last executing test programs: 2.106140554s ago: executing program 1 (id=2409): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0xfffffffffffffe34, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x80) 1.940507288s ago: executing program 0 (id=2412): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000f4ffffff170000001800000002000000000000000000008e000000000000000000000006040000000000"], 0x0, 0x32}, 0x28) 1.853180893s ago: executing program 0 (id=2415): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x10, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) 1.664349557s ago: executing program 1 (id=2418): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@delchain={0x2c, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xe, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffff647b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.614420273s ago: executing program 2 (id=2419): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) sendto$inet6(r1, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r0, 0xffff, 0x8, 0x2}) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfe, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000003c0)={0x0, r2, 0x6, 0x7, 0x4, 0x6}) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = socket$inet6(0xa, 0x2, 0x3a) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x36}}], 0x18}}], 0x1, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="141900000600000004180000030000000104fd259e39f18f027fecf7da5c7b8a6f04", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, &(0x7f0000000080)}, 0x20) 1.56501643s ago: executing program 0 (id=2420): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) close(0x3) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) close(0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) 1.440884148s ago: executing program 1 (id=2423): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000c80)={0x68, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x1, 0x22, 0xfffa]}, @NL80211_ATTR_FRAME={0x3d, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x486}, @device_b, @device_a, @initial, {0x1, 0x8}}, 0x6, @default, 0x3040, @void, @void, @void, @void, @val={0x6, 0x2, 0x3}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x9, 0x50}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, 0x14, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0xc, 0x99, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x17, 0x0, 0x0, @uid=r8}, @generic="958e5409e1af6581e7bcd554b469bf6a3181115c5c", @generic="bdd91555b7f589e5c527669ce5f89051bd814ad155cde157fd8af2d7ce2fb5e4554ad60f7e443e35ee8ed470360aa1abd2cae15160b4c116aa2697151a4e2dce747ea3d64b026282d2977708"]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.240946082s ago: executing program 4 (id=2425): r0 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6f, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000a00)={@dev, @broadcast, 0x0}, &(0x7f0000000a40)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfe, {0x0, 0x0, 0x0, r4, {0xd}, {0xffff}, {0x7, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b00)=0x0, &(0x7f0000000b40)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x33c, r0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc1e}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20000011}, 0x48801) r10 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000002840), &(0x7f0000002880)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$inet(r10, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000040)="cb14da5ce4ad05c40db6148027535eb83fc337539aca349dbb7d58bd531754bf05972e0afd1319a620fd942c21b9cf3f219e636cb33dd8e6f79197dcf616a89c08e88e75ee4d5e247eb832fb1ba7a2392c383170d65975d537ed13ecda97752d3964276409bc423e4ce119423634056e892ec85e0067446743f09d1aa4da46a89b157d79080d3deed9114bfc4cb581673f81594891eab76b253435102dc02c16bd282ffad9b5a0cdf1139744edbeec8260812187d0b480ae768a18bb1196d0a37e57ec22e66d", 0xc6}, {&(0x7f0000000140)="68d1bb01db816802617be497dc6d939a42c8744e18ae3949ed7be844528ee4f4aa82757213c50864efe7ac4f0532622eb7e9de1debdaefb52cb593ce05f600753ba0d5ded3b7b8540279f4c96c44904576fd26a80b64dbc0aaa62ad2a135e217b920d15edd436241f1bfd5f55632a097ffc5b3daa7d10a27d44033761d88667464eb94d30e075ffcd3d6c8b52f086154f1c0b615a592d606c2a5f3730b6ac2041631c15119e386c3f6493d031a0f1369670581c7907fbbeaf985136c941902e114137eeae307a57148744a778cd8d45a956d193f6f913c871df0a97d8e831ad593eeb4608485207b", 0xe8}, {&(0x7f0000000240)="61621ef518ae6725bcc34d56dddf4c87180ac28d9ae62b2716639319318dbf2c8c48511208d60ec42082f08ab13b7660153789", 0x33}, {&(0x7f0000000280)="f5f02144fd077a7b938d4627b51feb9258e4f9c53df94008486ed8f3b90c3f1f29edfc7a677a0beb8dcce3beb78e2a4f5d1a341a181b958bce2a59f1eb4172c89140ab47b626245213f88476835c8acf5fa9c6bb744c072bfd2f9e30f31e1e29c6a61582c0d55385859355ada5f513837a585280d4d274d62fbb75bbf315186971e709745dd1993e1640bea7a925405cd484d9a6d8e81ef10146511dc03010fe93273b96cfa15a4d653950457a119478f10995937f108effbe6297d5b0568d8c91", 0xc1}, {&(0x7f0000000380)="a8be74b88dc702f363ba07e97fc84bd6b2be85a35f02efa4a16bd731f09d59c232d685a63d4cee5d71067e3800cf015c0b2f2eaf07c739c9372b2454d35b7aa1ea300b0b83084acca3af2fc9d222b04e5aba2fa9756c43e7f4a73383d646a3e6479d7b6290182359a22f9758da3a83cd1ee6d2f70e74398834a0f6fc0b5ef5b6821b7c106f6606c68485843a3ce0585980ff139f3b584b135a78060d44d2bc8bc3d93ceed74d34d09321d60807e391ef717501091854994cae1b31b358592c0a3929d5eecaf927b94b398c158f1af36e501e7b4068e9e2f389c0de612e32611d091a", 0xe2}], 0x5, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @loopback, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x428}}], 0xd0}, 0x800) 1.240629632s ago: executing program 1 (id=2426): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r5, 0x9, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}}, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x45, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@null, 0x4, 'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f0000000100)="e7ab345c72ea4538f255ee5f176c95b3614ee7f2ee8f24", &(0x7f0000000280)=""/100}, 0x20) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r11, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 1.153885842s ago: executing program 4 (id=2429): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x62) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1.033068801s ago: executing program 4 (id=2430): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r3, 0x40049409, r3) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@empty, @multicast, @multicast]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r1, 0xb97534d5fe9704cf, 0x70bd28, 0x25dfdafe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x38}}, 0x0) close(r0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x100, r1, 0x334, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x3}}}}, [@NL80211_ATTR_TESTDATA={0xd6, 0x45, "ccc127875115d3e6eb59147023a11d4065e92a3c072b0953b0151b7a3f71b4ffbc8119e75a411145424f97bf9a30635b55d28018e711cc6048a50147a492a18692892856d73a0aa2f293f22a354b503bf89ebda29f0b01524259d611af0cbfebad0a7ee083a6e93f78924d5fb833fddb0d391e4a8954804be2a0478cd584ebdacd9b4b9169de1474c7538dfb689f42906210d7109b2ffefab8504e86ed7dc39342913ba0f9889559bb8875e064db1222b5690a4050a64c00b2c32adb242d323efdb40f396c87d0dfd2737b91575e2811f23b"}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) 978.663812ms ago: executing program 4 (id=2432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001200)={{0x0, 0x3, 0x2, 0x48000000000000, 0xaf4, 0x0, 0x6, 0x2, 0x3fa, 0x2ea, 0x800, 0x3, 0x5, 0x2, 0x5}}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r2, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003fc0)={0x18, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b00f45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd41503f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e00300000000000000b35faae176f98b745eda2967199cc93685bb537e8e487166737089df20618cd4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df08445e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5aed65201cc2c51944da8d7391d5b6b9741aa3b76600cd1aa0afe5f8f46df4c5124caf673374b371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf81109715b67ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87dc0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e0219ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa400d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82b04cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb9b5fe7f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b3bff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b011d193ba8075da1d1da9311a050000ab89524414cae922141f7baf17756c31559907a53581b6ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf0a74680bc9987d5aade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7dc26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f736c5867831c5d6eaa9ef1806fd95bbe00318000000000000259da51ff7517ace7361420a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfad36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405d86c7760282901750b732ec06b0db735222a731195633164704886a0c50a5db0d694028cdf61b9749d5d7bd79969a92114ca804a6365615ceb09ed22e4fc3a7d0e2ee4a5fc10f3d01346481e934e411d0e9d7a9fa515a2219b526d8f3e2b383ef694ff99257fc52c31a3503ce22e503214fa808301b489bb0cd8000000000000159c447fc6f1bf1137f6863aceb90d62dae497fe08f7e627727ad0919a62fe92a33f1e5d390000000000000000004135cb6dda469cd6622e6c36e9f005789e6b827c07b8f4f8d4f15695fe30d32ee6efe22cf8d299239eaa54e5c699a904a0344febb884d1cc94f552f48d84ee3431d817edc4bdb762d62778f30baee4aa428bba55f6cff1b5ba395d461db8ffe6fb89e1058a73bc8564c86497b92330b23cb3befb569cc67f15e349644a2c47924423e2983517074747680306eddd948e5211377575787cfa291ec8796dd7db6968791aea4f5e627b219e99bb9262493bbf04415b22ee398406ec88f6b758f6b240a87dc169f51d3a79fb512afae14fbc5e7808764b8550622c1e3080cdd6b21ce0f0324712343943f5e061df056b3b809c07e1318daf9ed1ebea0f95e302dab0b6bc52ed2aac8b950b448ca3a03d1bd21078c54f5cf86c5563b9bba2805a30574a4123e27d6f281f70ac769c62b49bf7cc73f0c9a2b84534d234d2eb136f8620d3e1147a7b7361618e0064cad6fe32685d143af0d378d54c0a5953c764ae8721bd23cba4701e9f0d7a6e1ba92c87b0384f8ee595d618f7cf5a80a0a2edc2541072e146c1e5a8f7b65c877af04e742cfdcac0641a11d51fd6dc88965691bce388005fbb071451bc260bcf7df8890d9c5c8ef47bc4ff5080a2a771f85b4f3d2a2259196a8423e7a992e9b320a40921f6f74d5b0e94be6c9c059e62ff53e5c2139806cca4545d88a7f7ff366e5d7f08a56609130931b64e3bb70000d38011b924ed9df6aa170c6d845f43c0bcbe3839cd1422944651a5908c76c3f3b4070aa1d896e4adc117698c452c9926442a000e128bb936a99536290f906c088cb10ee7bee50b7b013e4e1ff3481d77c7697738b46deebd9ac6e58b41341dcbfad161e3d529a504821549629ef63f8297bec881eb5edb07ed6c86640fb4128d7931e56bb89f0ce605", @ANYRESOCT=r2], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r4}, 0x94) (async) r6 = socket$kcm(0x29, 0x5, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000001c0)={r7, r5}) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd1383000) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002200)={r1, 0x5}) 900.76429ms ago: executing program 1 (id=2433): r0 = socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r3}, 0x20) recvfrom$inet6(r5, &(0x7f0000000700)=""/45, 0x2d, 0x40000002, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x18) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="110000000000000000400000", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$unix(r7, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x40000c4) 890.299586ms ago: executing program 4 (id=2434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'batadv0\x00', 0xde}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8003f}, {0x6, 0x2, 0x9, 0xfdfffff7}]}, 0x10) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0003800c00029905000100000000002c00018014110300fe8000000000000000000000000000bb14000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c000280050001"], 0x90}}, 0x0) 760.87098ms ago: executing program 4 (id=2436): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r3, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffffffff}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r8, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000c0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r10, 0x0, 0xfe33) recvfrom$rxrpc(r0, &(0x7f0000000300)=""/169, 0xa9, 0x40000001, &(0x7f00000001c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) 696.612779ms ago: executing program 3 (id=2438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2c6}]}, 0x74}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x8000000000000000, 0x5}) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x3, 0x0, 0x6, 0x7, 0x2, 0x1, 0x10}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x0, 0x1c, 0x6, 0x9, 0x2, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r7}, 0x42) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r9}, 0x20) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r10, 0x29, 0x4e, &(0x7f0000000400), 0x4) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x7c) (async) bind$can_j1939(r3, &(0x7f0000000780)={0x1d, r5, 0x0, {0x2, 0x0, 0x4}, 0x1}, 0x18) 658.373124ms ago: executing program 2 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xeed0b46ffaee1393, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x12010}}, 0x20}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x740, 0x0, 0x0, 0x0, 0xfc000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0x3, 0x1, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 596.996056ms ago: executing program 3 (id=2440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x10}}]}}}]}, 0x60}}, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x8919, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x44) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000280)={'team_slave_1\x00'}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000a10ff02000000000000000000000000000189"], 0x340a) 580.916619ms ago: executing program 0 (id=2441): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0xf0, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc8, 0xfc, 0x0, 0x1, [@typed={0xc3, 0x8, 0x0, 0x0, @binary="8472bdda2a556b428cf05c5d94efbd10ba8ff5eb0aef4e7a8a54c878c261efd45698b8447c2ad5dca4ec0f6d3b4fdbbbaa325d822511f3f6fb703ef8e51f5f6c524e5e26b1bfcf60997af89e3217717ea5363f0376027d7c79e784794bb799e963ba0a815f86a828cf655feeaa035b153aa6a3aa50fd80a9c3e3681af9aa751cdb1becc42ebd7644b3045a04b2c073fdddd5c64c8e97a6df124db8d2be985e03a56ad83aed8df4db163a0d05de69c5b2b45d46ecff150f453b21c1a44aaa62"}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x100ffff}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x51}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x10) 