 374.964308][T17833] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 374.980859][T18023] netlink: 'syz.1.3377': attribute type 3 has an invalid length. [ 375.089871][T17833] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.111906][T17833] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.123415][T17833] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 375.137449][T18029] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3379'. [ 375.143901][T17833] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 375.196278][T18025] bond1: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 375.262951][T17833] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.273737][T17833] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.285654][T17833] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 375.297750][T18039] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3381'. [ 375.297865][T17833] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 375.333061][T18039] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3381'. [ 375.364145][T18036] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3382'. [ 375.481117][T18042] xt_hashlimit: size too large, truncated to 1048576 [ 375.628600][T18048] netlink: 'syz.0.3383': attribute type 29 has an invalid length. [ 375.665305][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'. [ 375.748131][T17833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.797114][T17833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.838982][T17833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.867377][T17833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.995774][T18069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3389'. [ 376.056980][ T5152] Bluetooth: hci3: command tx timeout [ 376.112978][T18076] chnl_net:caif_netlink_parms(): no params data found [ 376.127684][T18076] caif1: entered promiscuous mode [ 376.232109][T18069] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.240186][T18069] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.339770][T18069] bridge_slave_0: left allmulticast mode [ 376.346059][T18069] bridge_slave_0: left promiscuous mode [ 376.352048][T18069] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.381348][T18069] bridge_slave_1: left allmulticast mode [ 376.387641][T18069] bridge_slave_1: left promiscuous mode [ 376.393566][T18069] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.427813][T18069] bond0: (slave bond_slave_0): Releasing backup interface [ 376.448920][T18069] bond0: (slave bond_slave_1): Releasing backup interface [ 376.467288][T18069] team0: Port device team_slave_0 removed [ 376.483365][T18069] team0: Port device team_slave_1 removed [ 376.493538][T18069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.504719][T18069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.518171][T18069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.529206][T18069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.548221][T18069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.567808][T18077] : renamed from hsr0 (while UP) [ 376.712002][T17833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.800006][T17833] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.884977][T10906] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.892231][T10906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.970532][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.978005][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.435950][T18132] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 377.449773][T18130] block nbd3: not configured, cannot reconfigure [ 377.797580][T17833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.944587][T17833] veth0_vlan: entered promiscuous mode [ 378.018098][T17833] veth1_vlan: entered promiscuous mode [ 378.127963][T17833] veth0_macvtap: entered promiscuous mode [ 378.137776][ T5152] Bluetooth: hci3: command tx timeout [ 378.153178][T18176] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 378.202564][T17833] veth1_macvtap: entered promiscuous mode [ 378.233239][T17833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.247500][T17833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.285509][T14995] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.304090][ T3792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.325759][ T5045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.363339][T18185] netlink: 'syz.1.3422': attribute type 4 has an invalid length. [ 378.379681][T18183] vlan2: entered allmulticast mode [ 378.386570][T18183] erspan0: entered allmulticast mode [ 378.403998][ T5045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.626611][T18198] netlink: 'syz.0.3427': attribute type 5 has an invalid length. [ 378.698768][T18202] netlink: 'syz.4.3428': attribute type 1 has an invalid length. [ 378.778231][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 378.793534][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.800776][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.889588][ T3792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.926815][ T3792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.005984][ T3792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.014838][ T3792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.171450][T18216] veth1_to_bond: entered allmulticast mode [ 379.199163][T18216] netlink: 'syz.3.3432': attribute type 13 has an invalid length. [ 379.234340][T18216] __nla_validate_parse: 14 callbacks suppressed [ 379.234362][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3432'. [ 379.267351][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3432'. [ 379.273654][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3432'. [ 379.311566][T18216] netlink: 'syz.3.3432': attribute type 13 has an invalid length. [ 379.328850][T18224] netlink: 'syz.2.3434': attribute type 1 has an invalid length. [ 379.340720][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3432'. [ 379.364402][T18215] bond0: (slave bond_slave_1): Releasing backup interface [ 379.398488][T18215] veth1_to_bond (unregistering): left allmulticast mode [ 379.409741][T15004] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.423841][T15004] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.434598][T15004] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.443905][T15004] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.818797][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3438'. [ 379.953911][T18249] netlink: 'syz.2.3441': attribute type 1 has an invalid length. [ 380.069507][ T25] block nbd1: Possible stuck request ffff888025010000: control (read@0,1024B). Runtime 240 seconds [ 380.080854][ T25] block nbd1: Possible stuck request ffff8880250101c0: control (read@1024,1024B). Runtime 240 seconds [ 380.093037][ T25] block nbd1: Possible stuck request ffff888025010380: control (read@2048,1024B). Runtime 240 seconds [ 380.104338][ T25] block nbd1: Possible stuck request ffff888025010540: control (read@3072,1024B). Runtime 240 seconds [ 380.377831][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3445'. [ 381.942982][T18265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.157168][T18265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.237758][T18285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3452'. [ 382.340264][T18265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.441754][T18265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.487295][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3454'. [ 382.738584][T10911] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.805572][T15000] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.817092][T18317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3459'. [ 382.841629][ T3792] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.979297][ T3792] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.051711][T18335] IPv6: NLM_F_REPLACE set, but no existing node found! [ 383.421104][T18353] netlink: 'syz.0.3468': attribute type 12 has an invalid length. [ 383.475635][T18356] netlink: 'syz.2.3469': attribute type 7 has an invalid length. [ 383.785262][T18375] netlink: 'syz.0.3474': attribute type 4 has an invalid length. [ 383.794083][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3474'. [ 383.945782][T18377] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.287449][T18398] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3481'. [ 384.608142][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3487'. [ 384.642909][T18427] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3488'. [ 384.790856][T18433] netlink: 179352 bytes leftover after parsing attributes in process `syz.4.3491'. [ 384.899673][T18436] netlink: 'syz.3.3492': attribute type 12 has an invalid length. [ 384.944777][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'. [ 385.259563][T18453] syzkaller1: entered promiscuous mode [ 385.305252][T18453] syzkaller1: entered allmulticast mode [ 385.355311][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3502'. [ 385.377928][T18462] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3501'. [ 385.388904][T18462] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3501'. [ 385.398298][T18462] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3501'. [ 385.426840][T18462] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode [ 385.448388][T18462] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode [ 385.536962][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3503'. [ 386.191461][T18511] tc_dump_action: action bad kind [ 386.201480][T18511] nbd: must specify a size in bytes for the device [ 386.257859][T18515] sctp: [Deprecated]: syz.4.3523 (pid 18515) Use of int in maxseg socket option. [ 386.257859][T18515] Use struct sctp_assoc_value instead [ 386.548288][T18528] ip6t_srh: unknown srh invflags 4000 [ 386.865867][T18560] nbd: nbd0 already in use [ 387.501385][T18584] netlink: 'syz.3.3546': attribute type 3 has an invalid length. [ 388.360610][T18627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.425608][T18634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.600385][T18642] netlink: 'syz.3.3563': attribute type 1 has an invalid length. [ 388.710908][T18642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.789582][T18644] bond3: (slave geneve2): making interface the new active one [ 388.808630][T18644] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 389.229791][T18680] lo speed is unknown, defaulting to 1000 [ 389.502281][T18698] __nla_validate_parse: 10 callbacks suppressed [ 389.502302][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'. [ 389.666585][T18705] bridge2: entered promiscuous mode [ 389.671966][T18705] bridge2: entered allmulticast mode [ 389.713094][T18705] team0: Port device bridge2 added [ 389.801426][T18712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3583'. [ 389.848082][T18711] tipc: Started in network mode [ 389.853113][T18711] tipc: Node identity 5a1e7d9945a3, cluster identity 4711 [ 389.874538][T18711] tipc: Enabled bearer , priority 0 [ 389.882211][T18715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3585'. [ 389.894122][T18711] syzkaller0: entered promiscuous mode [ 389.900048][T18711] syzkaller0: entered allmulticast mode [ 389.947268][T18711] netlink: 'syz.1.3584': attribute type 12 has an invalid length. [ 389.959989][T18711] tipc: Resetting bearer [ 390.027874][T18723] netlink: 'syz.0.3587': attribute type 23 has an invalid length. [ 390.037178][T18710] tipc: Resetting bearer [ 390.079853][T18710] tipc: Disabling bearer [ 390.251911][T18737] vlan3: entered promiscuous mode [ 390.260015][T18737] bridge0: entered promiscuous mode [ 390.421246][T18744] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3596'. [ 390.499878][T18753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3598'. [ 390.535655][T18753] nbd: must specify a size in bytes for the device [ 390.730428][T18764] sctp: [Deprecated]: syz.3.3601 (pid 18764) Use of int in max_burst socket option. [ 390.730428][T18764] Use struct sctp_assoc_value instead [ 390.853288][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3603'. [ 390.907908][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3603'. [ 390.951553][T18780] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3604'. [ 390.960646][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3603'. [ 390.995799][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3603'. [ 391.208543][T18789] bond3: option lp_interval: invalid value (0) [ 391.215198][T18789] bond3: option lp_interval: allowed values 1 - 2147483647 [ 391.225977][T18789] bond3 (unregistering): Released all slaves [ 391.272513][T18788] gretap2: entered promiscuous mode [ 391.289484][T18788] gretap2: entered allmulticast mode [ 392.102828][T18847] netlink: 'syz.4.3622': attribute type 29 has an invalid length. [ 392.139541][T18851] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 392.367865][T18862] 0: reclassify loop, rule prio 0, protocol 800 [ 392.549127][T18875] netlink: 'syz.2.3631': attribute type 30 has an invalid length. [ 392.593929][T18875] bond1: option arp_missed_max: invalid value (0) [ 392.601165][T18875] bond1: option arp_missed_max: allowed values 1 - 255 [ 392.623293][T18875] bond1 (unregistering): Released all slaves [ 392.907332][T18895] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 393.145337][T18914] ieee802154 phy0 wpan0: encryption failed: -90 [ 393.372054][T18929] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 393.488268][T18928] lo speed is unknown, defaulting to 1000 [ 393.725553][T18940] veth0: entered promiscuous mode [ 393.732396][T18940] veth0: left promiscuous mode [ 394.021695][T18953] bond3: entered allmulticast mode [ 394.027781][T18953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.089429][T18963] tipc: Enabling of bearer rejected, already enabled [ 394.123550][T18963] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 394.167329][T18963] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 394.728942][T18994] xt_hashlimit: size too large, truncated to 1048576 [ 394.737107][T18998] __nla_validate_parse: 86 callbacks suppressed [ 394.737138][T18998] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3669'. [ 394.825713][T18998] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3669'. [ 395.150564][T19019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'. [ 395.162103][T19020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3675'. [ 