523.418005ms ago: executing program 2 (id=2442): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r3, 0x40049409, r3) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@empty, @multicast, @multicast]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r1, 0xb97534d5fe9704cf, 0x70bd28, 0x25dfdafe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x38}}, 0x0) close(r0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x100, r1, 0x334, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x3}}}}, [@NL80211_ATTR_TESTDATA={0xd6, 0x45, "ccc127875115d3e6eb59147023a11d4065e92a3c072b0953b0151b7a3f71b4ffbc8119e75a411145424f97bf9a30635b55d28018e711cc6048a50147a492a18692892856d73a0aa2f293f22a354b503bf89ebda29f0b01524259d611af0cbfebad0a7ee083a6e93f78924d5fb833fddb0d391e4a8954804be2a0478cd584ebdacd9b4b9169de1474c7538dfb689f42906210d7109b2ffefab8504e86ed7dc39342913ba0f9889559bb8875e064db1222b5690a4050a64c00b2c32adb242d323efdb40f396c87d0dfd2737b91575e2811f23b"}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) 413.279326ms ago: executing program 0 (id=2443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) 367.90894ms ago: executing program 0 (id=2444): r0 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r3, &(0x7f0000002380), 0x12) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0xfffffff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) accept4$inet6(r2, 0x0, 0x0, 0x800) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x10, 0x12) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="8000102e7577d401", 0x8}, {&(0x7f0000000640)="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", 0x167}, {&(0x7f00000003c0)="4d41b3e63c2e6a3771c4a88c6096bff16275f9d3f075f3a29a642b6c41f54eba879d1fdf5fd957b3979b09637f763f67757b0d042cc532e982c6e357a9bcee8acde688f3c042b50376330f00aa14b8ef471d932ffe8f0d499ccb7ea5dc4dfafc1a89a47ea0c6a0c24b6e7b1e0487348789ac0b69dbc1c67b5ac2c637b2093da392a7c8ea4ecabcad42fb3c388cc7ac97f21a68597ee30ba5ece4ad902f665a483f983e4273a3ca80537a37237f0c4d19d3ea3b210fd0f652a6dcbf59984816a6069184adf09d0751ce31da41cd479bb05675ef6cde2e6810675f8eda12220511233132f2150e6bde37381ed5ed4d", 0xee}], 0x3}}], 0x1, 0x40000000) 363.841386ms ago: executing program 2 (id=2445): r0 = socket(0x10, 0x3, 0x0) (async) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xadc0}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 236.21303ms ago: executing program 3 (id=2446): socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x4cc, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x380, 0x1, [@m_xt={0x9c, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x90, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6f543d2"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xf5, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248ff34da3a7feb0b33e3daf741eaf0028a3028cadff8319f24f3fcf384b8ebc5d6acc0a15408058408ac4ec371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xd4, 0x10, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x0, 0x1, 0x8, 0x80000001}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_TTL={0x5, 0x7, 0xc2}]}, {0x61, 0x6, "e058ba14c615f8da254ffec478a6899aa08777c1d0c3e466b18a24b00d979762011c1e58f44be1e125aeae9a747d43afc8a85838cf3e5e3e61c3c09ff984058a15c730872cf33913b8e77b8b6e746f6bd61515c0b71a5f55062c5c7ba1"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x138, 0x1, [@m_nat={0x134, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x1}}]}, {0x6c, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d34c0212052e2b133f828d5344be697c8a1e248c0c894f3f3574cd0cbf17e94c54"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000340)="120000001200e7ef0000a1001b0000000000", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x8, 0x0, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x1, 0x8}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@typed={0x8, 0x26, 0x0, 0x0, @u32}, @nested={0x4, 0x44}]}, 0x20}}, 0x0) 168.681366ms ago: executing program 3 (id=2447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x80c0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="8e5b8b0c", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000200000014000480050003008000000005000300050000000800020003000000"], 0x38}}, 0x0) 149.235112ms ago: executing program 2 (id=2448): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000cc0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit, @tail_call]}, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000260009000100080080004000010000002ad82995ea8e0a7c4986fd5120a3ae5723fa679fc3808905ae7400ac06fef5152a45a8f2513c0b28939c57a9526ffde8ec10ecbd519a961a"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0x5, r2, 0xa}, 0x10) 57.056451ms ago: executing program 3 (id=2449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x345}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x346}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7dd7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}]]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xe) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001200010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014001800000000000000000000000000000000010500160002000000040012000500170000000000"], 0x60}}, 0x0) 56.420266ms ago: executing program 2 (id=2450): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x18, r2, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x0, 0xe0, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x7ff, 0x5}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r6, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@private1, 0x0}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0xfffffdc2, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 8.868953ms ago: executing program 1 (id=2451): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x4a, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x464, 0x4, 0x70bd2b, 0x25dfdbfd, "234f813cbe6e943f069d8ac8254439fdfb81570190007513abbefc038434d135c1a5bfbb8ffe277a0f5ac8921a2209a34f00954247b38e80f0f5c005d2fe63fd57526ad7bc7bf124abe593b79b9537c9195dd81e77eb", ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24048811}, 0x1dab490479508a4c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xd0, 0x0, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x11, 0x1, r8, 0x1, 0xe0}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x10, 0x700, 0xba33, 0x441, {{0x1c, 0x4, 0x2, 0x2a, 0x70, 0x65, 0x0, 0xd6, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x20}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xf5, [@remote, @loopback, @empty, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010101, @empty]}, @rr={0x7, 0x1b, 0x69, [@rand_addr=0x64010100, @multicast1, @local, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast]}, @rr={0x7, 0x1b, 0xb5, [@rand_addr=0x64010102, @remote, @empty, @remote, @broadcast, @multicast2]}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r12, &(0x7f00000004c0)={0x1d, r13, 0x0, {0x2, 0xf0, 0x6}, 0xff}, 0x68) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r13, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000", @ANYRES16=r2, @ANYBLOB="200029bd7000ffdbdf25130000003400018008000100", @ANYRES32=r4, @ANYBLOB="080003000200000008000300020000000800030003000000080003000100000008000300030000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000300000000006800018008000300030000000800030002000000140002007369743000000000000000000000000008000300020000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=r9, @ANYBLOB="140002006261746164763000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c000180080003000300000008000300030000000800030001000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0800030001000000300001800800030000000000080003000000000008000100", @ANYRES32=r13, @ANYBLOB="140002006d6163766c616e310000000000000000340001801400020064756d6d7930000000000000000000001400020076657468305f746f5f62726964676500080003000300000020000180140002007465616d3000000000000000000000000800030001000000"], 0x188}, 0x1, 0x0, 0x0, 0x4000810}, 0x8886) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r14, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000700)=ANY=[@ANYBLOB="91b882b09a5bbbbbbbbbbbbb080045000038000000000001908fac1e0001ac1414aa030490781200183f25000fff00000000000100000e0101016401010008000071ae9b1c438ed1074079f99d56a19dc893a03764918cd29781ebb17285b8229a6bd93b35b91ef1c907c58404e8cfaa60a97a5355dcc397c04b22022a614dcf3e88ac1389ceb128977334bf0477ccd5a92dbab146a0e4e137f42d2ca4bd0755f028c09a49b96b64f23dcae6389c057d8ac7290f2a6c53"], 0x0) 0s ago: executing program 3 (id=2452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000001c0)="01", 0x1) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000180)=0x8000, 0x4) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) (async) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000680)=""/17, &(0x7f00000000c0)=0x11) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 2] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 100.999192][ T7100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.328'. [ 101.009059][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 101.034705][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.330'. [ 101.054356][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.330'. [ 101.064191][ T148] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.078476][ T148] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.088103][ T148] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.119935][ T6562] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.900740][ T7150] netlink: 224 bytes leftover after parsing attributes in process `syz.0.337'. [ 101.976744][ T7150] netlink: 64 bytes leftover after parsing attributes in process `syz.0.337'. [ 102.069990][ T7159] validate_nla: 3 callbacks suppressed [ 102.070005][ T7159] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 102.128028][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.175831][ T7159] bridge_slave_1: left allmulticast mode [ 102.202897][ T7159] bridge_slave_1: left promiscuous mode [ 102.226495][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.259911][ T7159] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 102.655268][ T7197] can: request_module (can-proto-3) failed. [ 102.881695][ T7205] batadv1: entered allmulticast mode [ 102.932451][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 103.091903][ T7217] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 103.115583][ T7217] bond2 (unregistering): Released all slaves [ 103.426971][ T7238] netlink: 'syz.4.363': attribute type 12 has an invalid length. [ 103.691311][ T7255] syzkaller0: entered promiscuous mode [ 103.720679][ T7255] syzkaller0: entered allmulticast mode [ 103.750412][ T7254] tipc: Started in network mode [ 103.775511][ T7254] tipc: Node identity fe1578e63a3, cluster identity 4711 [ 103.805917][ T7254] tipc: Enabled bearer , priority 0 [ 103.873551][ T7254] tipc: Resetting bearer [ 103.970408][ T7254] tipc: Disabling bearer [ 104.034786][ T7273] netlink: 'syz.2.370': attribute type 11 has an invalid length. [ 104.182558][ T7283] sock: sock_set_timeout: `syz.0.373' (pid 7283) tries to set negative timeout [ 104.701032][ T7310] bridge1: entered promiscuous mode [ 104.706533][ T7310] bridge1: entered allmulticast mode [ 105.287689][ T7337] netlink: 'syz.2.387': attribute type 29 has an invalid length. [ 105.303221][ T7337] netlink: 'syz.2.387': attribute type 29 has an invalid length. [ 105.489195][ T7352] tun0: tun_chr_ioctl cmd 1074025675 [ 105.494584][ T7352] tun0: persist disabled [ 105.747062][ T7364] __nla_validate_parse: 8 callbacks suppressed [ 105.747080][ T7364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.399'. [ 106.332234][ T7403] Bluetooth: MGMT ver 1.23 [ 106.348700][ T7405] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.413'. [ 106.461658][ T7411] wg2: entered promiscuous mode [ 106.479207][ T7411] wg2: entered allmulticast mode [ 106.722905][ T7422] veth0_virt_wifi: entered promiscuous mode [ 106.740697][ T7422] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 106.749108][ T7422] team0: Device macvtap1 is already an upper device of the team interface [ 106.783769][ T7422] veth0_virt_wifi: left promiscuous mode [ 106.791980][ T7429] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.947701][ T5838] block nbd1: Receive control failed (result -32) [ 107.041575][ T7437] netlink: 'syz.2.422': attribute type 13 has an invalid length. [ 107.207337][ T7452] xt_connbytes: Forcing CT accounting to be enabled [ 107.259545][ T7451] syzkaller0: entered promiscuous mode [ 107.265446][ T7451] syzkaller0: entered allmulticast mode [ 107.504645][ T7463] sctp: [Deprecated]: syz.0.430 (pid 7463) Use of int in max_burst socket option deprecated. [ 107.504645][ T7463] Use struct sctp_assoc_value instead [ 107.559283][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 107.699358][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 107.919310][ T7481] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 107.999604][ T7481] bridge_slave_0: left allmulticast mode [ 108.025599][ T7481] bridge_slave_0: left promiscuous mode [ 108.043530][ T7485] netlink: 'syz.3.435': attribute type 10 has an invalid length. [ 108.043631][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.102501][ T7481] bridge_slave_1: left allmulticast mode [ 108.111666][ T7481] bridge_slave_1: left promiscuous mode [ 108.138407][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.177647][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 108.254035][ T7481] bond0: (slave bond_slave_0): Releasing backup interface [ 108.293983][ T7481] bond0: (slave bond_slave_1): Releasing backup interface [ 108.320037][ T7481] team0: Port device team_slave_0 removed [ 108.379557][ T7481] team0: Port device team_slave_1 removed [ 108.416194][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.423604][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.465967][ T5842] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 108.467022][ T5838] Bluetooth: hci2: command 0x0401 tx timeout [ 108.494297][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.515246][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.532673][ T7481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.574509][ T7485] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 108.622926][ T7485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.646904][ T7485] bond0: (slave wlan1): Opening slave failed [ 108.666075][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 108.674974][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.441'. [ 108.908906][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 109.079266][ T7522] netlink: 'syz.4.446': attribute type 5 has an invalid length. [ 109.090239][ T7522] netlink: 140 bytes leftover after parsing attributes in process `syz.4.446'. [ 109.112901][ T7503] vlan0 (unregistering): left allmulticast mode [ 109.126197][ T7503] veth0_vlan (unregistering): left allmulticast mode [ 109.143118][ T7503] vlan0 (unregistering): left promiscuous mode [ 109.367889][ T7519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.405654][ T7519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.552462][ T7519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.566116][ T7544] netlink: 596 bytes leftover after parsing attributes in process `syz.0.452'. [ 109.587434][ T7519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.746082][ T7519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.784752][ T7519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.830095][ T7556] sctp: [Deprecated]: syz.3.455 (pid 7556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.830095][ T7556] Use struct sctp_sack_info instead [ 109.897249][ T7519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.908890][ T7519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.088410][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.106891][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.141976][ T3000] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.150546][ T3000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.223005][ T3000] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.246714][ T3000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.273255][ T3000] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.281933][ T3000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.720998][ T7600] vlan2: entered allmulticast mode [ 110.731589][ T7600] bond0: entered allmulticast mode [ 110.737263][ T7600] bond_slave_0: entered allmulticast mode [ 110.743148][ T7600] bond_slave_1: entered allmulticast mode [ 110.749379][ T7600] geneve1: entered allmulticast mode [ 110.754873][ T7600] bridge_slave_1: entered allmulticast mode [ 110.889112][ T7611] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 111.111842][ T7621] veth0: entered promiscuous mode [ 111.145116][ T7623] netlink: 'syz.4.475': attribute type 7 has an invalid length. [ 111.191150][ T7621] veth0: left promiscuous mode [ 111.455595][ T7644] 8021q: VLANs not supported on ip_vti0 [ 111.483453][ T7644] netlink: 'syz.0.480': attribute type 2 has an invalid length. [ 111.505991][ T7649] __nla_validate_parse: 4 callbacks suppressed [ 111.506007][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.481'. [ 111.636018][ T7649] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 112.162282][ T7672] Bluetooth: MGMT ver 1.23 [ 112.352248][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 112.391992][ T7677] netlink: 44 bytes leftover after parsing attributes in process `syz.4.489'. [ 112.445693][ T7681] netlink: 'syz.3.490': attribute type 3 has an invalid length. [ 112.979993][ T7717] netlink: 232 bytes leftover after parsing attributes in process `syz.2.497'. [ 113.179267][ T7724] netlink: 'syz.1.500': attribute type 30 has an invalid length. [ 113.410097][ T7736] netlink: 'syz.3.502': attribute type 21 has an invalid length. [ 113.438739][ T7737] netlink: 'syz.3.502': attribute type 21 has an invalid length. [ 113.783865][ T7761] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 113.885931][ T7752] vxcan1: left promiscuous mode [ 114.020051][ T7752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.309850][ T7786] xt_cgroup: invalid path, errno=-2 [ 114.352894][ T7786] tipc: Enabled bearer , priority 13 [ 114.468611][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 114.680794][ T7808] netlink: 'syz.4.522': attribute type 178 has an invalid length. [ 114.805328][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 114.816627][ T7821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.525'. [ 114.832674][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 114.842421][ T7824] netlink: 176 bytes leftover after parsing attributes in process `syz.2.524'. [ 114.851543][ T7824] netlink: 'syz.2.524': attribute type 5 has an invalid length. [ 114.917121][ T7828] delete_channel: no stack [ 115.430227][ T7844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.529'. [ 115.478346][ T43] tipc: Node number set to 3290790118 [ 115.814002][ T7861] openvswitch: netlink: Message has 8 unknown bytes. [ 115.854276][ T7857] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 115.867680][ T7861] tipc: Started in network mode [ 115.884221][ T7861] tipc: Node identity 42f5, cluster identity 1 [ 115.894332][ T7861] tipc: Node number set to 17141 [ 116.301921][ T7895] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 116.484392][ T7896] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 116.563775][ T7908] netlink: 'syz.4.543': attribute type 39 has an invalid length. [ 116.806419][ T7916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.185763][ T7929] __nla_validate_parse: 9 callbacks suppressed [ 117.185781][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 117.257754][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 117.305845][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 117.512220][ T7939] lo: entered allmulticast mode [ 117.528088][ T7939] tunl0: entered allmulticast mode [ 117.558401][ T7939] gre0: entered allmulticast mode [ 117.585144][ T7939] gretap0: entered allmulticast mode [ 117.601249][ T7939] erspan0: entered allmulticast mode [ 117.612589][ T7939] ip_vti0: entered allmulticast mode [ 117.621974][ T7939] ip6_vti0: entered allmulticast mode [ 117.630935][ T7939] sit0: entered allmulticast mode [ 117.653512][ T7939] ip6tnl0: entered allmulticast mode [ 117.662244][ T7939] ip6gre0: entered allmulticast mode [ 117.712716][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 118.389363][ T7939] syz_tun: entered allmulticast mode [ 118.409271][ T7939] ip6gretap0: entered allmulticast mode [ 118.418382][ T7939] vcan0: entered allmulticast mode [ 118.430584][ T7939] team0: entered allmulticast mode [ 118.437687][ T7939] team_slave_0: entered allmulticast mode [ 118.443407][ T7939] team_slave_1: entered allmulticast mode [ 118.453117][ T7939] dummy0: entered allmulticast mode [ 118.464521][ T7939] nlmon0: entered allmulticast mode [ 118.471095][ T7939] caif0: entered allmulticast mode [ 118.476604][ T7939] batadv0: entered allmulticast mode [ 118.486605][ T7939] vxcan0: entered allmulticast mode [ 118.492593][ T7939] vxcan1: entered allmulticast mode [ 118.498825][ T7939] veth0: entered allmulticast mode [ 118.508357][ T7939] veth1: entered allmulticast mode [ 118.516301][ T7939] wg0: entered allmulticast mode [ 118.522876][ T7939] wg1: entered allmulticast mode [ 118.531545][ T7939] wg2: entered allmulticast mode [ 118.537886][ T7939] veth0_to_bridge: entered allmulticast mode [ 118.546346][ T7939] bridge_slave_0: entered allmulticast mode [ 118.553446][ T7939] veth1_to_bridge: entered allmulticast mode [ 118.563318][ T7939] veth0_to_bond: entered allmulticast mode [ 118.571685][ T7939] veth1_to_bond: entered allmulticast mode [ 118.580334][ T7939] veth0_to_team: entered allmulticast mode [ 118.590524][ T7939] veth1_to_team: entered allmulticast mode [ 118.599650][ T7939] veth0_to_batadv: entered allmulticast mode [ 118.607513][ T7939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.614896][ T7939] batadv_slave_0: entered allmulticast mode [ 118.624270][ T7939] veth1_to_batadv: entered allmulticast mode [ 118.632226][ T7939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.640411][ T7939] batadv_slave_1: entered allmulticast mode [ 118.648504][ T7939] xfrm0: entered allmulticast mode [ 118.655186][ T7939] veth0_to_hsr: entered allmulticast mode [ 118.663030][ T7939] hsr_slave_0: entered allmulticast mode [ 118.670254][ T7939] veth1_to_hsr: entered allmulticast mode [ 118.678149][ T7939] hsr_slave_1: entered allmulticast mode [ 118.686440][ T7939] hsr0: entered allmulticast mode [ 118.694980][ T7939] veth1_virt_wifi: entered allmulticast mode [ 118.703177][ T7939] veth0_virt_wifi: entered allmulticast mode [ 118.711533][ T7939] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 118.719287][ T7939] veth1_vlan: entered allmulticast mode [ 118.727627][ T7939] veth0_vlan: entered allmulticast mode [ 118.740751][ T7939] vlan0: entered allmulticast mode [ 118.746168][ T7939] vlan1: entered allmulticast mode [ 118.751558][ T7939] macvlan0: entered allmulticast mode [ 118.762333][ T7939] macvlan1: entered allmulticast mode [ 118.771149][ T7939] ipvlan0: entered allmulticast mode [ 118.776873][ T7939] ipvlan1: entered allmulticast mode [ 118.782400][ T7939] veth1_macvtap: entered allmulticast mode [ 118.792102][ T7939] veth0_macvtap: entered allmulticast mode [ 118.801087][ T7939] macvtap0: entered allmulticast mode [ 118.808537][ T7939] macsec0: entered allmulticast mode [ 118.816331][ T7939] geneve0: entered allmulticast mode [ 118.832568][ T7939] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 118.845916][ T7939] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 118.854464][ T7939] bond1: entered allmulticast mode [ 118.861328][ T7939] vxlan0: entered allmulticast mode [ 118.870955][ T7939] bridge0: entered allmulticast mode [ 118.879141][ T7939] ip6tnl1: entered allmulticast mode [ 118.884759][ T7939] macsec1: entered allmulticast mode [ 118.893943][ T7939] netdevsim netdevsim2 eth0: entered allmulticast mode [ 118.901085][ T7939] netdevsim netdevsim2 eth1: entered allmulticast mode [ 118.908221][ T7939] netdevsim netdevsim2 eth2: entered allmulticast mode [ 118.915282][ T7939] netdevsim netdevsim2 eth3: entered allmulticast mode [ 118.922293][ T7939] macvlan2: entered allmulticast mode [ 118.947903][ T7947] batadv0: entered promiscuous mode [ 118.955568][ T7947] bond0: entered promiscuous mode [ 118.970008][ T7947] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 119.002780][ T7947] hsr1: entered allmulticast mode [ 119.008591][ T7947] batadv0: entered allmulticast mode [ 119.014087][ T7947] bond0: entered allmulticast mode [ 119.023561][ T7947] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 119.067572][ T3020] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.115140][ T3020] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.151006][ T7956] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 119.185932][ T3020] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.194325][ T3020] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.241670][ T3020] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.270439][ T3020] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.321978][ T7964] tipc: Enabled bearer , priority 0 [ 119.371501][ T3020] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.421394][ T3020] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.440819][ T7970] syzkaller0: entered promiscuous mode [ 119.448463][ T7970] syzkaller0: entered allmulticast mode [ 119.455075][ C1] syzkaller0: tun_net_xmit 90 [ 119.463499][ T7982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.566'. [ 119.475616][ T2974] syzkaller0: tun_net_xmit 70 [ 119.481452][ T7982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.566'. [ 119.528033][ T7964] tipc: Resetting bearer [ 119.539805][ T7964] syzkaller0: tun_net_xmit 90 [ 119.544945][ T7964] syzkaller0: tun_net_xmit 90 [ 119.574838][ T7962] tipc: Resetting bearer [ 119.627234][ T7962] tipc: Disabling bearer [ 120.482441][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 120.748477][ T8065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.585'. [ 121.049599][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 121.108857][ T8094] netlink: 'syz.3.588': attribute type 4 has an invalid length. [ 121.393412][ T8102] bond1: entered promiscuous mode [ 121.398644][ T8102] bond1: entered allmulticast mode [ 121.406693][ T8102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.618919][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 121.630765][ T8119] tipc: Invalid UDP bearer configuration [ 121.630819][ T8119] tipc: Enabling of bearer rejected, failed to enable media [ 122.376958][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'. [ 122.390097][ T8160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.605'. [ 122.402557][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 122.424234][ T8160] netlink: 31 bytes leftover after parsing attributes in process `syz.2.605'. [ 122.438756][ T8160] netlink: 'syz.2.605': attribute type 3 has an invalid length. [ 122.480377][ T8160] netlink: 'syz.2.605': attribute type 2 has an invalid length. [ 122.509405][ T8160] netlink: 31 bytes leftover after parsing attributes in process `syz.2.605'. [ 123.021317][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.617'. [ 123.177427][ T8198] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 123.195873][ T8198] bond1 (unregistering): Released all slaves [ 123.219733][ T8205] x_tables: duplicate underflow at hook 1 [ 123.241521][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.617'. [ 123.296183][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.617'. [ 123.305788][ T8208] ip6tnl0: Caught tx_queue_len zero misconfig [ 123.332947][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.617'. [ 123.365339][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.617'. [ 123.464987][ T8215] netlink: 'syz.3.623': attribute type 28 has an invalid length. [ 123.478020][ T8215] netlink: 'syz.3.623': attribute type 3 has an invalid length. [ 123.507534][ T8216] tipc: Enabled bearer , priority 0 [ 123.512364][ T8217] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.516541][ T8215] netlink: 'syz.3.623': attribute type 28 has an invalid length. [ 123.573878][ T8215] netlink: 'syz.3.623': attribute type 3 has an invalid length. [ 123.593357][ T8215] netlink: 'syz.3.623': attribute type 28 has an invalid length. [ 123.604249][ T8215] netlink: 'syz.3.623': attribute type 3 has an invalid length. [ 123.615524][ T8215] netlink: 'syz.3.623': attribute type 28 has an invalid length. [ 123.639382][ T8213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.651833][ T8213] tipc: Disabling bearer [ 123.892645][ T8239] x_tables: duplicate underflow at hook 4 [ 123.906884][ T8237] syzkaller0: entered