395.324772][T19025] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20003 [ 395.461078][T19034] 8021q: VLANs not supported on ip_vti0 [ 395.470531][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'. [ 395.589953][T19043] geneve3: entered promiscuous mode [ 395.649085][T19047] netlink: 'syz.0.3685': attribute type 1 has an invalid length. [ 395.652920][T19049] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3686'. [ 396.020716][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 396.307977][T19095] lo speed is unknown, defaulting to 1000 [ 396.386811][T19099] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3700'. [ 396.427160][T19099] 8021q: VLANs not supported on ip6tnl0 [ 396.497364][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3700'. [ 396.761136][T19113] sch_fq: defrate 0 ignored. [ 396.765296][T19110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3703'. [ 396.837133][T19120] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 397.837655][T19174] netlink: 'syz.2.3722': attribute type 1 has an invalid length. [ 397.993193][T19181] bond1: (slave ip6gretap1): making interface the new active one [ 398.023923][T19181] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 398.045857][T19179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.084149][T19174] netlink: 'syz.2.3722': attribute type 1 has an invalid length. [ 398.199894][T19186] bridge2: entered promiscuous mode [ 398.221580][T19186] bridge2: entered allmulticast mode [ 398.247397][T19186] team0: Port device bridge2 added [ 398.619335][T19223] Bluetooth: MGMT ver 1.23 [ 398.778133][T19236] netlink: 'syz.3.3741': attribute type 7 has an invalid length. [ 398.786541][T19236] netlink: 'syz.3.3741': attribute type 8 has an invalid length. [ 398.913719][T19242] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 398.949706][T19244] netlink: 'syz.2.3745': attribute type 10 has an invalid length. [ 398.976815][T19244] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.989061][T19244] bridge_slave_1: left allmulticast mode [ 398.994780][T19244] bridge_slave_1: left promiscuous mode [ 399.001142][T19244] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.039832][T19244] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 399.221882][T19256] syzkaller0: entered promiscuous mode [ 399.238794][T19256] syzkaller0: entered allmulticast mode [ 399.548608][T19268] netlink: 'syz.1.3752': attribute type 1 has an invalid length. [ 399.611579][T19268] bond5: entered promiscuous mode [ 399.617661][T19268] 8021q: adding VLAN 0 to HW filter on device bond5 [ 399.732583][T19268] bond5: (slave bridge3): making interface the new active one [ 399.741144][T19268] bridge3: entered promiscuous mode [ 399.786010][T19268] bridge3: left promiscuous mode [ 399.996773][T19286] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 400.046635][T19286] : entered promiscuous mode [ 400.177067][T19293] __nla_validate_parse: 9 callbacks suppressed [ 400.177089][T19293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'. [ 400.218685][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3760'. [ 400.228502][T19297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3759'. [ 400.237793][T19297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3759'. [ 400.242289][T14993] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.249271][T19293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'. [ 400.272914][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'. [ 400.282306][T15000] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.300026][T15000] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.312462][T15000] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.392369][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'. [ 400.520954][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3764'. [ 400.547659][T19310] netlink: 'syz.0.3764': attribute type 4 has an invalid length. [ 400.557451][T19310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3764'. [ 400.924064][T19330] bond4: Unable to set up delay as MII monitoring is disabled [ 400.951200][T19330] bond4 (unregistering): Released all slaves [ 401.368511][T19341] bridge0: port 3(team0) entered disabled state [ 401.375504][T19341] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.383450][T19341] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.697250][T19360] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 402.096540][T19382] netlink: 'syz.3.3779': attribute type 10 has an invalid length. [ 402.110411][T19382] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3779'. [ 402.259899][T19387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.296470][T19387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.557887][T19407] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 403.207615][T19449] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 403.785099][T19481] netlink: 'syz.0.3816': attribute type 1 has an invalid length. [ 404.101585][T19501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.483015][T19528] netlink: 'syz.0.3832': attribute type 3 has an invalid length. [ 404.499961][T19528] netlink: 'syz.0.3832': attribute type 3 has an invalid length. [ 404.518094][T19528] netlink: 'syz.0.3832': attribute type 3 has an invalid length. [ 404.736674][T19541] IPv6: sit1: Disabled Multicast RS [ 404.756718][T19541] sit1: entered allmulticast mode [ 404.987067][T19561] netlink: 'syz.2.3842': attribute type 11 has an invalid length. [ 405.471695][T19585] __nla_validate_parse: 44 callbacks suppressed [ 405.471718][T19585] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3849'. [ 405.475496][T19588] netlink: 'syz.2.3850': attribute type 13 has an invalid length. [ 405.518470][T19585] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3849'. [ 405.626229][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3850'. [ 405.834485][T19609] netlink: 'syz.4.3855': attribute type 11 has an invalid length. [ 405.900135][T19614] netlink: 'syz.4.3855': attribute type 10 has an invalid length. [ 406.030303][T19621] netlink: 'syz.4.3855': attribute type 1 has an invalid length. [ 406.112004][T19623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3855'. [ 406.143113][T19623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3855'. [ 406.208144][T19614] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 406.226508][T19615] tipc: Started in network mode [ 406.239175][T19615] tipc: Node identity b61622284f79, cluster identity 4711 [ 406.255676][T19615] tipc: Enabled bearer , priority 0 [ 406.278379][T19618] syzkaller0: entered promiscuous mode [ 406.284122][T19618] syzkaller0: entered allmulticast mode [ 406.330836][T19609] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 406.413349][T19610] tipc: Resetting bearer [ 406.461751][T19610] tipc: Disabling bearer [ 406.640310][T19645] warn_alloc: 1 callbacks suppressed [ 406.640329][T19645] syz.3.3864: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 406.683455][T19646] syzkaller0: entered promiscuous mode [ 406.684968][T19645] CPU: 1 UID: 0 PID: 19645 Comm: syz.3.3864 Not tainted syzkaller #0 PREEMPT(full) [ 406.684993][T19645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.685003][T19645] Call Trace: [ 406.685010][T19645] [ 406.685018][T19645] dump_stack_lvl+0x189/0x250 [ 406.685050][T19645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.685071][T19645] ? __pfx__printk+0x10/0x10 [ 406.685097][T19645] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 406.685124][T19645] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 406.685153][T19645] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 406.685182][T19645] warn_alloc+0x214/0x310 [ 406.685204][T19645] ? stack_depot_save_flags+0x40/0x850 [ 406.685228][T19645] ? __pfx_warn_alloc+0x10/0x10 [ 406.685252][T19645] ? kasan_save_track+0x3e/0x80 [ 406.685270][T19645] ? __kasan_kmalloc+0x93/0xb0 [ 406.685292][T19645] ? xsk_setsockopt+0x4dc/0x8d0 [ 406.685309][T19645] ? do_sock_setsockopt+0x17c/0x1b0 [ 406.685331][T19645] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 406.685353][T19645] ? do_syscall_64+0xfa/0xf80 [ 406.685374][T19645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.685401][T19645] __vmalloc_node_range_noprof+0x125/0x12d0 [ 406.685455][T19645] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 406.685482][T19645] ? __kasan_kmalloc+0x93/0xb0 [ 406.685511][T19645] vmalloc_user_noprof+0xad/0xf0 [ 406.685535][T19645] ? xskq_create+0xbf/0x170 [ 406.685556][T19645] xskq_create+0xbf/0x170 [ 406.685580][T19645] xsk_init_queue+0xb0/0x110 [ 406.685601][T19645] xsk_setsockopt+0x4dc/0x8d0 [ 406.685623][T19645] ? __pfx_xsk_setsockopt+0x10/0x10 [ 406.685644][T19645] ? __pfx_aa_sk_perm+0x10/0x10 [ 406.685672][T19645] ? aa_sock_opt_perm+0xff/0x1a0 [ 406.685692][T19645] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 406.685714][T19645] ? __pfx_xsk_setsockopt+0x10/0x10 [ 406.685733][T19645] do_sock_setsockopt+0x17c/0x1b0 [ 406.685763][T19645] __x64_sys_setsockopt+0x13f/0x1b0 [ 406.685951][T19645] do_syscall_64+0xfa/0xf80 [ 406.685978][T19645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.685996][T19645] ? clear_bhb_loop+0x60/0xb0 [ 406.686018][T19645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.686035][T19645] RIP: 0033:0x7fd91ff8f749 [ 406.686053][T19645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.686069][T19645] RSP: 002b:00007fd920e13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 406.686089][T19645] RAX: ffffffffffffffda RBX: 00007fd9201e5fa0 RCX: 00007fd91ff8f749 [ 406.686101][T19645] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 406.686111][T19645] RBP: 00007fd920013f91 R08: 0000000000000004 R09: 0000000000000000 [ 406.686122][T19645] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.686132][T19645] R13: 00007fd9201e6038 R14: 00007fd9201e5fa0 R15: 00007ffcb3494ee8 [ 406.686164][T19645] [ 406.686172][T19645] Mem-Info: [ 406.696501][T19646] syzkaller0: entered allmulticast mode [ 406.735834][T19645] active_anon:4990 inactive_anon:0 isolated_anon:0 [ 406.735834][T19645] active_file:2692 inactive_file:40006 isolated_file:0 [ 406.735834][T19645] unevictable:768 dirty:35 writeback:0 [ 406.735834][T19645] slab_reclaimable:12738 slab_unreclaimable:181194 [ 406.735834][T19645] mapped:29210 shmem:1413 pagetables:1078 [ 406.735834][T19645] sec_pagetables:0 bounce:0 [ 406.735834][T19645] kernel_misc_reclaimable:0 [ 406.735834][T19645] free:1235219 free_pcp:13910 free_cma:0 [ 407.125018][T19645] Node 0 active_anon:20416kB inactive_anon:0kB active_file:10768kB inactive_file:159816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116800kB dirty:140kB writeback:0kB shmem:4120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16496kB pagetables:4416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 407.190577][T19645] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 407.251552][T19645] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 407.286403][T19645] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 407.292242][T19645] Node 0 DMA32 free:989356kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20416kB inactive_anon:0kB active_file:10768kB inactive_file:159816kB unevictable:1536kB writepending:140kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:49224kB local_pcp:21996kB free_cma:0kB [ 407.297040][T19660] x_tables: duplicate underflow at hook 1 [ 407.355214][T19645] lowmem_reserve[]: 0 0 0 0 0 [ 407.374967][T19645] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 407.438590][T19645] lowmem_reserve[]: 0 0 0 0 0 [ 407.443433][T19645] Node 1 Normal free:3894912kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16016kB local_pcp:5984kB free_cma:0kB [ 407.486327][T19645] lowmem_reserve[]: 0 0 0 0 0 [ 407.496453][T19645] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 407.530043][T19645] Node 0 DMA32: 537*4kB (ME) 367*8kB (UM) 231*16kB (ME) 116*32kB (UME) 39*64kB (UME) 42*128kB (ME) 10*256kB (M) 1*512kB (M) 5*1024kB (ME) 5*2048kB (M) 231*4096kB (M) = 984972kB [ 407.573655][T19645] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 407.594798][T19645] Node 1 Normal: 202*4kB (UE) 49*8kB (UME) 37*16kB (UME) 96*32kB (UME) 26*64kB (UME) 10*128kB (UME) 2*256kB (M) 5*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3894912kB [ 407.654661][T19645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.688456][T19645] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.715184][T19645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.757791][T19645] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.789640][T19645] 44109 total pagecache pages [ 407.794379][T19645] 0 pages in swap cache [ 407.825172][T19645] Free swap = 124996kB [ 407.829452][T19645] Total swap = 124996kB [ 407.833632][T19645] 2097051 pages RAM [ 407.847973][T19645] 0 pages HighMem/MovableOnly [ 407.855247][T19645] 424280 pages reserved [ 407.859739][T19645] 0 pages cma reserved [ 407.930206][T19685] netlink: 'syz.4.3876': attribute type 1 has an invalid length. [ 407.976333][T19685] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3876'. [ 408.019813][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 408.094728][T19692] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3878'. [ 408.150581][T19694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3879'. [ 408.344056][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3880'. [ 408.364577][T19701] netlink: 'syz.4.3880': attribute type 11 has an invalid length. [ 408.474782][T15001] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.480218][T19701] netlink: 'syz.4.3880': attribute type 11 has an invalid length. [ 408.490972][T15001] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.533747][T15001] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.577208][T15001] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.008706][T19734] syzkaller1: entered promiscuous mode [ 409.022811][T19734] syzkaller1: entered allmulticast mode [ 409.364627][T19748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.620343][T19758] bond6 (unregistering): Released all slaves [ 410.145435][ T25] block nbd1: Possible stuck request ffff888025010000: control (read@0,1024B). Runtime 270 seconds [ 410.158394][ T25] block nbd1: Possible stuck request ffff8880250101c0: control (read@1024,1024B). Runtime 270 seconds [ 410.171124][ T25] block nbd1: Possible stuck request ffff888025010380: control (read@2048,1024B). Runtime 270 seconds [ 410.182549][ T25] block nbd1: Possible stuck request ffff888025010540: control (read@3072,1024B). Runtime 270 seconds [ 410.412657][T19804] openvswitch: netlink: IP tunnel dst address not specified [ 410.462941][T19811] netlink: 'syz.0.3915': attribute type 1 has an invalid length. [ 410.496198][T19811] netlink: 'syz.0.3915': attribute type 4 has an invalid length. [ 410.503997][T19811] __nla_validate_parse: 8 callbacks suppressed [ 410.504015][T19811] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3915'. [ 410.584493][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3918'. [ 410.596038][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3918'. [ 410.828552][T19828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3923'. [ 410.895635][T19828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3923'. [ 410.906244][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3923'. [ 411.045593][T19847] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 411.090339][T19847] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 411.163220][T19854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3931'. [ 411.184240][T19856] netlink: 'syz.0.3932': attribute type 10 has an invalid length. [ 411.329336][T19862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.335546][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 411.341915][T19862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.385408][T19868] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3937'. [ 411.424353][T19864] veth0: entered promiscuous mode [ 411.492829][T19863] veth0: left promiscuous mode [ 411.504660][T19869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3936'. [ 411.627504][T19881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3940'. [ 411.788872][T19888] syzkaller1: entered promiscuous mode [ 411.804831][T19888] syzkaller1: entered allmulticast mode [ 411.861909][T19893] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 411.868455][T19888] netlink: 'syz.4.3941': attribute type 19 has an invalid length. [ 412.016276][T19900] netlink: 'syz.0.3945': attribute type 9 has an invalid length. [ 412.044617][T19900] netlink: 'syz.0.3945': attribute type 11 has an invalid length. [ 412.063241][T19900] netlink: 'syz.0.3945': attribute type 12 has an invalid length. [ 413.111383][T19960] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 413.317985][T19972] unsupported nlmsg_type 40 [ 413.592403][T19983] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 413.607535][T19983] bond4 (unregistering): Released all slaves [ 414.148250][T19994] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 414.177829][T19994] bond3 (unregistering): Released all slaves [ 414.337297][T20020] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 414.344691][T20020] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 414.491303][T20028] netlink: 'syz.2.3987': attribute type 11 has an invalid length. [ 415.107978][T20061] validate_nla: 2 callbacks suppressed [ 415.107998][T20061] netlink: 'syz.3.3994': attribute type 7 has an invalid length. [ 415.174183][T20062] netlink: 'syz.2.3996': attribute type 58 has an invalid length. [ 415.737501][T20106] netlink: 'syz.4.4008': attribute type 11 has an invalid length. [ 416.583933][T20125] can: request_module (can-proto-0) failed. [ 416.594759][T20126] can: request_module (can-proto-0) failed. [ 416.739752][T20136] bond6 (unregistering): Released all slaves [ 416.764175][T20142] openvswitch: netlink: IP tunnel dst address not specified [ 416.845658][T20144] syzkaller0: entered promiscuous mode [ 416.851191][T20144] syzkaller0: entered allmulticast mode [ 416.888437][T20142] __nla_validate_parse: 33 callbacks suppressed [ 416.888458][T20142] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4017'. [ 417.289935][T20166] syzkaller1: entered promiscuous mode [ 417.306522][T20166] syzkaller1: entered allmulticast mode [ 417.329379][T20166] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4026'. [ 417.369071][T20170] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 417.375258][T20166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4026'. [ 417.384101][T20170] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 417.510970][T20166] bond3: entered promiscuous mode [ 417.520523][T20166] bond3: entered allmulticast mode [ 417.527111][T20166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 417.624425][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4032'. [ 417.647909][T20184] geneve2: entered promiscuous mode [ 417.658827][T20184] geneve2: entered allmulticast mode [ 417.682720][T15005] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 417.715474][T15005] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 417.748815][T15005] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 417.778730][T15005] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 417.902197][T20200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4036'. [ 417.951318][T20202] sctp: [Deprecated]: syz.0.4039 (pid 20202) Use of int in max_burst socket option. [ 417.951318][T20202] Use struct sctp_assoc_value instead [ 418.044614][T20210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4041'. [ 418.060639][T20211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4042'. [ 418.088943][T20210] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 418.277693][T20223] vlan2: entered allmulticast mode [ 418.293393][T20229] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4048'. [ 418.388357][T20234] batadv_slave_1: entered promiscuous mode [ 418.437610][T20236] bond0: entered promiscuous mode [ 418.442770][T20236] bond_slave_0: entered promiscuous mode [ 418.458464][T20236] bond_slave_1: entered promiscuous mode [ 418.468615][T20236] bridge_slave_1: entered promiscuous mode [ 418.478283][T20236] batadv0: entered promiscuous mode [ 418.486684][T20236] debugfs: 'hsr1' already exists in 'hsr' [ 418.492778][T20236] Cannot create hsr debugfs directory [ 418.499645][T20236] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 418.518368][T20244] macvlan2: entered promiscuous mode [ 418.531020][T20245] macvlan3: entered promiscuous mode [ 418.548675][T20233] batadv_slave_1: left promiscuous mode [ 418.656353][T20249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4054'. [ 418.668495][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 418.680858][T20249] netlink: 'syz.0.4054': attribute type 7 has an invalid length. [ 419.161652][T20272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.193555][T20276] x_tables: unsorted entry at hook 2 [ 419.720132][T20311] netlink: 'syz.3.4076': attribute type 7 has an invalid length. [ 420.064651][T20335] bond6: entered promiscuous mode [ 420.083804][T20335] bond6: entered allmulticast mode [ 420.115163][T20335] 8021q: adding VLAN 0 to HW filter on device bond6 [ 420.174424][T20339] netlink: 'syz.1.4082': attribute type 10 has an invalid length. [ 420.209366][T20339] veth0_virt_wifi: entered allmulticast mode [ 420.280991][T20339] team0: Port device veth0_virt_wifi added [ 420.562723][T20357] syzkaller0: entered promiscuous mode [ 420.571015][T20357] syzkaller0: entered allmulticast mode [ 420.591992][T20357] 0: reclassify loop, rule prio 0, protocol 800 [ 420.850938][T20370] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 420.886602][T20370] bond4: entered promiscuous mode [ 420.891857][T20370] bond4: entered allmulticast mode [ 420.898045][T20370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.163150][T20392] tipc: Started in network mode [ 421.169495][T20392] tipc: Node identity e0000002, cluster identity 4711 [ 421.195214][T20392] tipc: Enabling of bearer rejected, failed to enable media [ 421.310021][T20392] bond2: option mode: invalid value (133) [ 421.319171][T20392] bond2 (unregistering): Released all slaves [ 421.340784][T20404] Bluetooth: MGMT ver 1.23 [ 421.819987][T20430] netlink: 'syz.3.4108': attribute type 13 has an invalid length. [ 422.018737][T20445] __nla_validate_parse: 12 callbacks suppressed [ 422.018758][T20445] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4113'. [ 422.047934][T20447] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4113'. [ 422.257138][T20454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4115'. [ 422.304174][T20454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4115'. [ 422.400207][T20454] bond7 (unregistering): Released all slaves [ 422.633054][T20472] netlink: 'syz.4.4119': attribute type 17 has an invalid length. [ 422.641986][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 422.653622][T20472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4119'. [ 422.706528][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4122'. [ 422.719157][T20484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4124'. [ 422.755128][T20484] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4124'. [ 422.765192][T20484] netlink: 'syz.3.4124': attribute type 5 has an invalid length. [ 422.783324][T20484] netlink: 'syz.3.4124': attribute type 6 has an invalid length. [ 422.802379][T20484] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4124'. [ 422.943790][T20492] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 422.984100][T20492] netlink: 'syz.3.4127': attribute type 7 has an invalid length. [ 423.030227][T20492] netlink: 'syz.3.4127': attribute type 7 has an invalid length. [ 423.037018][T20498] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 423.413903][T20510] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 423.680652][T20524] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.688555][T20524] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.701896][T20527] netlink: 'syz.4.4138': attribute type 1 has an invalid length. [ 424.018107][T20540] bond5: entered promiscuous mode [ 424.041549][T20540] 8021q: adding VLAN 0 to HW filter on device bond5 [ 424.126071][T20544] bond5: (slave bridge3): making interface the new active one [ 424.133704][T20544] bridge3: entered promiscuous mode [ 424.142845][T20544] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 424.188693][T20557] xt_l2tp: v2 sid > 0xffff: 1114112 [ 424.328110][T20557] can: request_module (can-proto-4) failed. [ 424.364548][T20572] macvlan3: entered promiscuous mode [ 424.408247][T20573] macvlan4: entered promiscuous mode [ 424.831130][T20598] nbd: must specify at least one socket [ 424.838860][T20598] block nbd1: NBD_DISCONNECT [ 424.843644][T20598] block nbd1: Send disconnect failed -32 [ 424.849816][T20598] block nbd1: shutting down sockets [ 424.876372][ C0] blk_print_req_error: 138 callbacks suppressed [ 424.876397][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.891869][ C0] buffer_io_error: 138 callbacks suppressed [ 424.891884][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 424.909295][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.918634][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 424.926963][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.936117][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 424.946112][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.955233][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 424.963548][ T5831] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.988416][ T5831] Buffer I/O error on dev nbd1, logical block 0, async page read [ 425.027888][ T5831] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.044445][T20605] pim6reg1: entered promiscuous mode [ 425.050354][T20605] pim6reg1: entered allmulticast mode [ 425.058554][ T5831] Buffer I/O error on dev nbd1, logical block 1, async page read [ 425.105117][ T5831] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.120399][ T5831] Buffer I/O error on dev nbd1, logical block 2, async page read [ 425.145207][ T5831] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.154398][ T5831] Buffer I/O error on dev nbd1, logical block 3, async page read [ 425.185153][ T5831] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.194529][ T5831] Buffer I/O error on dev nbd1, logical block 0, async page read [ 425.210783][T20611] ip6t_srh: unknown srh invflags 4000 [ 425.235771][ T5831] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.255941][ T5831] Buffer I/O error on dev nbd1, logical block 1, async page read [ 425.275710][ T5831] ldm_validate_partition_table(): Disk read failed. [ 425.300658][ T5831] Dev nbd1: unable to read RDB block 0 [ 425.328475][ T5831] nbd1: unable to read partition table [ 425.414133][ T5202] udevd[5202]: worker [5831] terminated by signal 9 (Killed) [ 425.447128][ T5202] udevd[5202]: worker [5831] failed while handling '/devices/virtual/block/nbd1' [ 425.726227][T20637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.767871][ T5933] lo speed is unknown, defaulting to 1000 [ 426.075758][T20655] syzkaller0: entered promiscuous mode [ 426.095889][T20655] syzkaller0: entered allmulticast mode [ 426.124079][T20655] syzkaller0: left promiscuous mode [ 426.129709][T20655] syzkaller0: left allmulticast mode [ 426.836481][T20700] validate_nla: 35 callbacks suppressed [ 426.836500][T20700] netlink: 'syz.0.4191': attribute type 1 has an invalid length. [ 426.852541][T20701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.958854][T20700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 427.037942][T20715] xt_cgroup: invalid path, errno=-2 [ 427.082288][T20717] netlink: 'syz.1.4192': attribute type 24 has an invalid length. [ 427.147199][T20721] tap0: tun_chr_ioctl cmd 1074025672 [ 427.167441][T20721] tap0: ignored: set checksum disabled [ 427.193111][T20721] netlink: 'syz.0.4194': attribute type 11 has an invalid length. [ 427.215595][T20721] __nla_validate_parse: 24 callbacks suppressed [ 427.215618][T20721] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.4194'. [ 427.306378][T20732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4197'. [ 427.757047][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4199'. [ 428.517270][T20770] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4207'. [ 428.545867][T20771] netlink: 'syz.1.4207': attribute type 11 has an invalid length. [ 428.584180][T20771] netlink: 'syz.1.4207': attribute type 11 has an invalid length. [ 428.600980][T20771] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4207'. [ 428.633590][T20783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4211'. [ 428.687609][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4211'. [ 428.750257][T20783] tipc: Enabling of bearer rejected, failed to enable media [ 428.864718][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4214'. [ 429.089141][T20801] tipc: Enabling not permitted [ 429.099987][T20801] tipc: Enabling of bearer rejected, failed to enable