promiscuous mode [ 123.913206][ T8237] syzkaller0: entered allmulticast mode [ 124.225718][ T8255] team0: Device ipvlan1 failed to register rx_handler [ 124.798088][ T8283] Cannot find add_set index 1 as target [ 124.871470][ T8291] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 124.880645][ T8282] lo speed is unknown, defaulting to 1000 [ 124.887054][ T8291] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 124.898991][ T8284] lo speed is unknown, defaulting to 1000 [ 125.349723][ T8302] gretap0: entered promiscuous mode [ 125.359633][ T8302] gretap0: left promiscuous mode [ 125.546980][ T8306] syz.2.647 (8306) used greatest stack depth: 15096 bytes left [ 125.741718][ T51] block nbd0: Possible stuck request ffff8880252f0000: control (read@0,1024B). Runtime 30 seconds [ 125.755169][ T51] block nbd0: Possible stuck request ffff8880252f01c0: control (read@1024,1024B). Runtime 30 seconds [ 125.766279][ T51] block nbd0: Possible stuck request ffff8880252f0380: control (read@2048,1024B). Runtime 30 seconds [ 125.778068][ T51] block nbd0: Possible stuck request ffff8880252f0540: control (read@3072,1024B). Runtime 30 seconds [ 126.104990][ T8338] wg2: left promiscuous mode [ 126.112813][ T8338] wg2: left allmulticast mode [ 126.167117][ T8342] xt_NFQUEUE: number of total queues is 0 [ 126.178098][ T8338] wg2: entered promiscuous mode [ 126.183007][ T8338] wg2: entered allmulticast mode [ 127.388447][ T8398] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 127.507560][ T8407] x_tables: duplicate underflow at hook 1 [ 127.634938][ T8414] __nla_validate_parse: 135 callbacks suppressed [ 127.634957][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 127.764165][ T8414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.675'. [ 127.831770][ T8422] validate_nla: 127 callbacks suppressed [ 127.831787][ T8422] netlink: 'syz.3.677': attribute type 7 has an invalid length. [ 127.912126][ T8422] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 127.921469][ T8419] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 127.929694][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'. [ 127.939713][ T8427] netlink: 'syz.2.678': attribute type 64 has an invalid length. [ 127.947551][ T8427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.678'. [ 128.059206][ T8430] netlink: 'syz.1.679': attribute type 83 has an invalid length. [ 128.156821][ T8432] netlink: 'syz.0.680': attribute type 1 has an invalid length. [ 128.165736][ T8432] nbd: error processing sock list [ 128.206193][ T8432] block nbd2: shutting down sockets [ 128.380001][ T8450] delete_channel: no stack [ 128.398086][ T8452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.686'. [ 128.463136][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 128.566107][ T8456] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 128.601568][ T8467] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 129.068176][ T8493] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.700'. [ 129.079574][ T8492] tipc: Enabled bearer , priority 0 [ 129.088363][ T8492] syzkaller0: entered promiscuous mode [ 129.093931][ T8492] syzkaller0: entered allmulticast mode [ 129.113715][ T8492] tipc: Resetting bearer [ 129.122455][ T8490] tipc: Resetting bearer [ 129.137057][ T8490] tipc: Disabling bearer [ 129.816291][ T6562] wlan1: Trigger new scan to find an IBSS to join [ 132.778107][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781359][ T6562] wlan1: Trigger new scan to find an IBSS to join [ 132.784427][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.815944][ T148] wlan1: Trigger new scan to find an IBSS to join [ 136.695874][ T148] wlan1: Creating new IBSS network, BSSID 7e:79:4b:90:0f:be [ 154.488459][ T8505] syzkaller1: entered promiscuous mode [ 154.493979][ T8505] syzkaller1: entered allmulticast mode [ 154.558312][ T8509] delete_channel: no stack [ 154.582572][ T8513] netlink: 88 bytes leftover after parsing attributes in process `syz.4.707'. [ 154.716960][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 154.743549][ T8516] netlink: 'syz.0.709': attribute type 3 has an invalid length. [ 155.348559][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 155.533308][ T8547] netlink: 260 bytes leftover after parsing attributes in process `syz.0.717'. [ 155.686396][ T8572] ip6t_srh: unknown srh invflags 4000 [ 155.737774][ T8572] ip6t_srh: unknown srh invflags 4000 [ 155.807496][ T8576] tipc: Enabled bearer , priority 10 [ 155.824179][ T51] block nbd0: Possible stuck request ffff8880252f0000: control (read@0,1024B). Runtime 60 seconds [ 155.835550][ T51] block nbd0: Possible stuck request ffff8880252f01c0: control (read@1024,1024B). Runtime 60 seconds [ 155.846669][ T51] block nbd0: Possible stuck request ffff8880252f0380: control (read@2048,1024B). Runtime 60 seconds [ 155.857894][ T51] block nbd0: Possible stuck request ffff8880252f0540: control (read@3072,1024B). Runtime 60 seconds [ 155.880266][ T8576] team0: Device geneve2 is up. Set it down before adding it as a team port [ 155.962795][ T8589] netlink: 'syz.2.728': attribute type 39 has an invalid length. [ 156.123763][ T8581] lo speed is unknown, defaulting to 1000 [ 156.193367][ T8596] sctp: [Deprecated]: syz.4.729 (pid 8596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.193367][ T8596] Use struct sctp_sack_info instead [ 156.225532][ T8598] netlink: 'syz.3.730': attribute type 2 has an invalid length. [ 156.269424][ T8596] netlink: 64 bytes leftover after parsing attributes in process `syz.4.729'. [ 156.519925][ T8613] tipc: Enabling of bearer rejected, failed to enable media [ 156.571438][ T8616] netlink: 'syz.0.735': attribute type 2 has an invalid length. [ 156.588201][ T8616] netlink: 244 bytes leftover after parsing attributes in process `syz.0.735'. [ 156.657354][ T8590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 156.925608][ T982] tipc: Node number set to 2886997162 [ 160.196339][ T5199] udevd[5199]: worker [5848] /devices/virtual/block/nbd0 is taking a long time [ 166.713680][ T6562] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 178.937276][ T8632] tipc: Enabled bearer , priority 10 [ 178.949557][ T8636] netlink: 68 bytes leftover after parsing attributes in process `syz.1.738'. [ 178.966010][ T8639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.739'. [ 178.969565][ T8640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.740'. [ 178.985830][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 179.016717][ T8640] netlink: 'syz.3.740': attribute type 7 has an invalid length. [ 179.025290][ T8640] netlink: 'syz.3.740': attribute type 8 has an invalid length. [ 179.034958][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 179.184455][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 179.289513][ T8655] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 179.310231][ T8655] netlink: 'syz.1.742': attribute type 2 has an invalid length. [ 179.352448][ T8664] netlink: 'syz.4.747': attribute type 64 has an invalid length. [ 179.377487][ T8663] netlink: 'syz.4.747': attribute type 64 has an invalid length. [ 179.395170][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.747'. [ 179.412511][ T8663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.747'. [ 179.822924][ T8691] ipt_ECN: cannot use operation on non-tcp rule [ 179.921077][ T8694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.757'. [ 179.977513][ T8696] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 180.374540][ T30] audit: type=1107 audit(1760249215.618:2): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='YRI3v`3ҒhTxc/a_d(X_b 4/ y5TK' [ 180.422626][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 182.135104][ T8825] lo: entered allmulticast mode [ 182.199973][ T8832] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 182.226062][ T8832] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 182.402067][ T8847] bond0: Caught tx_queue_len zero misconfig [ 183.190052][ T8891] tipc: Started in network mode [ 183.219515][ T8891] tipc: Node identity ee40058340a6, cluster identity 4711 [ 183.259300][ T8891] tipc: Enabled bearer , priority 0 [ 183.393252][ T8897] syzkaller0: entered promiscuous mode [ 183.415621][ T8897] syzkaller0: entered allmulticast mode [ 183.424625][ T8897] tipc: Resetting bearer [ 184.013718][ T3000] tipc: Resetting bearer [ 184.031397][ T8925] __nla_validate_parse: 12 callbacks suppressed [ 184.031412][ T8925] netlink: 56 bytes leftover after parsing attributes in process `syz.3.832'. [ 184.049850][ T8889] tipc: Resetting bearer [ 184.335570][ T982] tipc: Node number set to 2934310275 [ 185.182675][ T8889] tipc: Disabling bearer [ 185.213032][ T8953] netdevsim netdevsim1: Direct firmware load for . [ 185.213032][ T8953] failed with error -2 [ 185.240228][ T8953] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 185.240228][ T8953] [ 185.441403][ T8962] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 185.512662][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.843'. [ 185.545755][ T8962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.580401][ T8968] bond1: entered allmulticast mode [ 185.626021][ T8974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.845'. [ 185.724267][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 185.741860][ T8978] netlink: 224 bytes leftover after parsing attributes in process `syz.3.847'. [ 185.775325][ T8978] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.847'. [ 185.776216][ T8979] netlink: 9 bytes leftover after parsing attributes in process `syz.0.846'. [ 185.818973][ T8978] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.847'. [ 185.859287][ T8986] xt_SECMARK: invalid mode: 9 [ 185.872874][ T8979] tipc: Resetting bearer [ 185.889530][ T8979] tipc: Resetting bearer [ 185.907360][ T8979] gretap0: entered promiscuous mode [ 185.915211][ T51] block nbd0: Possible stuck request ffff8880252f0000: control (read@0,1024B). Runtime 90 seconds [ 185.930146][ T51] block nbd0: Possible stuck request ffff8880252f01c0: control (read@1024,1024B). Runtime 90 seconds [ 185.942728][ T51] block nbd0: Possible stuck request ffff8880252f0380: control (read@2048,1024B). Runtime 90 seconds [ 185.953692][ T51] block nbd0: Possible stuck request ffff8880252f0540: control (read@3072,1024B). Runtime 90 seconds [ 185.984206][ T8991] netlink: 'syz.3.851': attribute type 11 has an invalid length. [ 185.992151][ T8991] netlink: 'syz.3.851': attribute type 5 has an invalid length. [ 186.000137][ T8991] netlink: 4112 bytes leftover after parsing attributes in process `syz.3.851'. [ 186.204753][ T9000] pim6reg: entered allmulticast mode [ 186.419558][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 186.448519][ T30] audit: type=1800 audit(1760249221.698:3): pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.859" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=782 res=0 errno=0 [ 186.492445][ T9017] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 186.703034][ T9029] netlink: 'syz.2.864': attribute type 3 has an invalid length. [ 186.709624][ T9032] tipc: Enabled bearer , priority 0 [ 186.757316][ T9039] netlink: 'syz.4.867': attribute type 1 has an invalid length. [ 186.788454][ T9042] netlink: 'syz.4.867': attribute type 33 has an invalid length. [ 186.894877][ T9039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.923584][ T9032] syzkaller0: entered promiscuous mode [ 186.929383][ T9032] syzkaller0: entered allmulticast mode [ 187.039299][ T9032] tipc: Resetting bearer [ 187.067195][ T9032] netlink: 'syz.1.865': attribute type 10 has an invalid length. [ 187.223824][ T9058] tipc: Enabled bearer , priority 0 [ 187.260871][ T9031] tipc: Resetting bearer [ 187.280920][ T9031] tipc: Disabling bearer [ 187.292356][ T9058] syzkaller0: entered promiscuous mode [ 187.299089][ T9058] syzkaller0: entered allmulticast mode [ 187.320716][ T9071] lo speed is unknown, defaulting to 1000 [ 187.410535][ T9064] tipc: Resetting bearer [ 187.483200][ T9057] tipc: Resetting bearer [ 187.521697][ T9057] tipc: Disabling bearer [ 188.073350][ T9111] dvmrp0: entered allmulticast mode [ 188.167914][ T9115] batadv_slave_0: entered promiscuous mode [ 188.210106][ T9114] batadv_slave_0: left promiscuous mode [ 188.392978][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.437287][ T9121] bond0: (slave rose0): Enslaving as an active interface with an up link [ 188.466923][ T9127] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 188.669569][ T9140] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.821936][ T9144] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 188.896476][ T9144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.931188][ T9151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.062816][ T9153] veth3: entered promiscuous mode [ 189.088219][ T9153] bond3: (slave veth3): Enslaving as an active interface with a down link [ 189.192083][ T9144] veth5: entered promiscuous mode [ 189.204502][ T9144] bond3: (slave veth5): Enslaving as an active interface with a down link [ 189.272415][ T9164] bond3: entered allmulticast mode [ 189.344162][ T9180] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 189.370061][ T9151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.372992][ T9180] __nla_validate_parse: 11 callbacks suppressed [ 189.373009][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 189.470437][ T9171] syzkaller1: entered promiscuous mode [ 189.479931][ T9171] syzkaller1: entered allmulticast mode [ 189.550373][ T9151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.769202][ T9151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.849729][ T9193] syzkaller0: entered promiscuous mode [ 189.875569][ T9193] syzkaller0: entered allmulticast mode [ 190.084325][ T9213] lo speed is unknown, defaulting to 1000 [ 190.218083][ T148] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.328346][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.430867][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.447481][ T9244] netlink: 'syz.2.911': attribute type 1 has an invalid length. [ 190.489941][ T3000] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.699206][ T9253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.912'. [ 191.048351][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 191.099459][ T9268] netlink: 112 bytes leftover after parsing attributes in process `syz.2.914'. [ 191.293017][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 191.307976][ T9265] hsr_slave_0 (unregistering): left promiscuous mode [ 