media [ 429.219362][T20809] batadv_slave_1: entered promiscuous mode [ 429.298648][T20806] batadv_slave_1: left promiscuous mode [ 429.861094][T20849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4236'. [ 429.944219][T20853] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4235'. [ 430.317850][T20877] x_tables: unsorted underflow at hook 1 [ 430.402887][T20882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.438684][T20882] netlink: 'syz.2.4247': attribute type 4 has an invalid length. [ 431.080374][T20898] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 431.091834][T20899] xt_TPROXY: Can be used only with -p tcp or -p udp [ 431.185068][T20905] netlink: 'syz.2.4254': attribute type 10 has an invalid length. [ 431.370935][T20918] netlink: 'syz.3.4258': attribute type 7 has an invalid length. [ 431.392145][T20918] netlink: 'syz.3.4258': attribute type 8 has an invalid length. [ 431.431066][T20920] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 431.487606][T20918] erspan0: entered promiscuous mode [ 431.515438][T20918] batadv_slave_1: entered promiscuous mode [ 431.525508][T20918] batadv_slave_1: left promiscuous mode [ 431.539347][T20918] erspan0: left promiscuous mode [ 431.568033][T20923] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 431.576073][T20923] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 431.828823][T20931] netlink: 'syz.0.4265': attribute type 1 has an invalid length. [ 431.946098][T20939] team0: Port device team_slave_0 removed [ 432.033785][T20931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 432.041655][T20942] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 432.070133][T20942] bond5: entered allmulticast mode [ 432.232905][T20957] __nla_validate_parse: 74 callbacks suppressed [ 432.232929][T20957] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4273'. [ 432.391391][T20967] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4275'. [ 432.402771][T20966] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4275'. [ 432.612068][T20935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.634656][T20935] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 432.726987][T20935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 432.732967][T20935] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 432.771778][T20988] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4282'. [ 432.771998][T20935] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 432.802390][T20935] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 432.837553][T20935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 432.850358][T20935] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 433.057317][T21003] bridge2: entered promiscuous mode [ 433.062722][T21003] bridge2: entered allmulticast mode [ 433.108732][T21012] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 433.143290][T21009] tipc: New replicast peer: 255.255.255.255 [ 433.164175][T21009] tipc: Enabled bearer , priority 10 [ 433.302923][T21029] Cannot find set identified by id 0 to match [ 433.317412][T21029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4294'. [ 433.333933][ T5933] IPVS: starting estimator thread 0... [ 433.442683][T21041] netlink: 'syz.2.4297': attribute type 1 has an invalid length. [ 433.455620][T21032] IPVS: using max 24 ests per chain, 57600 per kthread [ 433.471404][T21040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4298'. [ 433.533733][T21043] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4299'. [ 433.568292][T21043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4299'. [ 433.617815][T21047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4301'. [ 433.632254][T21046] tipc: Enabled bearer , priority 0 [ 433.643591][T21046] tipc: Resetting bearer [ 433.651149][T21046] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4300'. [ 433.780784][T21057] veth0: entered promiscuous mode [ 433.846621][T21056] veth0: left promiscuous mode [ 434.327470][T21092] netlink: 'syz.1.4311': attribute type 26 has an invalid length. [ 434.372350][T21092] netlink: 'syz.1.4311': attribute type 26 has an invalid length. [ 434.635000][ T5894] tipc: Node number set to 3758096386 [ 434.724575][T21111] º: renamed from veth1_vlan (while UP) [ 435.085977][T21131] openvswitch: netlink: Flow actions attr not present in new flow. [ 435.106615][T21129] block nbd1: Unsupported socket: should be TCP or UNIX. [ 435.129112][T21135] netlink: 'syz.2.4326': attribute type 1 has an invalid length. [ 435.261567][T21135] bond2: entered promiscuous mode [ 435.288864][T21135] bond2: entered allmulticast mode [ 435.302792][T21135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.341903][T21137] macvlan2: entered promiscuous mode [ 435.392293][T21150] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 435.426979][T21137] macvlan2: entered allmulticast mode [ 435.462819][T21137] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 435.622209][T21153] openvswitch: netlink: IP tunnel dst address not specified [ 435.891013][T21160] macvlan2: entered promiscuous mode [ 435.927973][T21160] macvlan3: entered promiscuous mode [ 436.520404][T21187] bond6: option min_links: invalid value (18446744073709551614) [ 436.631592][T21192] udevd[21192]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 436.665282][T21187] bond6: option min_links: allowed values 0 - 2147483647 [ 436.689346][T21199] udevd[21199]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 436.747205][T21187] bond6 (unregistering): Released all slaves [ 436.924258][T21221] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.400251][T21242] __nla_validate_parse: 23 callbacks suppressed [ 437.400274][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4352'. [ 437.505634][T21248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4352'. [ 437.619276][T21255] syzkaller1: entered promiscuous mode [ 437.656296][T21255] syzkaller1: entered allmulticast mode [ 437.977714][T21277] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 438.069334][T21270] tipc: Enabled bearer , priority 0 [ 438.233380][T21270] syzkaller0: MTU too low for tipc bearer [ 438.267406][T21270] tipc: Disabling bearer [ 438.279592][T21299] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4368'. [ 438.280741][T21301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4370'. [ 438.327322][T21306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4371'. [ 438.347634][T21306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4371'. [ 438.418350][T21306] gretap3: entered promiscuous mode [ 438.423767][T21306] gretap3: entered allmulticast mode [ 438.438339][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4370'. [ 438.448209][T21301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4370'. [ 438.671112][T21326] netlink: 'syz.2.4378': attribute type 1 has an invalid length. [ 438.819625][T21332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 438.847493][T21332] bond3: (slave bond4): making interface the new active one [ 438.881073][T21332] bond3: (slave bond4): Enslaving as an active interface with an up link [ 438.927000][T21326] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 438.941189][T21326] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 439.201812][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'. [ 439.521514][T21385] tipc: Started in network mode [ 439.538087][T21385] tipc: Node identity 129ed1a2966f, cluster identity 4711 [ 439.546230][T21385] tipc: Enabled bearer , priority 0 [ 439.554448][T21385] syzkaller0: entered promiscuous mode [ 439.561295][T21385] syzkaller0: entered allmulticast mode [ 439.593014][T21385] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 439.637052][T21385] tipc: Resetting bearer [ 439.656750][T21384] tipc: Resetting bearer [ 439.726188][T21384] tipc: Disabling bearer [ 439.742179][T21398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4398'. [ 439.776406][T21400] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 439.950046][T21409] netlink: 'syz.3.4404': attribute type 15 has an invalid length. [ 440.224234][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.230989][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.427629][T21429] netlink: 'syz.2.4407': attribute type 1 has an invalid length. [ 440.594481][T21402] bridge_slave_0: left allmulticast mode [ 440.605197][T21402] bridge_slave_0: left promiscuous mode [ 440.610970][T21402] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.639830][T21402] bridge_slave_1: left allmulticast mode [ 440.652122][T21402] bridge_slave_1: left promiscuous mode [ 440.659123][T21402] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.709058][T21402] bond0: (slave bond_slave_0): Releasing backup interface [ 440.739015][T21402] bond0: (slave bond_slave_1): Releasing backup interface [ 440.765820][T21402] team0: Port device team_slave_1 removed [ 440.786462][T21402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.811207][T21402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.822733][T21402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.841572][T21402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.890457][T21402] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 440.910380][ T5932] lo speed is unknown, defaulting to 1000 [ 440.916702][ T5932] syz2: Port: 1 Link DOWN [ 440.925691][T21410] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 440.936015][T21410] syzkaller1: Refused to change device type [ 440.963204][T21409] netlink: 'syz.3.4404': attribute type 15 has an invalid length. [ 441.059488][T21430] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.069089][T21430] bond5: (slave bond6): making interface the new active one [ 441.078302][T21430] bond5: (slave bond6): Enslaving as an active interface with an up link [ 441.093563][T21431] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 441.111528][T21431] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 441.139473][T10912] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 441.149092][T10912] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 441.275881][T10912] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 441.288782][T21443] tipc: Enabling of bearer rejected, failed to enable media [ 441.324811][T10912] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 441.447559][T21452] netlink: 'syz.0.4412': attribute type 1 has an invalid length. [ 441.790321][T21476] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 441.828833][T21476] bond8 (unregistering): Released all slaves [ 442.118344][T21490] syzkaller1: entered promiscuous mode [ 442.130084][T21490] syzkaller1: entered allmulticast mode [ 442.278666][T21502] bond0: (slave dummy0): Releasing backup interface [ 443.038713][T21540] openvswitch: netlink: IP tunnel dst address not specified [ 443.056862][T21535] netlink: 'syz.1.4436': attribute type 11 has an invalid length. [ 443.115590][T21535] __nla_validate_parse: 15 callbacks suppressed [ 443.115612][T21535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4436'. [ 443.180027][T21552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4441'. [ 443.430890][T21557] netlink: 'syz.3.4443': attribute type 1 has an invalid length. [ 443.440019][T21557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.589685][T21552] bond0: (slave macvlan2): Opening slave failed [ 443.606211][T15008] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.625990][T15008] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 443.693255][T15008] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.725906][T15008] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 443.744784][T15008] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.776663][T15008] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 443.788890][T21574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4448'. [ 443.841925][T21572] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 443.874984][T21572] bond7: option packets_per_slave: allowed values 0 - 65535 [ 443.896946][T21572] bond7 (unregistering): Released all slaves [ 443.949644][T15008] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.959178][T15008] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 443.986051][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 444.012979][T21583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4451'. [ 444.069260][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 444.087559][T21583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4451'. [ 444.400091][T21605] netlink: 'syz.4.4458': attribute type 58 has an invalid length. [ 444.408852][T21605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4458'. [ 444.514022][T21616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4460'. [ 444.703207][T21599] team0 (unregistering): Port device team_slave_0 removed [ 444.720765][T21599] team0 (unregistering): Port device team_slave_1 removed [ 444.920081][T21627] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 444.939288][T21628] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 444.950856][T21636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4465'. [ 445.189305][T21650] tipc: New replicast peer: 255.255.255.255 [ 445.199195][T21650] tipc: Enabled bearer , priority 10 [ 445.452595][T21664] netlink: 'syz.3.4473': attribute type 4 has an invalid length. [ 445.486871][T21664] netlink: 'syz.3.4473': attribute type 4 has an invalid length. [ 445.826676][T21683] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 445.842502][T21698] syzkaller1: entered promiscuous mode [ 445.868354][T21698] syzkaller1: entered allmulticast mode [ 445.934655][T21687] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.945960][T21687] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.953296][T21687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.325541][ T5894] tipc: Node number set to 2230440354 [ 446.446264][T21731] x_tables: duplicate underflow at hook 1 [ 446.999938][T21763] No such timeout policy "syz0" [ 447.142753][T21777] netlink: 'syz.2.4503': attribute type 11 has an invalid length. [ 447.154484][T21779] netlink: 'syz.4.4504': attribute type 12 has an invalid length. [ 447.202017][T21782] ip6gre1: entered allmulticast mode [ 447.208861][T21780] netlink: 'syz.4.4504': attribute type 1 has an invalid length. [ 447.309537][T21779] bond8: option primary_reselect: invalid value (255) [ 447.327870][T21779] bond8 (unregistering): Released all slaves [ 448.175215][T21843] __nla_validate_parse: 11 callbacks suppressed [ 448.175239][T21843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4524'. [ 448.470232][T21848] pim6reg1: entered promiscuous mode [ 448.487268][T21848] pim6reg1: entered allmulticast mode [ 449.590665][T21893] syzkaller1: entered promiscuous mode [ 449.610205][T21893] syzkaller1: entered allmulticast mode [ 449.622622][T21893] tipc: Enabling of bearer rejected, failed to enable media [ 449.844046][T21912] bridge8: entered promiscuous mode [ 449.850016][T21912] bridge8: entered allmulticast mode [ 450.114392][T21938] netlink: 'syz.2.4555': attribute type 16 has an invalid length. [ 450.116267][T21934] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4554'. [ 450.126508][T21937] openvswitch: netlink: Message has 72 unknown bytes. [ 450.140499][T21938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4555'. [ 450.158826][T21934] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4554'. [ 450.214597][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4557'. [ 450.317868][T21945] gtp0: entered promiscuous mode [ 450.323232][T21945] gtp0: entered allmulticast mode [ 450.333191][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4560'. [ 450.402036][T21953] syz.1.4562: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 450.402633][T21952] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4561'. [ 450.417474][T21953] CPU: 0 UID: 0 PID: 21953 Comm: syz.1.4562 Not tainted syzkaller #0 PREEMPT(full) [ 450.417500][T21953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.417512][T21953] Call Trace: [ 450.417519][T21953] [ 450.417528][T21953] dump_stack_lvl+0x189/0x250 [ 450.417558][T21953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.417578][T21953] ? __pfx__printk+0x10/0x10 [ 450.417602][T21953] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 450.417630][T21953] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 450.417657][T21953] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 450.417686][T21953] warn_alloc+0x214/0x310 [ 450.417709][T21953] ? stack_depot_save_flags+0x40/0x850 [ 450.417733][T21953] ? __pfx_warn_alloc+0x10/0x10 [ 450.417818][T21953] ? kasan_save_track+0x3e/0x80 [ 450.417839][T21953] ? __kasan_kmalloc+0x93/0xb0 [ 450.417862][T21953] ? xsk_setsockopt+0x4dc/0x8d0 [ 450.417879][T21953] ? do_sock_setsockopt+0x17c/0x1b0 [ 450.417903][T21953] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 450.417925][T21953] ? do_syscall_64+0xfa/0xf80 [ 450.417944][T21953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.417971][T21953] __vmalloc_node_range_noprof+0x125/0x12d0 [ 450.418025][T21953] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 450.418051][T21953] ? __kasan_kmalloc+0x93/0xb0 [ 450.418079][T21953] vmalloc_user_noprof+0xad/0xf0 [ 450.418100][T21953] ? xskq_create+0xbf/0x170 [ 450.418120][T21953] xskq_create+0xbf/0x170 [ 450.418143][T21953] xsk_init_queue+0xb0/0x110 [ 450.418165][T21953] xsk_setsockopt+0x4dc/0x8d0 [ 450.418186][T21953] ? __pfx_xsk_setsockopt+0x10/0x10 [ 450.418207][T21953] ? __pfx_aa_sk_perm+0x10/0x10 [ 450.418235][T21953] ? aa_sock_opt_perm+0xff/0x1a0 [ 450.418255][T21953] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 450.418277][T21953] ? __pfx_xsk_setsockopt+0x10/0x10 [ 450.418296][T21953] do_sock_setsockopt+0x17c/0x1b0 [ 450.418325][T21953] __x64_sys_setsockopt+0x13f/0x1b0 [ 450.418355][T21953] do_syscall_64+0xfa/0xf80 [ 450.418377][T21953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.418394][T21953] ? clear_bhb_loop+0x60/0xb0 [ 450.418415][T21953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.418431][T21953] RIP: 0033:0x7fede498f749 [ 450.418448][T21953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.418462][T21953] RSP: 002b:00007fede57e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 450.418481][T21953] RAX: ffffffffffffffda RBX: 00007fede4be5fa0 RCX: 00007fede498f749 [ 450.418492][T21953] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 450.418503][T21953] RBP: 00007fede4a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 450.418513][T21953] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.418524][T21953] R13: 00007fede4be6038 R14: 00007fede4be5fa0 R15: 00007ffc42ad8e38 [ 450.418555][T21953] [ 450.418562][T21953] Mem-Info: [ 450.687252][T21961] netlink: 'syz.3.4563': attribute type 2 has an invalid length. [ 450.717556][T21953] active_anon:4464 inactive_anon:0 isolated_anon:0 [ 450.717556][T21953] active_file:2692 inactive_file:40023 isolated_file:0 [ 450.717556][T21953] unevictable:768 dirty:74 writeback:0 [ 450.717556][T21953] slab_reclaimable:12665 slab_unreclaimable:212035 [ 450.717556][T21953] mapped:28962 shmem:1361 pagetables:1045 [ 450.717556][T21953] sec_pagetables:0 bounce:0 [ 450.717556][T21953] kernel_misc_reclaimable:0 [ 450.717556][T21953] free:1208333 free_pcp:16478 free_cma:0 [ 450.778988][T21953] Node 0 active_anon:17856kB inactive_anon:0kB active_file:10768kB inactive_file:159884kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115848kB dirty:296kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16936kB pagetables:4028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 450.812341][T21962] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 450.812897][T21953] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 450.845237][T21962] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4563'. [ 450.868904][T21962] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 450.885127][T21953] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.885200][T21953] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 450.885245][T21953] Node 0 DMA32 free:923312kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17856kB inactive_anon:0kB active_file:10768kB inactive_file:159884kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:49640kB local_pcp:22328kB free_cma:0kB [ 450.885306][T21953] lowmem_reserve[]: 0 0 0 0 0 [ 450.885347][T21953] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.885402][T21953] lowmem_reserve[]: 0 0 0 0 0 [ 450.885444][T21953] Node 1 Normal free:3894660kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16288kB local_pcp:10032kB free_cma:0kB [ 450.885503][T21953] lowmem_reserve[]: 0 0 0 0 0 [ 450.885547][T21953] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 450.885687][T21953] Node 0 DMA32: 1537*4kB (UME) 496*8kB (UM) 271*16kB (UME) 298*32kB (UM) 75*64kB (UM) 82*128kB (UM) 67*256kB (UM) 29*512kB (UM) 14*1024kB (UE) 5*2048kB (UM) 202*4096kB (UM) = 923252kB [ 450.885892][T21953] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 450.886011][T21953] Node 1 Normal: 139*4kB (UE) 49*8kB (UME) [ 451.027476][T21969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4567'. [ 451.055775][T21970] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 451.120124][T21953] 37*16kB (UME) 96*32kB (UME) 26*64kB (UME) 10*128kB (UME) 2*256kB (M) 5*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3894660kB [ 451.139517][T21953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.189540][T21953] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.208760][T21971] xt_TCPMSS: Only works on TCP SYN packets [ 451.236193][T21953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.261563][T21953] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.284533][T21953] 44073 total pagecache pages [ 451.298194][T21953] 0 pages in swap cache [ 451.304578][T21953] Free swap = 124996kB [ 451.313938][T21953] Total swap = 124996kB [ 451.319800][T21953] 2097051 pages RAM [ 451.324655][T21953] 0 pages HighMem/MovableOnly [ 451.330110][T21953] 424280 pages reserved [ 451.336527][T21953] 0 pages cma reserved [ 451.600584][T21997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4575'. [ 451.634735][T21997] 8021q: adding VLAN 0 to HW filter on device bond8 [ 451.754333][T21997] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 451.874749][T22006] openvswitch: netlink: IP tunnel TTL not specified. [ 452.435979][T22024] hsr_slave_1 (unregistering): left promiscuous mode [ 452.565746][T22041] netlink: 'syz.4.4589': attribute type 1 has an invalid length. [ 452.980873][T22076] netlink: 'syz.4.4598': attribute type 11 has an invalid length. [ 453.005155][T22076] netlink: 'syz.4.4598': attribute type 11 has an invalid length. [ 453.037582][T22077] sctp: [Deprecated]: syz.1.4597 (pid 22077) Use of int in max_burst socket option deprecated. [ 453.037582][T22077] Use struct sctp_assoc_value instead [ 453.220454][T22090] __nla_validate_parse: 9 callbacks suppressed [ 453.220477][T22090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4602'. [ 453.236431][T22092] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4603'. [ 453.575349][T22107] openvswitch: netlink: Message has 4 unknown bytes. [ 453.585311][T22108] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4606'. [ 453.889819][T22128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 453.923939][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4611'. [ 453.995966][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4613'. [ 453.996494][T22135] netlink: 'syz.2.4612': attribute type 7 has an invalid length. [ 454.020908][T22137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4612'. [ 454.297842][T22158] netlink: 'syz.1.4621': attribute type 10 has an invalid length. [ 454.859246][T22193] pim6reg1: entered promiscuous mode [ 454.866590][T22193] pim6reg1: entered allmulticast mode [ 454.931050][T22198] bridge: RTM_NEWNEIGH with invalid ether address [ 454.953235][T22198] dvmrp6: entered allmulticast mode [ 455.170444][T22212] x_tables: duplicate underflow at hook 1 [ 455.204600][T22213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4639'. [ 455.283483][T22216] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 455.298277][T22216] bond7: (slave vcan1): Error -95 calling set_mac_address [ 455.349765][T22207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4637'. [ 455.509000][T22223] bond0: option ad_select: unable to set because the bond device is up [ 455.532047][T22229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4644'. [ 455.744028][T22241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4648'. [ 456.041500][T22257] netlink: 'syz.4.4656': attribute type 1 has an invalid length. [ 456.239940][T22257] 8021q: adding VLAN 0 to HW filter on device bond9 [ 456.314651][T22266] netlink: 'syz.0.4658': attribute type 2 has an invalid length. [ 456.599682][T22289] bond8: option all_slaves_active: invalid value (252) [ 456.622738][T22289] bond8 (unregistering): Released all slaves [ 457.067474][T22317] openvswitch: netlink: Multiple metadata blocks provided [ 457.280577][T22333] netlink: 'syz.1.4677': attribute type 1 has an invalid length. [ 457.372195][T22335] vlan2: entered allmulticast mode [ 457.389843][T22335] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 457.408958][T22340] netlink: 'syz.3.4679': attribute type 10 has an invalid length. [ 457.499838][T22340] dummy0: entered promiscuous mode [ 457.522661][T22340] dummy0: entered allmulticast mode [ 457.529945][T22340] team0: Port device dummy0 added [ 457.585829][T22352] vlan3: entered allmulticast mode [ 457.591253][T22352] geneve0: entered allmulticast mode [ 457.615813][T22346] can: request_module (can-proto-0) failed. [ 457.768327][T22356] syzkaller0: entered promiscuous mode [ 457.773835][T22356] syzkaller0: entered allmulticast mode [ 457.907545][T22356] veth0_to_team: entered promiscuous mode [ 458.237316][T22391] __nla_validate_parse: 9 callbacks suppressed [ 458.237345][T22391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4694'. [ 458.300510][T22391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4694'. [ 458.483016][T22403] nbd: nbd0 already in use [ 458.495028][T22403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4698'. [ 458.526898][T22403] block nbd0: NBD_DISCONNECT [ 458.542858][T22403] block nbd0: Send disconnect failed -32 [ 458.568805][T22403] block nbd0: shutting down sockets [ 458.588320][T22409] netlink: 'syz.0.4698': attribute type 1 has an invalid length. [ 459.081294][T22440] netlink: 'syz.0.4708': attribute type 3 has an invalid length. [ 459.501771][T22468] netlink: 'syz.2.4715': attribute type 14 has an invalid length. [ 459.669187][T22476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4716'. [ 459.687133][T22478] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 459.783619][T22475] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode [ 459.796589][T22475] bridge2: left promiscuous mode [ 459.803298][T22475] gretap2: left promiscuous mode [ 459.814142][T22475] bond3: left promiscuous mode [ 459.824691][T22475] gretap3: left promiscuous mode [ 459.834817][T22475] bridge8: left promiscuous mode [ 459.849552][ T6030] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.861400][ T6030] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.886844][ T6030] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.901275][ T6030] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.938435][ T6030] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.983603][ T6030] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.993712][ T6030] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.015250][ T6030] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.031172][T22487] veth1_to_bond: entered allmulticast mode [ 460.046825][T22487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4721'. [ 460.047269][T22493] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4723'. [ 460.087234][T22487] bond0: (slave bond_slave_1): Releasing backup interface [ 460.143822][T22487] veth1_to_bond (unregistering): left allmulticast mode [ 460.243412][T22497] lo speed is unknown, defaulting to 1000 [ 460.282863][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4727'. [ 460.673309][T22517] syzkaller1: entered promiscuous mode [ 460.682781][T22517] syzkaller1: entered allmulticast mode [ 460.728729][T22526] netlink: 'syz.1.4733': attribute type 1 has an invalid length. [ 460.805889][T22525] netlink: 'syz.2.4734': attribute type 4 has an invalid length. [ 460.857418][T22534] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4736'. [ 460.910221][T22526] bond8: entered promiscuous mode [ 460.919470][T22540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4737'. [ 460.930195][T22526] 8021q: adding VLAN 0 to HW filter on device bond8 [ 460.951243][T22531] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4734'. [ 460.985397][T22543] x_tables: unsorted entry at hook 2 [ 461.304092][T22553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.326234][T22560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.552920][T22578] SET target