191.409462][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 191.564916][ T9291] netlink: 'syz.2.920': attribute type 7 has an invalid length. [ 191.789380][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 191.943750][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 192.043978][ T9306] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.138171][ T9311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.928'. [ 192.163466][ T9314] lo: Caught tx_queue_len zero misconfig [ 192.164285][ T9311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.928'. [ 192.184053][ T9311] netlink: 'syz.3.928': attribute type 3 has an invalid length. [ 192.192353][ T9311] netlink: 'syz.3.928': attribute type 3 has an invalid length. [ 192.201121][ T9311] netlink: 'syz.3.928': attribute type 3 has an invalid length. [ 192.209015][ T9311] netlink: 'syz.3.928': attribute type 3 has an invalid length. [ 192.217814][ T9311] netlink: 'syz.3.928': attribute type 3 has an invalid length. [ 192.225630][ T9311] netlink: 'syz.3.928': attribute type 3 has an invalid length. [ 192.233719][ T9315] netlink: 'syz.2.929': attribute type 1 has an invalid length. [ 192.239212][ T9311] netlink: 'syz.3.928': attribute type 3 has an invalid length. [ 192.738795][ T9345] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 192.745669][ T9345] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.889514][ T9347] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 192.913537][ T9353] veth1_macvtap: left promiscuous mode [ 192.920304][ T9353] macsec0: entered promiscuous mode [ 192.930150][ T9353] macsec0: entered allmulticast mode [ 192.990408][ T9352] veth1_macvtap: entered promiscuous mode [ 193.015774][ T9352] veth1_macvtap: entered allmulticast mode [ 193.062228][ T9352] macsec0: left promiscuous mode [ 193.069081][ T9352] macsec0: left allmulticast mode [ 193.074386][ T9352] veth1_macvtap: left allmulticast mode [ 193.452256][ T9382] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 193.555465][ T9392] vxcan4: entered allmulticast mode [ 193.647450][ T9390] geneve2: entered promiscuous mode [ 193.655321][ T9390] geneve2: entered allmulticast mode [ 193.670213][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 193.699826][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 193.735652][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 193.769110][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 193.941070][ T9410] tipc: Enabling of bearer rejected, failed to enable media [ 194.033409][ T9419] veth0: entered promiscuous mode [ 194.039551][ T9419] veth0: left promiscuous mode [ 194.227774][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.234154][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.340032][ T9426] macsec2: entered promiscuous mode [ 194.347428][ T9426] macsec2: entered allmulticast mode [ 194.370975][ T9426] bond2: (slave macsec2): Error -34 calling dev_set_mtu [ 194.413598][ T9432] __nla_validate_parse: 10 callbacks suppressed [ 194.413620][ T9432] netlink: 284 bytes leftover after parsing attributes in process `syz.0.966'. [ 194.857094][ T5841] Bluetooth: hci0: command 0x080f tx timeout [ 194.887192][ T9454] netlink: 164 bytes leftover after parsing attributes in process `syz.2.971'. [ 194.931427][ T9454] netlink: 164 bytes leftover after parsing attributes in process `syz.2.971'. [ 194.988246][ T9454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.971'. [ 195.251186][ T9475] netlink: 288 bytes leftover after parsing attributes in process `syz.2.974'. [ 195.357468][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.976'. [ 195.412440][ T9474] vlan2: entered promiscuous mode [ 195.417697][ T9474] gretap0: entered promiscuous mode [ 195.439409][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 196.301246][ T5842] Bluetooth: hci2: command 0x0401 tx timeout [ 196.308397][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 196.310280][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 196.612991][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 196.618882][ T9542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.653039][ T9546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.988'. [ 196.666295][ T9541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.726596][ T9549] validate_nla: 44 callbacks suppressed [ 196.726612][ T9549] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 196.823278][ T9550] can: request_module (can-proto-5) failed. [ 196.825074][ T9551] can: request_module (can-proto-5) failed. [ 196.935201][ T5835] Bluetooth: hci0: command 0x080f tx timeout [ 197.501449][ T9599] netlink: 'syz.4.1006': attribute type 64 has an invalid length. [ 197.532505][ T9599] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1006'. [ 197.586785][ T9603] netlink: 'syz.4.1006': attribute type 4 has an invalid length. [ 197.626105][ T9606] dvmrp0: entered allmulticast mode [ 198.159712][ T9624] bond2 (unregistering): Released all slaves [ 198.210366][ T9643] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20007 [ 198.265755][ T9645] SET target dimension over the limit! [ 199.813180][ T9725] __nla_validate_parse: 5 callbacks suppressed [ 199.813200][ T9725] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1038'. [ 200.081904][ T9735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1042'. [ 200.101680][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1042'. [ 200.267005][ T9744] netlink: 'syz.1.1043': attribute type 3 has an invalid length. [ 200.285267][ T9744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 200.447268][ T9752] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 200.466127][ T9752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1045'. [ 200.603207][ T9758] netlink: 14448 bytes leftover after parsing attributes in process `syz.1.1046'. [ 200.613447][ T9758] openvswitch: netlink: Flow key attr not present in new flow. [ 200.718772][ T9761] Unknown options in mask b7f2 [ 201.033162][ T9773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.064048][ T9781] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 201.154714][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 201.212293][ T9781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.252041][ T9792] netlink: 'syz.2.1055': attribute type 2 has an invalid length. [ 201.405283][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 201.421636][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 201.475435][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 201.958491][ T9832] batadv_slave_0: entered promiscuous mode [ 202.027316][ T9830] batadv_slave_0: left promiscuous mode [ 202.134337][ T9847] vlan0: entered promiscuous mode [ 202.147654][ T9847] vlan0: entered allmulticast mode [ 202.176598][ T9847] hsr_slave_1: entered allmulticast mode [ 202.229070][ T9850] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 202.254450][ T9848] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 202.562825][ T9854] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.578358][ T9854] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 202.589628][ T9854] bond6: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 202.852102][ T9885] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 203.102963][ T9897] bond4: (slave bridge2): making interface the new active one [ 203.112083][ T9897] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 203.208539][ T9903] gretap1: entered promiscuous mode [ 203.236873][ T9903] gretap1: entered allmulticast mode [ 203.278944][ T9903] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 203.396217][ T9919] : renamed from lo (while UP) [ 203.959871][ T9945] tipc: Enabled bearer , priority 0 [ 204.003349][ T9945] syzkaller0: entered promiscuous mode [ 204.025158][ T9945] syzkaller0: entered allmulticast mode [ 204.086081][ T9945] tipc: Resetting bearer [ 204.188115][ T9941] tipc: Resetting bearer [ 204.232641][ T9941] tipc: Disabling bearer [ 204.342804][ T9981] Unsupported ieee802154 address type: 0 [ 205.024023][T10011] team0: Caught tx_queue_len zero misconfig [ 205.712668][T10049] __nla_validate_parse: 7 callbacks suppressed [ 205.712687][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'. [ 205.751349][T10049] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 205.784264][T10053] veth1_macvtap: left promiscuous mode [ 206.058919][T10064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'. [ 206.093595][T10064] netlink: 'syz.3.1116': attribute type 29 has an invalid length. [ 206.112679][T10064] netlink: 'syz.3.1116': attribute type 29 has an invalid length. [ 206.138963][T10064] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1116'. [ 206.413770][T10092] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1120'. [ 206.489296][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'. [ 206.498433][T10092] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1120'. [ 206.995822][T10107] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1124'. [ 207.021101][T10115] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.1127'. [ 207.158076][T10120] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 207.401344][T10138] netlink: 'syz.0.1132': attribute type 39 has an invalid length. [ 207.445580][T10143] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1129'. [ 207.774665][T10162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1137'. [ 208.393418][T10201] IPVS: set_ctl: invalid protocol: 108 172.30.0.3:0 [ 208.456371][T10202] tunl0: entered promiscuous mode [ 208.461696][T10202] netlink: 'syz.1.1148': attribute type 3 has an invalid length. [ 208.907563][T10224] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 209.026555][T10224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.073053][T10233] netlink: 'syz.4.1153': attribute type 3 has an invalid length. [ 209.133088][T10224] bond5: (slave gretap2): making interface the new active one [ 209.151410][T10232] xt_policy: neither incoming nor outgoing policy selected [ 209.176591][T10224] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 209.221138][T10233] nbd: must specify at least one socket [ 209.348992][T10244] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 209.493314][T10253] syzkaller1: entered promiscuous mode [ 209.536364][T10253] syzkaller1: entered allmulticast mode [ 209.584418][T10254] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 210.493935][T10314] syz_tun: entered allmulticast mode [ 210.555628][T10314] syz_tun: left allmulticast mode [ 210.789699][T10329] __nla_validate_parse: 14 callbacks suppressed [ 210.789715][T10329] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1181'. [ 210.875239][T10325] syzkaller0: entered promiscuous mode [ 210.880757][T10325] syzkaller0: entered allmulticast mode [ 210.919085][T10336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1182'. [ 210.964708][T10336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1182'. [ 211.030672][T10344] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 211.062531][T10336] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 211.068142][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 211.091129][T10336] bond6 (unregistering): Released all slaves [ 211.483450][T10365] tipc: Enabling of bearer rejected, failed to enable media [ 211.542871][T10369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1189'. [ 211.552427][T10369] tipc: Invalid UDP bearer configuration [ 211.552479][T10369] tipc: Enabling of bearer rejected, failed to enable media [ 211.740746][T10382] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1191'. [ 211.794661][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 211.815264][T10392] tipc: Enabled bearer , priority 0 [ 211.823467][T10389] netlink: 'syz.0.1195': attribute type 13 has an invalid length. [ 211.823684][T10390] syzkaller0: entered promiscuous mode [ 211.837632][T10390] syzkaller0: entered allmulticast mode [ 211.862222][T10389] netlink: 'syz.0.1195': attribute type 27 has an invalid length. [ 211.873380][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 211.884194][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 212.009951][T10394] veth0_virt_wifi: renamed from veth1_vlan [ 212.034655][T10390] tipc: Resetting bearer [ 212.050430][T10405] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1197'. [ 212.128210][T10387] tipc: Resetting bearer [ 212.251069][T10387] tipc: Disabling bearer [ 212.530737][T10432] pimreg: entered allmulticast mode [ 212.709420][T10442] netlink: 'syz.0.1205': attribute type 9 has an invalid length. [ 213.108432][T10466] netlink: 'syz.4.1211': attribute type 6 has an invalid length. [ 213.129332][T10466] netlink: 'syz.4.1211': attribute type 6 has an invalid length. [ 213.297906][T10470] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 213.329519][T10470] ipt_REJECT: TCP_RESET invalid for non-tcp [ 213.359153][T10470] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 213.600779][T10490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.645452][T10492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.725917][T10496] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 213.770074][T10496] netlink: 'syz.4.1222': attribute type 3 has an invalid length. [ 213.875769][T10496] bond4: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 214.270298][ T5494] veth0_virt_wifi: left promiscuous mode [ 214.939261][T10561] ipt_ECN: cannot use operation on non-tcp rule [ 215.013194][T10565] syzkaller1: entered promiscuous mode [ 215.041921][T10565] syzkaller1: entered allmulticast mode [ 215.150683][T10572] netlink: 'syz.4.1241': attribute type 1 has an invalid length. [ 215.216336][T10572] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 215.683015][T10599] NCSI netlink: No device for ifindex 0 [ 215.911942][T10610] __nla_validate_parse: 10 callbacks suppressed [ 215.911960][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 215.976771][ T51] block nbd0: Possible stuck request ffff8880252f0000: control (read@0,1024B). Runtime 120 seconds [ 215.987960][ T51] block nbd0: Possible stuck request ffff8880252f01c0: control (read@1024,1024B). Runtime 120 seconds [ 215.999185][ T51] block nbd0: Possible stuck request ffff8880252f0380: control (read@2048,1024B). Runtime 120 seconds [ 216.010508][ T51] block nbd0: Possible stuck request ffff8880252f0540: control (read@3072,1024B). Runtime 120 seconds [ 216.373770][T10639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.399936][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1258'. [ 216.415636][T10643] netlink: del zone limit has 4 unknown bytes [ 216.510239][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'. [ 216.647601][T10657] Cannot find set identified by id 65534 to match [ 216.671179][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 216.701972][T10658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1262'. [ 216.740818][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 216.775282][T10664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1262'. [ 216.980145][T10674] netlink: 'syz.0.1268': attribute type 10 has an invalid length. [ 216.997014][T10674] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.062718][T10674] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.070002][T10674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.110270][T10674] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 217.128958][T10677] netem: change failed [ 217.404571][T10693] syzkaller0: entered promiscuous mode [ 217.410741][T10693] syzkaller0: entered allmulticast mode [ 217.577763][ T5835] Bluetooth: hci4: link tx timeout [ 217.578374][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 217.583757][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 218.890900][T10726] IPVS: Error connecting to the multicast addr [ 218.965547][T10731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1287'. [ 219.240118][T10750] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 219.483017][T10767] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1298'. [ 219.596917][T10770] x_tables: duplicate underflow at hook 2 [ 219.657163][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 219.673805][T10777] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20003 [ 219.756546][T10782] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 219.825341][T10784] bond7: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 220.111317][T10799] tipc: Enabling of bearer rejected, media not registered [ 220.330861][T10815] netlink: 'syz.4.1313': attribute type 21 has an invalid length. [ 220.338413][T10811] gtp1: entered promiscuous mode [ 220.368439][T10811] gtp1: entered allmulticast mode [ 220.427307][T10820] netlink: 'syz.1.1315': attribute type 3 has an invalid length. [ 221.272631][T10873] openvswitch: netlink: Flow key attr not present in new flow. [ 221.314367][T10873] netlink: 'syz.4.1332': attribute type 1 has an invalid length. [ 221.337138][T10873] __nla_validate_parse: 11 callbacks suppressed [ 221.337156][T10873] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1332'. [ 221.507246][T10891] Illegal XDP return value 4294967274 on prog (id 258) dev N/A, expect packet loss! [ 222.006220][T10922] tipc: Started in network mode [ 222.024417][T10922] tipc: Node identity dace1afc6ddb, cluster identity 4711 [ 222.065598][T10922] tipc: Enabled bearer , priority 0 [ 222.078112][T10926] syzkaller0: entered promiscuous mode [ 222.085629][T10926] syzkaller0: entered allmulticast mode [ 222.098662][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 222.111862][T10922] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 222.127842][T10930] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1348'. [ 222.173522][T10922] tipc: Resetting bearer [ 222.183793][T10921] tipc: Resetting bearer [ 222.194803][T10927] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1347'. [ 222.322528][T10921] tipc: Disabling bearer [ 222.333625][T10933] netlink: 'syz.0.1350': attribute type 1 has an invalid length. [ 222.381219][T10933] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.412636][T10933] bond8: (slave geneve2): making interface the new active one [ 222.475507][T10933] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 222.497861][T10946] netlink: 'syz.4.1352': attribute type 10 has an invalid length. [ 222.524890][T10949] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1355'. [ 222.560244][T10940] lo speed is unknown, defaulting to 1000 [ 222.567796][T10933] x_tables: duplicate underflow at hook 3 [ 222.572993][T10947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1354'. [ 222.732190][T10953] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 222.894328][T10961] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.908525][T10961] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 222.963143][T10976] netlink: 'syz.0.1361': attribute type 1 has an invalid length. [ 222.977826][T10977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1356'. [ 223.160075][T10969] gretap1: entered promiscuous mode [ 223.192434][T10969] bond4: (slave gretap1): making interface the new active one [ 223.231966][T10969] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 223.268991][T10953] macvlan3: entered promiscuous mode [ 223.279636][T10953] macvlan3: entered allmulticast mode [ 223.287333][T10953] bond4: entered promiscuous mode [ 223.293682][T10953] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 223.313523][T10953] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 223.359173][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1366'. [ 223.369161][T10953] bond4: left promiscuous mode [ 223.428708][T10984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.442618][T10984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.606798][T10984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.607910][T11005] netlink: 'syz.0.1369': attribute type 1 has an invalid length. [ 223.624355][T10984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.750713][T10984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.762819][T10984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.823843][T11003] syzkaller0: entered promiscuous mode [ 223.829574][T11003] syzkaller0: entered allmulticast mode [ 223.868265][T10984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.897353][T10984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.616055][T11020] netlink: 'syz.3.1374': attribute type 1 has an invalid length. [ 225.337511][T11018] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 225.351296][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.544345][T11027] syzkaller1: entered promiscuous mode [ 225.564791][T11027] syzkaller1: entered allmulticast mode [ 225.590975][ T7151] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.609494][T11027] netlink: 'syz.0.1375': attribute type 1 has an invalid length. [ 225.610749][ T7151] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.636259][T11028] netlink: 'syz.0.1375': attribute type 1 has an invalid length. [ 225.687966][ T7151] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.707954][ T7151] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.730559][T11028] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 225.732007][T11027] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 225.800101][ T7151] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.845419][ T7151] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.212868][T11062] tipc: Enabled bearer , priority 0 [ 226.222517][T11062] syzkaller0: entered promiscuous mode [ 226.228544][T11062] syzkaller0: entered allmulticast mode [ 226.237807][T11062] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 226.274975][T11062] tipc: Resetting bearer [ 226.286359][T11061] tipc: Resetting bearer [ 226.344862][T11061] tipc: Disabling bearer [ 226.380382][T11069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1387'. [ 226.421254][T11068] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1388'. [ 226.490992][ T148] tipc: Resetting bearer [ 226.683052][T11079] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1390'. [ 226.712048][T11079] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1390'. [ 226.731835][T11079] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1390'. [ 226.791150][T11086] netlink: 'syz.2.1392': attribute type 2 has an invalid length. [ 226.803135][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1390'. [ 226.951063][T11094] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1394'. [ 226.965728][T11097] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 227.028718][T11093] veth9: entered promiscuous mode [ 227.223012][T11097] 8021q: adding VLAN 0 to HW filter on device bond9 [ 227.232726][T11108] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1396'. [ 227.250680][T11097] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 227.261261][T11097] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 227.274311][T11097] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 227.281312][T11108] ip6gretap0: left allmulticast mode [ 227.293975][ T5494] veth1_vlan: left promiscuous mode [ 227.324831][T11097] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 227.351275][T11110] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 227.359497][T11110] netlink: 'syz.3.1398': attribute type 2 has an invalid length. [ 227.607716][T11123] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1400'. [ 227.652190][T10985] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.673402][T11130] Bluetooth: MGMT ver 1.23 [ 227.705457][T10985] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.785822][T11135] netem: incorrect ge model size [ 227.791171][T11135] netem: change failed [ 227.831607][T10985] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.869874][T10985] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.902518][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 227.911684][ T30] audit: type=1800 audit(1760249263.158:4): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1406" name="memory.events" dev="tmpfs" ino=1583 res=0 errno=0 [ 228.080767][T10985] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.124023][T10985] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.147419][T11160] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 228.188646][T11160] team0: Device geneve3 is up. Set it down before adding it as a team port [ 228.452110][T11176] vlan3: entered promiscuous mode [ 228.482323][T11176] bond0: entered promiscuous mode [ 228.496624][T11176] bond_slave_0: entered promiscuous mode [ 228.509267][T11176] bond_slave_1: entered promiscuous mode [ 228.515751][T11176] geneve1: entered promiscuous mode [ 228.521262][T11176] bridge_slave_1: entered promiscuous mode [ 228.530392][T11176] bond0: (slave vlan3): Opening slave failed [ 228.964968][ T148] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.022241][ T148] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.065483][T11204] tipc: Enabled bearer , priority 0 [ 229.128846][ T148] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.141805][ T148] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.157202][T11203] tipc: Resetting bearer [ 229.197326][ T148] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.216324][ T148] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.238680][T11202] tipc: Disabling bearer [ 229.267202][ T148] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.282834][ T148] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.592084][T11235] wg1: entered promiscuous mode [ 229.611705][T11235] wg1: entered allmulticast mode [ 229.674713][T11235] SET target dimension over the limit! [ 229.759525][ T148] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.777377][ T148] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.812681][ T148] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.867527][ T148] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.215315][ T5835] Bluetooth: hci0: command tx timeout [ 231.381588][T11289] tipc: Enabled bearer , priority 0 [ 231.452319][T11289] tipc: Resetting bearer [ 231.514112][T11296] __nla_validate_parse: 12 callbacks suppressed [ 231.514129][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 231.610362][T11283] tipc: Disabling bearer [ 232.108787][T11328] bond5: ARP target 1.0.0.0 is already present [ 232.115408][T11328] bond5: option arp_ip_target: invalid value (1) [ 232.147291][T11328] bond5 (unregistering): Released all slaves [ 232.585457][T11358] validate_nla: 70 callbacks suppressed [ 232.585476][T11358] netlink: 'syz.4.1469': attribute type 12 has an invalid length. [ 232.726120][T11376] xt_cgroup: path and classid specified [ 232.743885][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'. [ 233.106622][T11399] syzkaller0: entered promiscuous mode [ 233.112137][T11399] syzkaller0: entered allmulticast mode [ 233.944709][T11424] tipc: Enabled bearer , priority 0 [ 234.161707][T11424] syzkaller0: entered promiscuous mode [ 234.211590][T11424] syzkaller0: entered allmulticast mode [ 234.236941][T11424] tipc: Resetting bearer [ 234.297053][T11423] tipc: Resetting bearer [ 234.362425][T11454] netlink: 'syz.2.1495': attribute type 1 has an invalid length. [ 235.443955][T11423] tipc: Disabling bearer [ 235.489508][T11454] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 235.492563][T11458] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 235.645283][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 235.699850][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 235.957726][T11486] ip6gre0: Master is either lo or non-ether device [ 235.961238][T11491] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1505'. [ 235.964725][T11480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1502'. [ 235.997766][T11490] tipc: Resetting bearer [ 236.166750][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 236.506465][T11520] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1514'. [ 236.533135][T11523] tipc: Enabling of bearer rejected, failed to enable media [ 236.646759][T11532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1515'. [ 236.654780][T11529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1515'. [ 237.062573][T11558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1520'. [ 237.108147][T11557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1520'. [ 237.803917][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 237.956954][T11608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1533'. [ 237.981620][T11608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1533'. [ 237.992588][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 237.998747][T11608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1533'. [ 238.015707][T11608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1533'. [ 238.024881][T11612] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 238.039964][T11612] syzkaller0: Linktype set failed because interface is up [ 238.265834][T11625] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 238.289406][T11625] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 238.318904][T11613] bond7: option xmit_hash_policy: invalid value (64) [ 238.329425][T11613] bond7 (unregistering): Released all slaves [ 238.363293][ T36] syzkaller0: tun_net_xmit 76 [ 238.379399][ T36] syzkaller0: tun_net_xmit 48 [ 238.387853][ T10] syzkaller0: tun_net_xmit 76 [ 239.913241][T11651] tipc: Enabling of bearer rejected, failed to enable media [ 239.982069][T11666] Bluetooth: MGMT ver 1.23 [ 240.148562][T11670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.178511][T11670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.490167][T11696] vlan3: entered promiscuous mode [ 240.504484][T11696] gretap0: entered promiscuous mode [ 240.562996][T11702] netlink: 'syz.3.1555': attribute type 1 has an invalid length. [ 240.599015][T11702] netlink: 'syz.3.1555': attribute type 1 has an invalid length. [ 240.833591][T11714] netlink: 'syz.3.1560': attribute type 2 has an invalid length. [ 240.842046][T11714] nbd: must specify at least one socket [ 241.088363][T11730] netlink: 'syz.3.1565': attribute type 2 has an invalid length. [ 241.107066][T11730] nbd: must specify a device to reconfigure [ 241.475790][T11761] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 241.485342][ T5846] IPVS: starting estimator thread 0... [ 241.617776][T11763] IPVS: using max 25 ests per chain, 60000 per kthread [ 241.837511][T11783] netlink: 'syz.4.1577': attribute type 1 has an invalid length. [ 242.229951][T11813] __nla_validate_parse: 75 callbacks suppressed [ 242.229969][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 242.354477][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1587'. [ 242.367151][T11817] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 242.375860][T11815] netlink: 'syz.1.1587': attribute type 11 has an invalid length. [ 242.415837][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1587'. [ 242.425151][ T6562] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.434968][ T6562] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.444886][T11815] netlink: 'syz.1.1587': attribute type 11 has an invalid length. [ 242.463908][ T6562] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.530114][ T6562] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.540742][T11826] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1589'. [ 242.562831][T11820] vlan3: entered allmulticast mode [ 242.583083][T11820] bridge0: entered allmulticast mode [ 242.606273][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 242.656562][T11824] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1590'. [ 242.684026][T11824] sctp: [Deprecated]: syz.4.1590 (pid 11824) Use of int in max_burst socket option. [ 242.684026][T11824] Use struct sctp_assoc_value instead [ 242.904316][T11841] batadv_slave_0: entered promiscuous mode [ 242.995958][T11839] batadv_slave_0: left promiscuous mode [ 243.278491][T11868] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.1604'. [ 243.288490][T11868] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 243.291128][T11869] xt_l2tp: v2 tid > 0xffff: 1114244 [ 243.596628][T11883] netlink: 'syz.2.1608': attribute type 1 has an invalid length. [ 243.618620][T11883] bond5: entered promiscuous mode [ 243.623985][T11883] 8021q: adding VLAN 0 to HW filter on device bond5 [ 243.642241][T11883] 8021q: adding VLAN 0 to HW filter on device bond5 [ 243.651064][T11883] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 243.661965][T11883] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 243.676766][T11883] bond5: (slave wireguard0): making interface the new active one [ 243.684529][T11883] wireguard0: entered promiscuous mode [ 243.690815][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 243.692419][T11883] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 243.877404][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1609'. [ 244.192097][T11905] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 244.197816][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 244.214520][T11905] bond10 (unregistering): Released all slaves [ 244.243440][T11913] batadv2: entered allmulticast mode [ 244.579684][T11934] netlink: 'syz.3.1622': attribute type 12 has an invalid length. [ 245.154464][T11950] syzkaller1: entered promiscuous mode [ 245.178925][T11950] syzkaller1: entered allmulticast mode [ 245.232399][ T10] IPVS: starting estimator thread 0... [ 245.337885][T11965] IPVS: using max 30 ests per chain, 72000 per kthread [ 245.420650][T11971] netlink: 'syz.4.1629': attribute type 39 has an invalid length. [ 245.442425][T11971] veth0_macvtap: left promiscuous mode [ 245.702947][T11979] tipc: Resetting bearer [ 245.729047][T11986] 0{X: renamed from gretap0 [ 245.743463][T11986] tipc: Disabling bearer [ 245.752379][T11986] 0{X: left promiscuous mode [ 245.761240][T11986] 0{X: entered allmulticast mode [ 245.774644][T11986] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 246.056560][ T51] block nbd0: Possible stuck request ffff8880252f0000: control (read@0,1024B). Runtime 150 seconds [ 246.067723][ T51] block nbd0: Possible stuck request ffff8880252f01c0: control (read@1024,1024B). Runtime 150 seconds [ 246.079013][ T51] block nbd0: Possible stuck request ffff8880252f0380: control (read@2048,1024B). Runtime 150 seconds [ 246.090494][ T51] block nbd0: Possible stuck request ffff8880252f0540: control (read@3072,1024B). Runtime 150 seconds [ 246.123648][T12010] netlink: 'syz.1.1641': attribute type 83 has an invalid length. [ 246.277709][T12024] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 247.471953][T12079] xt_connbytes: Forcing CT accounting to be enabled [ 247.690469][T12092] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 247.698980][T12092] __nla_validate_parse: 12 callbacks suppressed [ 247.698995][T12092] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1659'. [ 247.725379][T12092] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 248.241043][T12113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.297443][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1669'. [ 248.356113][T12113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.380540][T12120] bridge_slave_0: Caught tx_queue_len zero misconfig [ 248.409691][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 248.595918][T12113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.625616][T12113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.836594][T12113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.855780][T12113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.059807][T12113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.075887][T12113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.310083][ T6562] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.340251][ T6562] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.422607][ T148] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.445289][ T148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.495618][ T148] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.503899][ T148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.526290][ T6562] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.575403][ T6562] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.700962][T12178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1683'. [ 249.705309][T12176] veth0: entered promiscuous mode [ 249.723406][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1682'. [ 249.988988][T12178] vxcan0: entered allmulticast mode [ 250.279971][T12202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1690'. [ 250.304929][T12202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1690'. [ 250.506693][T12212] netlink: 'syz.4.1695': attribute type 18 has an invalid length. [ 250.658291][T12221] x_tables: duplicate underflow at hook 2 [ 250.802403][T12224] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 250.852114][T12224] sctp: [Deprecated]: syz.4.1699 (pid 12224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.852114][T12224] Use struct sctp_sack_info instead [ 251.072031][T12235] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1703'. [ 251.289971][T12243] : entered promiscuous mode [ 251.726332][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1712'. [ 252.030252][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 252.782261][T12329] __nla_validate_parse: 1 callbacks suppressed [ 252.782280][T12329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1732'. [ 252.804407][T12329] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1732'. [ 252.837925][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 252.874528][T12336] netlink: 'syz.1.1732': attribute type 1 has an invalid length. [ 252.882921][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1732'. [ 253.121870][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'. [ 253.501540][T12364] raw_sendmsg: syz.1.1744 forgot to set AF_INET. Fix it! [ 253.619403][T12377] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 253.635144][T12377] syzkaller0: Linktype set failed because interface is up [ 253.650873][T12377] vlan2: entered promiscuous mode [ 253.665154][T12377] bond0: entered promiscuous mode [ 253.682556][T12380] xt_l2tp: missing protocol rule (udp|l2tpip) [ 253.688434][T12377] bond0: (slave vlan2): Opening slave failed [ 253.778680][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 253.804969][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1747'. [ 253.909179][T12396] netlink: 'syz.2.1750': attribute type 10 has an invalid length. [ 254.017705][T12392] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 254.408349][T12404] netlink: 'syz.4.1752': attribute type 1 has an invalid length. [ 255.097138][T12396] veth1_macvtap: left allmulticast mode [ 255.429115][T12426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1758'. [ 255.517657][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 255.540187][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 255.634000][T12441] netlink: 'syz.3.1762': attribute type 21 has an invalid length. [ 255.780948][T12442] bond10 (unregistering): Released all slaves [ 255.853774][T12441] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 255.870493][T12441] bond4 (unregistering): Released all slaves [ 255.901587][T12450] netlink: 'syz.4.1765': attribute type 12 has an invalid length. [ 256.033691][T12466] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 257.242399][T12544] SET target dimension over the limit! [ 257.269374][T12538] netlink: 'syz.0.1789': attribute type 11 has an invalid length. [ 257.423136][T12553] netlink: 'syz.4.1793': attribute type 10 has an invalid length. [ 257.434850][T12551] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 257.451129][T12553] tipc: Disabling bearer [ 257.830086][T12570] Cannot find del_set index 4 as target [ 257.856105][T12570] __nla_validate_parse: 4 callbacks suppressed [ 257.856124][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1801'. [ 257.917570][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1801'. [ 257.938419][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1801'. [ 258.055967][ T5835] Bluetooth: hci0: command tx timeout [ 258.069935][T12579] syzkaller1: entered promiscuous mode [ 258.093085][T12579] syzkaller1: entered allmulticast mode [ 258.124802][T12587] netlink: 'syz.3.1806': attribute type 5 has an invalid length. [ 258.307497][T12600] gre1: entered promiscuous mode [ 258.314907][T12600] gre1: entered allmulticast mode [ 258.401862][T12606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1812'. [ 258.550542][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 258.617945][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 258.830457][ T5846] IPVS: starting estimator thread 0... [ 258.858571][T12642] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 258.925280][T12640] IPVS: using max 35 ests per chain, 84000 per kthread [ 258.993697][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1823'. [ 259.130418][T12656] netlink: 'syz.1.1828': attribute type 23 has an invalid length. [ 259.264641][T12661] tipc: Enabled bearer , priority 0 [ 259.322041][T12651] macsec1: entered promiscuous mode [ 259.338279][T12651] macsec1: entered allmulticast mode [ 259.362014][T12651] bond6: (slave macsec1): Error -34 calling dev_set_mtu [ 259.427493][T12660] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 259.463230][T12662] tipc: Resetting bearer [ 259.470136][T12666] batman_adv: batadv0: Adding interface: dummy0 [ 259.478004][T12666] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.545225][T12666] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 259.779177][T12687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1833'. [ 259.796863][T12690] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 259.850093][T12690] team0: Device ipvlan1 failed to register rx_handler [ 260.074863][T12711] netlink: 'syz.3.1839': attribute type 2 has an invalid length. [ 260.125808][T12711] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1839'. [ 260.176907][T12711] nbd: must specify a device to reconfigure [ 260.212103][T12722] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1843'. [ 260.306443][ T5846] tipc: Node number set to 3071613692 [ 260.317871][T12726] SET target dimension over the limit! [ 260.337320][T12727] syzkaller0: entered promiscuous mode [ 260.349178][T12727] syzkaller0: entered allmulticast mode [ 260.631965][T12749] tipc: Enabling of bearer rejected, failed to enable media [ 260.787760][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 260.888976][T12762] netlink: 'syz.1.1859': attribute type 21 has an invalid length. [ 261.278376][T12778] nbd: nbd0 already in use [ 261.289759][T12777] nbd: nbd0 already in use [ 261.646252][T12800] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 261.723381][T12804] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 261.746372][T12806] nbd: socks must be embedded in a SOCK_ITEM attr [ 261.759299][T12808] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 262.203403][T12836] sctp: [Deprecated]: syz.3.1887 (pid 12836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.203403][T12836] Use struct sctp_sack_info instead [ 263.017191][T12881] __nla_validate_parse: 18 callbacks suppressed [ 263.017211][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 263.100952][T12887] xt_hashlimit: invalid rate [ 263.210671][T12889] tap0: tun_chr_ioctl cmd 1074025676 [ 263.217508][T12889] tap0: owner set to 0 [ 263.282005][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 