dimension over the limit! [ 461.836777][T22594] netlink: 'syz.2.4751': attribute type 1 has an invalid length. [ 461.895569][T22594] 8021q: adding VLAN 0 to HW filter on device bond7 [ 461.960908][T22594] macvlan3: entered promiscuous mode [ 461.995998][T22594] macvlan3: entered allmulticast mode [ 462.209090][T22611] dvmrp6: left allmulticast mode [ 462.492058][T22632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.514317][T22633] netlink: 'syz.1.4764': attribute type 7 has an invalid length. [ 462.556857][T22633] netlink: 'syz.1.4764': attribute type 8 has an invalid length. [ 462.653869][T22633] erspan0: entered promiscuous mode [ 462.712282][T22633] batadv_slave_1: entered promiscuous mode [ 462.758195][T22633] erspan0: left promiscuous mode [ 462.799966][T22633] batadv_slave_1: left promiscuous mode [ 463.279558][T22686] __nla_validate_parse: 12 callbacks suppressed [ 463.279579][T22686] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4780'. [ 463.305175][T22686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4780'. [ 463.323887][T22686] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4780'. [ 463.661093][T22712] xt_bpf: check failed: parse error [ 463.674379][T22715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4790'. [ 463.826691][T22727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4794'. [ 463.997187][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4796'. [ 464.156243][T22745] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode [ 464.192211][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4801'. [ 464.207926][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4801'. [ 464.283273][T22753] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4802'. [ 464.327802][T22755] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4803'. [ 464.596140][T22773] openvswitch: netlink: Flow key attr not present in new flow. [ 464.620446][T22775] netlink: 'syz.0.4810': attribute type 1 has an invalid length. [ 464.681575][T22775] 8021q: adding VLAN 0 to HW filter on device bond7 [ 464.790406][T22786] netlink: 'syz.4.4812': attribute type 8 has an invalid length. [ 464.877351][T22794] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 465.204450][T22811] netlink: 'syz.0.4821': attribute type 1 has an invalid length. [ 465.246321][T22811] netlink: 'syz.0.4821': attribute type 2 has an invalid length. [ 465.256864][T22816] netlink: 'syz.0.4821': attribute type 1 has an invalid length. [ 465.281009][T22816] netlink: 'syz.0.4821': attribute type 2 has an invalid length. [ 465.319838][T22823] netlink: 'syz.1.4826': attribute type 29 has an invalid length. [ 465.617324][T22829] bond0 (unregistering): left promiscuous mode [ 465.623691][T22829] bond_slave_0: left promiscuous mode [ 465.631044][T22829] bond_slave_1: left promiscuous mode [ 465.638166][T22829] bridge_slave_1: left promiscuous mode [ 465.648897][T22829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.663125][T22829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.676738][T22829] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 465.687031][T22829] bond0 (unregistering): Released all slaves [ 466.110909][T22819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.611428][T22888] sctp: [Deprecated]: syz.3.4842 (pid 22888) Use of int in max_burst socket option. [ 466.611428][T22888] Use struct sctp_assoc_value instead [ 466.680856][T22888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.381836][T22888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.044801][T22926] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 469.128923][T22931] __nla_validate_parse: 19 callbacks suppressed [ 469.128946][T22931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4858'. [ 469.149107][T22931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4858'. [ 469.357205][T22950] validate_nla: 3 callbacks suppressed [ 469.357228][T22950] netlink: 'syz.4.4864': attribute type 4 has an invalid length. [ 469.403357][T22950] netlink: 'syz.4.4864': attribute type 4 has an invalid length. [ 469.473359][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4864'. [ 469.624508][T22960] tipc: Enabled bearer , priority 10 [ 469.961694][T22974] bond8: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 470.092486][T22988] netlink: 'syz.2.4875': attribute type 21 has an invalid length. [ 470.192593][T23000] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4878'. [ 470.224219][T23000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4878'. [ 470.372535][T23012] syzkaller0: entered promiscuous mode [ 470.382325][T23012] syzkaller0: entered allmulticast mode [ 470.424543][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4879'. [ 470.525256][T23024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4882'. [ 470.705280][T23031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4885'. [ 471.040905][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4895'. [ 471.071395][T23060] netlink: 'syz.3.4895': attribute type 5 has an invalid length. [ 471.079920][T23060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4895'. [ 471.101769][T23060] geneve4: entered promiscuous mode [ 471.107895][T23060] geneve4: entered allmulticast mode [ 471.146713][T23060] xt_connbytes: Forcing CT accounting to be enabled [ 471.531452][T23087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.545596][T23133] netlink: 'syz.3.4916': attribute type 4 has an invalid length. [ 472.629136][T23143] netlink: 'syz.1.4919': attribute type 1 has an invalid length. [ 472.700379][T23145] x_tables: duplicate underflow at hook 3 [ 472.929020][T23163] xt_cgroup: path and classid specified [ 473.855474][T23213] batadv1: entered allmulticast mode [ 474.221809][T23245] netlink: 'syz.4.4949': attribute type 1 has an invalid length. [ 474.307116][T23251] __nla_validate_parse: 13 callbacks suppressed [ 474.307138][T23251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4950'. [ 474.329574][T23251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4950'. [ 474.354553][T23253] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4951'. [ 474.472915][T23262] netlink: 'syz.2.4952': attribute type 1 has an invalid length. [ 474.491371][T23264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4954'. [ 474.672029][T23268] 8021q: adding VLAN 0 to HW filter on device bond8 [ 474.681869][T23268] bond0: (slave bond8): making interface the new active one [ 474.690973][T23268] bond0: (slave bond8): Enslaving as an active interface with an up link [ 474.730708][T23273] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 474.747306][T23273] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 474.792105][T10912] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.820373][T10912] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.844397][T10912] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.854513][T10912] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.926427][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4959'. [ 474.944490][T23296] netlink: 'syz.2.4963': attribute type 21 has an invalid length. [ 475.023928][T23296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4963'. [ 475.089605][T23305] netlink: 'syz.0.4964': attribute type 21 has an invalid length. [ 475.111995][T23305] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4964'. [ 475.170443][T23305] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4964'. [ 475.241137][T23305] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 475.258777][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 475.298729][T23305] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 475.308436][T23314] netlink: 'syz.0.4964': attribute type 1 has an invalid length. [ 475.320989][T23314] netlink: 'syz.0.4964': attribute type 4 has an invalid length. [ 475.330661][T23314] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.4964'. [ 475.740098][T23337] hsr_slave_1 (unregistering): left promiscuous mode [ 475.785074][T23349] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 475.835825][T23351] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 476.015173][T23361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.331119][T23380] netlink: 'syz.2.4985': attribute type 11 has an invalid length. [ 476.346324][T23380] netlink: 'syz.2.4985': attribute type 4 has an invalid length. [ 476.378298][T23380] tipc: Enabling of bearer rejected, already enabled [ 476.746979][T23402] veth5: entered allmulticast mode [ 476.773878][T23402] syzkaller0: entered promiscuous mode [ 476.781557][T23402] syzkaller0: entered allmulticast mode [ 477.903189][T23476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.953716][T23470] netlink: 'syz.1.5011': attribute type 1 has an invalid length. [ 478.279175][T23497] openvswitch: netlink: IPv4 tunnel dst address is zero [ 478.314636][T23494] openvswitch: netlink: Missing key (keys=40, expected=100) [ 478.316664][T23497] netlink: 'syz.1.5021': attribute type 83 has an invalid length. [ 478.700019][T23516] sctp: [Deprecated]: syz.0.5027 (pid 23516) Use of int in max_burst socket option deprecated. [ 478.700019][T23516] Use struct sctp_assoc_value instead [ 478.896724][T23529] netlink: 'syz.3.5031': attribute type 3 has an invalid length. [ 478.919926][T23533] netlink: 'syz.3.5031': attribute type 3 has an invalid length. [ 478.922490][T23523] syzkaller0: entered promiscuous mode [ 478.934282][T23523] syzkaller0: entered allmulticast mode [ 479.583839][T23555] __nla_validate_parse: 16 callbacks suppressed [ 479.583859][T23555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5039'. [ 481.263746][T23565] syzkaller0: entered promiscuous mode [ 481.270739][T23565] syzkaller0: entered allmulticast mode [ 481.334264][T23565] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 481.376635][T23575] validate_nla: 1 callbacks suppressed [ 481.376658][T23575] netlink: 'syz.2.5046': attribute type 1 has an invalid length. [ 481.632172][T23580] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 481.685382][T23580] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 481.700551][T23580] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 481.786031][T23585] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 481.801952][T23585] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 481.839934][T23600] netlink: 3676 bytes leftover after parsing attributes in process `syz.0.5054'. [ 481.855615][T23600] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 481.862012][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5054'. [ 481.978599][T23609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5054'. [ 482.229835][T23625] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 482.335325][T23629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.545261][T23640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5068'. [ 482.605685][T23643] sctp: [Deprecated]: syz.4.5067 (pid 23643) Use of int in max_burst socket option deprecated. [ 482.605685][T23643] Use struct sctp_assoc_value instead [ 482.802009][T23657] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5067'. [ 482.811271][ T30] audit: type=1800 audit(1765570001.988:6): pid=23657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5067" name="memory.events" dev="tmpfs" ino=2050 res=0 errno=0 [ 482.836554][T23647] syz.0.5069 (23647) used greatest stack depth: 15744 bytes left [ 482.883558][ T30] audit: type=1804 audit(1765570002.048:7): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5067" name="/newroot/399/memory.events" dev="tmpfs" ino=2050 res=1 errno=0 [ 482.927268][T23662] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 482.952989][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5075'. [ 482.959610][T23662] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 482.969008][T23652] udevd[23652]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 482.980040][T23664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5075'. [ 482.986474][T23662] tipc: Resetting bearer [ 482.998668][T23651] udevd[23651]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 483.070444][T23662] openvswitch: netlink: EtherType 50a is less than min 600 [ 483.111813][T23661] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5073'. [ 483.239502][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5078'. [ 483.426439][T23699] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004 [ 483.682493][T23701] syzkaller0: entered promiscuous mode [ 483.688683][T23701] syzkaller0: entered allmulticast mode [ 483.780306][T23720] dvmrp0: entered allmulticast mode [ 485.749626][T23720] __nla_validate_parse: 1 callbacks suppressed [ 485.749645][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'. [ 485.878776][T23735] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5094'. [ 485.912451][T23739] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 486.121005][T23735] tipc: Enabling of bearer rejected, already enabled [ 486.156074][T23735] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 486.173352][T23735] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 486.193821][T23735] tipc: Resetting bearer [ 486.653301][T23779] xt_policy: output policy not valid in PREROUTING and INPUT [ 486.730595][T23784] bond8: entered promiscuous mode [ 486.742439][T23784] bond8: entered allmulticast mode [ 486.750101][T23784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 486.823344][T23784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5106'. [ 486.862665][T23784] xfrm1: entered promiscuous mode [ 486.874036][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5106'. [ 486.886769][T23784] xfrm1: entered allmulticast mode [ 487.209330][T23815] netlink: 'syz.2.5115': attribute type 4 has an invalid length. [ 487.493722][T23831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.521849][T23831] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.555558][T23831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.582567][ T5893] lo speed is unknown, defaulting to 1000 [ 487.596832][ T5893] syz2: Port: 1 Link ACTIVE [ 487.668699][T23842] nbd: nbd2 already in use [ 487.686139][T23847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5126'. [ 487.848929][T23858] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5128'. [ 487.866157][T23854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5129'. [ 487.875657][T23854] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 487.941202][T23858] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.040814][T23869] syzkaller0: entered promiscuous mode [ 488.053208][T23869] syzkaller0: entered allmulticast mode [ 488.086167][T23869] tipc: Enabled bearer , priority 0 [ 488.104708][T23872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5134'. [ 488.114595][T23867] tipc: Resetting bearer [ 488.178987][T23867] tipc: Disabling bearer [ 488.414018][T23893] netlink: 'syz.3.5141': attribute type 1 has an invalid length. [ 488.549090][T23893] 8021q: adding VLAN 0 to HW filter on device bond9 [ 488.568491][T23905] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5146'. [ 488.948146][T23927] SET target dimension over the limit! [ 489.058508][T23936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 489.746948][T23984] bond0: entered allmulticast mode [ 489.817232][T23990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5172'. [ 489.855724][T23995] netlink: 'syz.4.5173': attribute type 3 has an invalid length. [ 489.914253][T23995] netlink: 'syz.4.5173': attribute type 4 has an invalid length. [ 489.952322][T24004] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 490.000355][T23991] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 490.791870][T24071] netlink: 'syz.2.5192': attribute type 26 has an invalid length. [ 490.876670][T24071] __nla_validate_parse: 4 callbacks suppressed [ 490.876689][T24071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5192'. [ 490.980256][T24071] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 491.081332][T24091] IPVS: set_ctl: invalid protocol: 64845 172.20.20.187:20004 [ 491.459761][T24116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5203'. [ 491.522338][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5205'. [ 491.532896][T24121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5205'. [ 491.556510][T24120] : entered promiscuous mode [ 491.646834][T24125] openvswitch: netlink: Multiple metadata blocks provided [ 491.680163][T24127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5207'. [ 491.812281][T24132] sctp: [Deprecated]: syz.1.5208 (pid 24132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.812281][T24132] Use struct sctp_sack_info instead [ 491.832580][T24132] IPVS: length: 252 != 24 [ 491.838941][T24132] sctp: [Deprecated]: syz.1.5208 (pid 24132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.838941][T24132] Use struct sctp_sack_info instead [ 491.871481][T24135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5210'. [ 492.014154][T24139] bond10: option all_slaves_active: invalid value (222) [ 492.051296][T24139] bond10 (unregistering): Released all slaves [ 492.061336][T24143] x_tables: duplicate underflow at hook 1 [ 492.071342][T24145] x_tables: duplicate underflow at hook 1 [ 492.963739][T24210] netlink: 'syz.2.5231': attribute type 1 has an invalid length. [ 492.974284][T24210] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5231'. [ 492.986999][T24209] netlink: 'syz.3.5229': attribute type 1 has an invalid length. [ 492.992938][T24206] netlink: 'syz.1.5230': attribute type 10 has an invalid length. [ 493.006285][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5231'. [ 493.017375][T24204] team0: Port device team_slave_0 removed [ 493.045290][T24211] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5229'. [ 493.063483][T24206] wlan1: mtu greater than device maximum [ 493.069966][T24206] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 493.079797][T24209] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 493.241517][T24221] netlink: 'syz.4.5233': attribute type 1 has an invalid length. [ 493.267459][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5234'. [ 493.423879][T24234] bond10: (slave gretap2): making interface the new active one [ 493.432918][T24234] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 493.629860][T24239] netlink: 'syz.2.5240': attribute type 1 has an invalid length. [ 493.667005][T24245] syzkaller0: entered allmulticast mode [ 493.924370][T24263] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 493.979504][T24263] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 494.016328][T24269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.533024][T24292] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 494.962007][T24317] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 494.989682][T15000] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.008073][T15000] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.024460][T15000] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.039038][T15000] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 495.221938][T24338] netlink: 'syz.4.5270': attribute type 1 has an invalid length. [ 495.398064][T24345] veth0_to_team: left promiscuous mode [ 495.876110][T24380] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 495.884095][T24380] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 495.902373][T24380] tipc: Resetting bearer [ 496.090010][T24395] __nla_validate_parse: 12 callbacks suppressed [ 496.090031][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5288'. [ 496.125107][T24395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5288'. [ 496.257977][T24400] xt_limit: Overflow, try lower: 271964/0 [ 496.261605][T24402] tipc: Enabling of bearer rejected, already enabled [ 496.441027][T24412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.673625][T24425] netlink: 'syz.3.5298': attribute type 1 has an invalid length. [ 496.719525][T24425] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5298'. [ 496.740683][T24427] netlink: 'syz.3.5298': attribute type 1 has an invalid length. [ 496.761738][T24427] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5298'. [ 497.067869][T24454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5304'. [ 497.244791][T24462] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5307'. [ 497.392572][T24469] netlink: 'syz.1.5309': attribute type 1 has an invalid length. [ 497.471372][T24469] 8021q: adding VLAN 0 to HW filter on device bond11 [ 497.479658][T24482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5313'. [ 497.566205][T24481] 8021q: adding VLAN 0 to HW filter on device bond11 [ 497.577963][T24481] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 497.591088][T24481] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 497.629097][T24470] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 497.640149][T24470] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 497.714442][T24489] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5315'. [ 498.019102][T24512] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5321'. [ 498.252567][T24529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5326'. [ 498.290020][T24532] x_tables: unsorted entry at hook 2 [ 498.399525][T24539] x_tables: duplicate underflow at hook 1 [ 498.433647][T24532] netlink: 'syz.3.5327': attribute type 11 has an invalid length. [ 498.922716][T24564] netlink: 'syz.4.5337': attribute type 1 has an invalid length. [ 499.044656][T24564] bond11: entered promiscuous mode [ 499.087791][T24564] 8021q: adding VLAN 0 to HW filter on device bond11 [ 499.371230][T24582] netlink: 'syz.4.5342': attribute type 1 has an invalid length. [ 499.591061][T24595] bond13 (unregistering): Released all slaves [ 499.712632][T24600] bond12: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 499.727274][T24600] bond12: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 499.741395][T24600] bond12: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 500.491444][T24639] netlink: 'syz.2.5359': attribute type 1 has an invalid length. [ 501.006428][T24660] syzkaller1: entered promiscuous mode [ 501.013719][T24660] syzkaller1: entered allmulticast mode [ 501.062775][T24665] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 501.529752][T24699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 501.571860][T24694] bond11: entered allmulticast mode [ 501.663739][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.671895][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.693082][T24715] __nla_validate_parse: 20 callbacks suppressed [ 501.693103][T24715] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5381'. [ 501.776895][T24718] tipc: Enabling of bearer rejected, media not registered [ 501.847709][T24723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5385'. [ 501.876159][T24722] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5384'. [ 501.879189][T24723] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5385'. [ 501.901885][T24722] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5384'. [ 502.146530][T24741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'. [ 502.193670][T24741] block nbd0: not configured, cannot reconfigure [ 502.249783][T24734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5390'. [ 502.271757][T24744] lo speed is unknown, defaulting to 1000 [ 503.013646][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5403'. [ 503.045119][T24785] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 503.056803][T24785] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 503.064674][T24785] gretap1: entered promiscuous mode [ 503.071935][T24785] gretap1: entered allmulticast mode [ 503.204758][T24794] netlink: 'syz.3.5406': attribute type 11 has an invalid length. [ 503.234424][T24794] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5406'. [ 503.281783][T24792] syzkaller1: entered promiscuous mode [ 503.291634][T24792] syzkaller1: entered allmulticast mode [ 503.339369][T24794] netlink: 'syz.3.5406': attribute type 1 has an invalid length. [ 503.352198][T24799] netlink: 'syz.0.5408': attribute type 9 has an invalid length. [ 503.365144][T24799] netlink: 'syz.0.5408': attribute type 11 has an invalid length. [ 503.382345][T24799] netlink: 'syz.0.5408': attribute type 12 has an invalid length. [ 503.408098][T24799] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5408'. [ 503.550335][T24808] ipt_REJECT: TCP_RESET invalid for non-tcp [ 504.180764][T24830] netlink: 'syz.4.5418': attribute type 5 has an invalid length. [ 504.269019][T24835] netlink: 'syz.4.5420': attribute type 1 has an invalid length. [ 504.293731][T24835] netlink: 'syz.4.5420': attribute type 1 has an invalid length. [ 504.307242][T24835] netlink: 'syz.4.5420': attribute type 2 has an invalid length. [ 504.363378][T24839] syzkaller0: entered promiscuous mode [ 504.369674][T24839] syzkaller0: entered allmulticast mode [ 504.382076][T24838] netlink: 'syz.4.5420': attribute type 1 has an invalid length. [ 504.416845][T24838] netlink: 'syz.4.5420': attribute type 1 has an invalid length. [ 504.447564][T24838] netlink: 'syz.4.5420': attribute type 2 has an invalid length. [ 506.725978][T24886] __nla_validate_parse: 9 callbacks suppressed [ 506.726002][T24886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5432'. [ 506.729699][T24887] netlink: 'syz.2.5433': attribute type 1 has an invalid length. [ 506.886648][T24899] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5435'. [ 506.903567][T24898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5436'. [ 507.236026][T24917] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5441'. [ 507.347630][ T981] IPVS: starting estimator thread 0... [ 507.446680][T24923] IPVS: using max 27 ests per chain, 64800 per kthread [ 507.955937][T24956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5448'. [ 508.672847][T24983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5454'. [ 508.740998][T24969] netlink: 'syz.4.5450': attribute type 1 has an invalid length. [ 509.037171][T25002] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 509.072047][T25007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5461'. [ 509.096813][T25002] bond11 (unregistering): Released all slaves [ 509.100637][T25012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5463'. [ 509.157547][T25012] bond13: Invalid ad_actor_system MAC address. [ 509.164067][T25012] bond13: option ad_actor_system: invalid value (1) [ 509.174759][T25012] bond13 (unregistering): Released all slaves [ 509.537694][T25035] xt_hashlimit: invalid rate [ 509.579863][T25038] lo: entered allmulticast mode [ 509.597018][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5472'. [ 509.939465][T25055] tap0: tun_chr_ioctl cmd 2148553947 [ 509.959273][T25055] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5477'. [ 510.078091][T25060] gretap0: entered promiscuous mode [ 510.398492][T25073] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 510.426873][T25073] netlink: 'syz.1.5483': attribute type 2 has an invalid length. [ 511.040784][T25122] delete_channel: no stack [ 511.310573][T25137] tipc: Enabling of bearer rejected, failed to enable media [ 511.378412][T25141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 511.425289][T25141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 511.437162][T25143] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 511.449702][T25141] openvswitch: netlink: Message has 8 unknown bytes. [ 511.603638][T25142] delete_channel: no stack [ 511.636705][T25152] netlink: 'syz.4.5506': attribute type 7 has an invalid length. [ 512.250496][T25195] batadv_slave_0: mtu greater than device maximum [ 512.549610][T25207] __nla_validate_parse: 42 callbacks suppressed [ 512.549633][T25207] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5521'. [ 512.592015][T25207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5521'. [ 512.621926][T25207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5521'. [ 512.803758][T25216] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5522'. [ 512.846828][T25223] x_tables: duplicate underflow at hook 3 [ 512.877512][T25225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5527'. [ 513.425385][T25254] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 513.578911][T25261] netlink: 'syz.1.5538': attribute type 1 has an invalid length. [ 513.611401][T25261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.666557][T25261] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 513.687256][T25269] netlink: 'syz.2.5541': attribute type 24 has an invalid length. [ 513.700791][T25266] netlink: 'syz.3.5540': attribute type 6 has an invalid length. [ 513.724020][T25270] xt_hashlimit: size too large, truncated to 1048576 [ 513.783203][T25275] netlink: 'syz.3.5540': attribute type 6 has an invalid length. [ 513.861801][T25278] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5543'. [ 513.933128][T25284] netlink: 'syz.0.5544': attribute type 7 has an invalid length. [ 513.999378][T25284] netlink: 'syz.0.5544': attribute type 1 has an invalid length. [ 514.166014][T25293] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5544'. [ 514.240947][T25284] netlink: 'syz.0.5544': attribute type 7 has an invalid length. [ 514.278079][T25286] lo speed is unknown, defaulting to 1000 [ 514.400475][T25309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5548'. [ 514.856825][T25337] netlink: 'syz.0.5554': attribute type 1 has an invalid length. [ 514.864631][T25337] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5554'. [ 514.890564][T25337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5554'. [ 515.493211][T25371] netlink: 'syz.1.5565': attribute type 1 has an invalid length. [ 515.661358][T25370] bond13: (slave bridge6): making interface the new active one [ 515.677318][T25370] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 516.009554][T25401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.029398][T25403] netlink: 'syz.1.5574': attribute type 3 has an invalid length. [ 516.332730][T25416] veth0: entered promiscuous mode [ 516.376205][T25416] veth0: left promiscuous mode [ 516.583102][T25437] smc: net device gre0 applied user defined pnetid SYZ1 [ 516.603578][T25437] smc: net device gre0 erased user defined pnetid SYZ1 [ 516.909726][T25463] tipc: Enabling of bearer rejected, failed to enable media [ 516.997546][T25470] lo: entered promiscuous mode [ 517.006087][T25470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.580448][T25485] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 517.721191][T25491] __nla_validate_parse: 9 callbacks suppressed [ 517.721209][T25491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5602'. [ 517.882305][T25492] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5603'. [ 517.952424][T25502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5605'. [ 517.964222][T25502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5605'. [ 517.980114][T25502] delete_channel: no stack [ 518.143677][T25511] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5609'. [ 518.626797][T25530] netlink: 13 bytes leftover after parsing attributes in process `syz.1.5613'. [ 518.704452][T25542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5616'. [ 518.821224][T25547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5618'. [ 518.831165][T25547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5618'. [ 518.924730][T25552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5619'. [ 519.407801][T25578] openvswitch: netlink: Message has 536 unknown bytes. [ 519.416920][T25578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.585580][T25584] gre0: entered promiscuous mode [ 519.590688][T25584] gre0: entered allmulticast mode [ 520.267472][T25601] : entered promiscuous mode [ 521.473526][T25667] pimreg3: entered allmulticast mode [ 521.507202][T25677] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 521.536434][T25677] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 521.546283][T25677] tipc: Resetting bearer [ 521.724072][T25690] veth0: entered promiscuous mode [ 521.752390][T25693] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 521.763937][T25693] netlink: 'syz.3.5661': attribute type 1 has an invalid length. [ 521.809351][T25693] netlink: 'syz.3.5661': attribute type 13 has an invalid length. [ 521.839168][T25693] netlink: 'syz.3.5661': attribute type 58 has an invalid length. [ 521.967742][T25704] bond0: entered promiscuous mode [ 521.973629][T25704] bond0: left allmulticast mode [ 522.323371][T25724] veth0: entered promiscuous mode [ 522.354708][T25727] netlink: 'syz.1.5670': attribute type 1 has an invalid length. [ 522.570832][T25688] veth0: left promiscuous mode [ 522.816831][T25741] __nla_validate_parse: 21 callbacks suppressed [ 522.816853][T25741] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5673'. [ 522.973452][T25748] block nbd0: Unsupported socket: should be TCP or UNIX. [ 523.078248][T25756] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5680'. [ 523.189023][T25762] netlink: 'syz.3.5681': attribute type 1 has an invalid length. [ 523.282552][T25767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5682'. [ 523.298920][T25768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5683'. [ 523.306519][T25762] 8021q: adding VLAN 0 to HW filter on device bond11 [ 523.375596][T25768] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5683'. [ 523.390699][T25772] IPv6: Can't replace route, no match found [ 523.589134][T25784] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 523.660702][T25777] delete_channel: no stack [ 523.728461][T25793] syzkaller0: entered promiscuous mode [ 523.734070][T25793] syzkaller0: entered allmulticast mode [ 523.836138][T25797] netlink: 'syz.2.5694': attribute type 24 has an invalid length. [ 523.859779][T25800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.867080][T25800] IPv6: NLM_F_CREATE should be set when creating new route [ 523.874390][T25800] IPv6: NLM_F_CREATE should be set when creating new route [ 523.881693][T25800] IPv6: NLM_F_CREATE should be set when creating new route [ 523.930128][T25804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.381108][T25828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5704'. [ 524.446677][T25828] bridge11: port 1(veth9) entered blocking state [ 524.464176][T25828] bridge11: port 1(veth9) entered disabled state [ 524.476059][T25828] veth9: entered allmulticast mode [ 524.483859][T25828] veth9: entered promiscuous mode [ 524.499493][T25833] bridge11: port 2(veth0_to_bond) entered blocking state [ 524.507693][T25833] bridge11: port 2(veth0_to_bond) entered disabled state [ 524.517681][T25833] veth0_to_bond: entered allmulticast mode [ 524.532422][T25833] veth0_to_bond: entered promiscuous mode [ 524.548110][T25832] tipc: Enabled bearer , priority 0 [ 524.561943][T18200] IPVS: starting estimator thread 0... [ 524.583722][T25832] syzkaller0: entered promiscuous mode [ 524.595610][T25832] syzkaller0: entered allmulticast mode [ 524.655909][T25838] IPVS: using max 27 ests per chain, 64800 per kthread [ 524.677844][T25832] tipc: Resetting bearer [ 524.726084][T25846] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5711'. [ 524.757755][T25830] tipc: Resetting bearer [ 524.772963][T25848] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5712'. [ 524.802421][T25830] tipc: Disabling bearer [ 524.811173][T25849] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 524.811173][T25848] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 524.828623][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5712'. [ 524.838145][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5712'. [ 524.848249][T25849] netlink: 'syz.0.5712': attribute type 1 has an invalid length. [ 524.874700][T25837] bridge6: entered promiscuous mode [ 524.880485][T25837] bridge6: entered allmulticast mode [ 524.893913][T25848] netlink: 'syz.0.5712': attribute type 1 has an invalid length. [ 525.104102][T25866] 0ªî{X¹¦: renamed from gretap0 [ 525.117268][T25866] 0ªî{X¹¦: entered allmulticast mode [ 525.132081][T25866] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 525.251484][T25876] Cannot find set identified by id 0 to match [ 525.255171][T25877] [ 525.260182][T25877] ====================================================== [ 525.267321][T25877] WARNING: possible circular locking dependency detected [ 525.274377][T25877] syzkaller #0 Not tainted [ 525.278815][T25877] ------------------------------------------------------ [ 525.285865][T25877] syz.2.5721/25877 is trying to acquire lock: [ 525.291931][T25877] ffffffff8f4576b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 525.301259][T25877] [ 525.301259][T25877] but task is already holding lock: [ 525.308721][T25877] ffff888072b4d270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 525.318053][T25877] [ 525.318053][T25877] which lock already depends on the new lock. [ 525.318053][T25877] [ 525.328464][T25877] [ 525.328464][T25877] the existing dependency chain (in reverse order) is: [ 525.337572][T25877] [ 525.337572][T25877] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 525.345575][T25877] _raw_spin_lock_bh+0x36/0x50 [ 525.350953][T25877] nr_rt_device_down+0x12a/0x720 [ 525.356423][T25877] nr_device_event+0x137/0x150 [ 525.361716][T25877] notifier_call_chain+0x19d/0x3a0 [ 525.367737][T25877] netif_close_many+0x29c/0x410 [ 525.373139][T25877] netif_close+0x158/0x210 [ 525.378115][T25877] dev_close+0x10a/0x220 [ 525.383147][T25877] bpq_device_event+0x377/0x6a0 [ 525.388523][T25877] notifier_call_chain+0x19d/0x3a0 [ 525.394154][T25877] netif_close_many+0x29c/0x410 [ 525.399700][T25877] netif_close+0x158/0x210 [ 525.404720][T25877] dev_close+0x10a/0x220 [ 525.409489][T25877] bond_setup_by_slave+0x5f/0x3d0 [ 525.415035][T25877] bond_enslave+0x6ca/0x38c0 [ 525.420145][T25877] bond_do_ioctl+0x635/0x9b0 [ 525.425270][T25877] dev_ifsioc+0x90b/0xf00 [ 525.430124][T25877] dev_ioctl+0x7b4/0x1150 [ 525.435149][T25877] sock_do_ioctl+0x22c/0x300 [ 525.440296][T25877] sock_ioctl+0x576/0x790 [ 525.445150][T25877] __se_sys_ioctl+0xfc/0x170 [ 525.450264][T25877] do_syscall_64+0xfa/0xf80 [ 525.455377][T25877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.461794][T25877] [ 525.461794][T25877] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 525.469791][T25877] _raw_spin_lock_bh+0x36/0x50 [ 525.475080][T25877] nr_rt_device_down+0xa9/0x720 [ 525.480640][T25877] nr_device_event+0x137/0x150 [ 525.485933][T25877] notifier_call_chain+0x19d/0x3a0 [ 525.491652][T25877] netif_close_many+0x29c/0x410 [ 525.497322][T25877] netif_close+0x158/0x210 [ 525.502353][T25877] dev_close+0x10a/0x220 [ 525.507121][T25877] bpq_device_event+0x377/0x6a0 [ 525.512585][T25877] notifier_call_chain+0x19d/0x3a0 [ 525.518254][T25877] netif_close_many+0x29c/0x410 [ 525.523657][T25877] netif_close+0x158/0x210 [ 525.528599][T25877] dev_close+0x10a/0x220 [ 525.533569][T25877] bond_setup_by_slave+0x5f/0x3d0 [ 525.539200][T25877] bond_enslave+0x6ca/0x38c0 [ 525.544311][T25877] bond_do_ioctl+0x635/0x9b0 [ 525.549426][T25877] dev_ifsioc+0x90b/0xf00 [ 525.554370][T25877] dev_ioctl+0x7b4/0x1150 [ 525.559321][T25877] sock_do_ioctl+0x22c/0x300 [ 525.564750][T25877] sock_ioctl+0x576/0x790 [ 525.569683][T25877] __se_sys_ioctl+0xfc/0x170 [ 525.575062][T25877] do_syscall_64+0xfa/0xf80 [ 525.580120][T25877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.586563][T25877] [ 525.586563][T25877] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 525.594574][T25877] __lock_acquire+0x15a6/0x2cf0 [ 525.600039][T25877] lock_acquire+0x117/0x340 [ 525.605066][T25877] _raw_spin_lock_bh+0x36/0x50 [ 525.610728][T25877] nr_rt_ioctl+0x390/0xd50 [ 525.615674][T25877] sock_do_ioctl+0xdc/0x300 [ 525.620875][T25877] sock_ioctl+0x576/0x790 [ 525.625729][T25877] __se_sys_ioctl+0xfc/0x170 [ 525.631018][T25877] do_syscall_64+0xfa/0xf80 [ 525.636220][T25877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.642723][T25877] [ 525.642723][T25877] other info that might help us debug this: [ 525.642723][T25877] [ 525.653151][T25877] Chain exists of: [ 525.653151][T25877] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 525.653151][T25877] [ 525.667066][T25877] Possible unsafe locking scenario: [ 525.667066][T25877] [ 525.674526][T25877] CPU0 CPU1 [ 525.679889][T25877] ---- ---- [ 525.685359][T25877] lock(&nr_node->node_lock); [ 525.690130][T25877] lock(nr_node_list_lock); [ 525.697598][T25877] lock(&nr_node->node_lock); [ 525.704883][T25877] lock(nr_neigh_list_lock); [ 525.709578][T25877] [ 525.709578][T25877] *** DEADLOCK *** [ 525.709578][T25877] [ 525.717722][T25877] 2 locks held by syz.2.5721/25877: [ 525.723104][T25877] #0: ffffffff8f457718 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 525.732716][T25877] #1: ffff888072b4d270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 525.742865][T25877] [ 525.742865][T25877] stack backtrace: [ 525.748777][T25877] CPU: 1 UID: 0 PID: 25877 Comm: syz.2.5721 Not tainted syzkaller #0 PREEMPT(full) [ 525.748800][T25877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.748809][T25877] Call Trace: [ 525.748819][T25877] [ 525.748827][T25877] dump_stack_lvl+0x189/0x250 [ 525.748849][T25877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.748864][T25877] ? __pfx__printk+0x10/0x10 [ 525.748881][T25877] ? stack_trace_save+0x9c/0xe0 [ 525.748907][T25877] print_circular_bug+0x2e2/0x300 [ 525.748926][T25877] check_noncircular+0x12e/0x150 [ 525.748944][T25877] __lock_acquire+0x15a6/0x2cf0 [ 525.748966][T25877] ? nr_rt_ioctl+0x390/0xd50 [ 525.748984][T25877] lock_acquire+0x117/0x340 [ 525.748997][T25877] ? nr_rt_ioctl+0x390/0xd50 [ 525.749016][T25877] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.749035][T25877] ? nr_rt_ioctl+0x390/0xd50 [ 525.749053][T25877] _raw_spin_lock_bh+0x36/0x50 [ 525.749079][T25877] ? nr_rt_ioctl+0x390/0xd50 [ 525.749097][T25877] nr_rt_ioctl+0x390/0xd50 [ 525.749119][T25877] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 525.749141][T25877] ? apparmor_capable+0x137/0x1a0 [ 525.749161][T25877] ? capable+0x89/0xe0 [ 525.749175][T25877] ? nr_ioctl+0x1b1/0x3b0 [ 525.749191][T25877] sock_do_ioctl+0xdc/0x300 [ 525.749218][T25877] ? __pfx_sock_do_ioctl+0x10/0x10 [ 525.749233][T25877] ? do_futex+0x395/0x420 [ 525.749250][T25877] sock_ioctl+0x576/0x790 [ 525.749265][T25877] ? __pfx_sock_ioctl+0x10/0x10 [ 525.749281][T25877] ? __fget_files+0x3a0/0x420 [ 525.749294][T25877] ? __fget_files+0x2a/0x420 [ 525.749307][T25877] ? bpf_lsm_file_ioctl+0x9/0x20 [ 525.749319][T25877] ? __pfx_sock_ioctl+0x10/0x10 [ 525.749334][T25877] __se_sys_ioctl+0xfc/0x170 [ 525.749351][T25877] do_syscall_64+0xfa/0xf80 [ 525.749369][T25877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.749383][T25877] ? clear_bhb_loop+0x60/0xb0 [ 525.749398][T25877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.749419][T25877] RIP: 0033:0x7fdb8c78f749 [ 525.749433][T25877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.749447][T25877] RSP: 002b:00007fdb8d710038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.749464][T25877] RAX: ffffffffffffffda RBX: 00007fdb8c9e5fa0 RCX: 00007fdb8c78f749 [ 525.749474][T25877] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 525.749484][T25877] RBP: 00007fdb8c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 525.749492][T25877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.749501][T25877] R13: 00007fdb8c9e6038 R14: 00007fdb8c9e5fa0 R15: 00007ffcafacb2e8 [ 525.749517][T25877] [ 526.059774][T25880] netlink: 'syz.1.5723': attribute type 30 has an invalid length. [ 526.103380][T25884] netlink: 'syz.0.5722': attribute type 29 has an invalid length.