263.291935][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'. [ 263.614529][T12875] netlink: 'syz.3.1895': attribute type 2 has an invalid length. [ 263.623525][T12879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1895'. [ 263.732852][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 263.867526][T12904] tipc: Enabled bearer , priority 0 [ 263.876712][T12906] syzkaller0: entered promiscuous mode [ 263.882482][T12906] syzkaller0: entered allmulticast mode [ 263.908739][T12906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1904'. [ 263.979985][T12906] tipc: Resetting bearer [ 263.988789][T12901] tipc: Resetting bearer [ 264.016246][T12901] tipc: Disabling bearer [ 264.048338][T12912] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 264.311734][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 264.434857][T12940] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.1917'. [ 264.472882][T12943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.517514][T12947] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1917'. [ 264.521254][T12946] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 264.563329][T12947] geneve3: entered promiscuous mode [ 264.587112][T12947] geneve3: entered allmulticast mode [ 264.601349][T12954] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 264.632104][T12955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1920'. [ 264.743629][T12963] netlink: 'syz.1.1922': attribute type 11 has an invalid length. [ 264.869448][T12964] syzkaller1: entered promiscuous mode [ 264.885687][T12964] syzkaller1: entered allmulticast mode [ 265.285459][T12984] netlink: 'syz.3.1925': attribute type 3 has an invalid length. [ 265.320413][T12984] netlink: 'syz.3.1925': attribute type 3 has an invalid length. [ 265.628649][T12993] syzkaller0: entered promiscuous mode [ 265.654115][T12993] syzkaller0: entered allmulticast mode [ 265.722648][T13012] x_tables: duplicate underflow at hook 1 [ 267.356009][T13030] tipc: Enabling of bearer rejected, already enabled [ 267.376045][T13032] tipc: Enabling of bearer rejected, already enabled [ 267.419700][T13030] syzkaller0: entered promiscuous mode [ 267.437019][T13030] syzkaller0: entered allmulticast mode [ 267.450867][T13030] tipc: Resetting bearer [ 267.506718][T13046] netlink: 'syz.0.1940': attribute type 11 has an invalid length. [ 267.667441][T13052] tipc: Enabled bearer , priority 0 [ 267.696834][T13052] syzkaller0: entered promiscuous mode [ 267.703022][T13052] syzkaller0: entered allmulticast mode [ 267.783930][T13052] tipc: Resetting bearer [ 267.833640][T13050] tipc: Resetting bearer [ 267.884753][T13076] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 267.891302][T13076] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 267.906005][T13050] tipc: Disabling bearer [ 268.111513][T13088] tipc: Resetting bearer [ 268.224799][T13097] __nla_validate_parse: 2 callbacks suppressed [ 268.224820][T13097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1954'. [ 268.361865][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 268.394401][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1958'. [ 268.472159][T13085] tipc: Resetting bearer [ 268.576478][T13109] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.1961'. [ 268.624063][T13111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1960'. [ 268.624338][T13109] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1961'. [ 268.665965][T13117] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1962'. [ 268.742345][T13120] netlink: 'syz.0.1964': attribute type 8 has an invalid length. [ 268.788894][ T148] tipc: Resetting bearer [ 276.136818][ T51] block nbd0: Possible stuck request ffff8880252f0000: control (read@0,1024B). Runtime 180 seconds [ 276.149072][ T51] block nbd0: Possible stuck request ffff8880252f01c0: control (read@1024,1024B). Runtime 180 seconds [ 276.161071][ T51] block nbd0: Possible stuck request ffff8880252f0380: control (read@2048,1024B). Runtime 180 seconds [ 276.172341][ T51] block nbd0: Possible stuck request ffff8880252f0540: control (read@3072,1024B). Runtime 180 seconds [ 278.042665][ T5199] udevd[5199]: worker [5848] /devices/virtual/block/nbd0 timeout; kill it [ 278.052676][ T5199] udevd[5199]: seq 11955 '/devices/virtual/block/nbd0' killed [ 294.240355][T13151] netlink: 'syz.2.1974': attribute type 4 has an invalid length. [ 294.269159][T13155] net veth1_virt_wifi .: renamed from virt_wifi0 [ 294.279448][T13152] netlink: 'syz.2.1974': attribute type 10 has an invalid length. [ 294.288747][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 294.307217][T13151] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1974'. [ 294.350041][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 294.397432][T13170] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1979'. [ 294.401402][T13151] `: renamed from bond0 [ 294.576668][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'. [ 294.737833][T13181] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.759595][T13196] netlink: 'syz.4.1987': attribute type 1 has an invalid length. [ 294.869298][T13185] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.878014][T13185] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 294.891386][T13185] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 295.139255][T13213] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 295.167465][T13216] syz_tun: entered allmulticast mode [ 295.178177][T13211] syz_tun: left allmulticast mode [ 295.279413][T13220] sctp: [Deprecated]: syz.4.1993 (pid 13220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.279413][T13220] Use struct sctp_sack_info instead [ 295.313273][T13226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.344172][T13231] veth0_virt_wifi: entered promiscuous mode [ 295.357380][T13226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1997'. [ 295.379625][T13226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1997'. [ 295.609445][T13248] netlink: 'syz.4.1999': attribute type 2 has an invalid length. [ 295.692056][T13253] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2002'. [ 295.834193][T13262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2005'. [ 295.889924][T13265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2006'. [ 296.324756][T13293] pimreg15: entered allmulticast mode [ 297.206144][T13341] syzkaller0: entered promiscuous mode [ 297.228854][T13341] syzkaller0: entered allmulticast mode [ 297.285493][T13341] syzkaller0: mtu less than device minimum [ 297.537135][T13362] dvmrp0: entered allmulticast mode [ 297.672592][T13370] !'|d+: renamed from bond_slave_0 [ 297.728421][T13376] netlink: 'syz.4.2041': attribute type 1 has an invalid length. [ 297.749079][T13374] ip6gre0: Master is either lo or non-ether device [ 297.940067][T13376] tc_dump_action: action bad kind [ 298.167192][T13395] bond0 (unregistering): Released all slaves [ 298.776425][T13428] netlink: 'syz.1.2057': attribute type 4 has an invalid length. [ 299.114439][T13424] hsr_slave_0 (unregistering): left promiscuous mode [ 299.340619][T13458] netlink: 'syz.0.2062': attribute type 1 has an invalid length. [ 299.439788][T13458] 8021q: adding VLAN 0 to HW filter on device bond10 [ 299.463776][T13467] netlink: 'syz.2.2064': attribute type 2 has an invalid length. [ 299.485547][T13464] veth1: entered promiscuous mode [ 299.502737][T13464] bond10: (slave veth1): Enslaving as an active interface with a down link [ 299.516912][T13469] __nla_validate_parse: 12 callbacks suppressed [ 299.516931][T13469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2064'. [ 299.537474][T13466] tipc: Enabling of bearer rejected, already enabled [ 299.599698][T13458] bond10: entered allmulticast mode [ 299.658804][T13478] openvswitch: netlink: Tunnel attr 20 out of range max 16 [ 299.720727][T13478] netlink: 'syz.4.2067': attribute type 10 has an invalid length. [ 299.789006][T13478] bridge_slave_1: entered promiscuous mode [ 299.816528][T13478] bridge_slave_1: entered allmulticast mode [ 299.826734][T13478] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 299.861609][T13484] netlink: 'syz.2.2068': attribute type 64 has an invalid length. [ 299.870270][T13484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2068'. [ 300.087421][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'. [ 300.110783][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2071'. [ 300.134673][T13499] netlink: 'syz.2.2073': attribute type 1 has an invalid length. [ 300.147967][T13499] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2073'. [ 300.161972][T13499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2073'. [ 300.175599][T13500] netlink: 'syz.0.2072': attribute type 1 has an invalid length. [ 300.188866][T13500] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2072'. [ 300.204920][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2072'. [ 300.212956][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 300.214582][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2072'. [ 300.599431][T13515] netlink: 'syz.3.2078': attribute type 1 has an invalid length. [ 300.687541][T13524] openvswitch: netlink: Key type 112 is out of range max 32 [ 300.898048][T13539] netlink: 'syz.3.2084': attribute type 1 has an invalid length. [ 300.927112][T13539] netlink: 'syz.3.2084': attribute type 3 has an invalid length. [ 300.979337][T13539] NCSI netlink: No device for ifindex 0 [ 301.228049][T13548] xt_connbytes: Forcing CT accounting to be enabled [ 301.539690][T13566] tipc: Enabled bearer , priority 0 [ 301.547538][T13566] syzkaller0: entered promiscuous mode [ 301.553051][T13566] syzkaller0: entered allmulticast mode [ 301.607666][T13566] tipc: Resetting bearer [ 301.640755][T13565] tipc: Resetting bearer [ 301.671415][T13565] tipc: Disabling bearer [ 301.865509][T13589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.872829][T13589] IPv6: NLM_F_CREATE should be set when creating new route [ 302.264755][T13609] bridge8: entered promiscuous mode [ 302.325650][T13609] bridge8: entered allmulticast mode [ 302.402134][T13614] netlink: 'syz.2.2108': attribute type 4 has an invalid length. [ 302.670523][T13628] bond11: option resend_igmp: invalid value (32767) [ 302.678024][T13628] bond11: option resend_igmp: allowed values 0 - 255 [ 302.690307][T13628] bond11 (unregistering): Released all slaves [ 302.951376][T13641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.982512][T13642] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 303.682230][T13680] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 304.634273][T13733] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 305.033177][T13759] __nla_validate_parse: 20 callbacks suppressed [ 305.033199][T13759] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.2142'. [ 305.070137][T13759] openvswitch: netlink: Missing key (keys=40, expected=80) [ 305.132558][T13762] validate_nla: 1 callbacks suppressed [ 305.132577][T13762] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 305.161481][T13765] netlink: 'syz.2.2149': attribute type 11 has an invalid length. [ 305.168630][T13762] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 305.209218][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2148'. [ 305.445943][T13782] netlink: 'syz.4.2153': attribute type 11 has an invalid length. [ 305.454175][T13782] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2153'. [ 305.884486][T13821] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 306.215810][ T51] block nbd0: Possible stuck request ffff8880252f0000: control (read@0,1024B). Runtime 210 seconds [ 306.226965][ T51] block nbd0: Possible stuck request ffff8880252f01c0: control (read@1024,1024B). Runtime 210 seconds [ 306.238427][ T51] block nbd0: Possible stuck request ffff8880252f0380: control (read@2048,1024B). Runtime 210 seconds [ 306.249902][ T51] block nbd0: Possible stuck request ffff8880252f0540: control (read@3072,1024B). Runtime 210 seconds [ 306.264019][T13844] netlink: 'syz.0.2169': attribute type 1 has an invalid length. [ 306.403691][T13854] bond11: (slave gretap0): making interface the new active one [ 306.452179][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2173'. [ 306.463125][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2173'. [ 306.464002][T13854] bond11: (slave gretap0): Enslaving as an active interface with an up link [ 306.499084][T13859] lo speed is unknown, defaulting to 1000 [ 306.599092][T13861] tipc: Enabling of bearer rejected, already enabled [ 306.616756][T13866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2176'. [ 306.628605][T13862] tipc: Resetting bearer [ 306.787546][T13872] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 306.803503][T13875] sctp: Trying to GSO but underlying device doesn't support it. [ 306.859818][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 306.998126][T13891] lo: left allmulticast mode [ 307.006537][T13891] tunl0: left allmulticast mode [ 307.014227][T13891] gre0: left allmulticast mode [ 307.034948][T13891] gretap0: left allmulticast mode [ 307.053171][T13891] erspan0: left allmulticast mode [ 307.067910][T13891] ip_vti0: left allmulticast mode [ 307.100449][T13891] ip6_vti0: left allmulticast mode [ 307.112794][T13891] sit0: left allmulticast mode [ 307.118811][T13891] ip6tnl0: left allmulticast mode [ 307.134478][T13891] ip6gre0: left allmulticast mode [ 307.147941][T13891] team0: left allmulticast mode [ 307.163976][T13891] dummy0: left allmulticast mode [ 307.177206][T13891] nlmon0: left allmulticast mode [ 307.227815][T13891] caif0: left allmulticast mode [ 307.236194][T13891] batadv0: left allmulticast mode [ 307.241615][T13891] vxcan0: left allmulticast mode [ 307.261101][T13891] vxcan1: left allmulticast mode [ 307.274016][T13891] veth0: left allmulticast mode [ 307.287804][T13905] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2187'. [ 307.290025][T13891] veth1: left allmulticast mode [ 307.319846][T13891] wg1: left allmulticast mode [ 307.326382][T13891] wg2: left allmulticast mode [ 307.331670][T13891] veth0_to_bridge: left allmulticast mode [ 307.338197][T13891] bridge_slave_0: left allmulticast mode [ 307.344337][T13891] veth1_to_bridge: left allmulticast mode [ 307.351408][T13891] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 307.467292][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2189'. [ 307.574012][T13921] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2191'. [ 308.022040][T13937] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.048122][T13937] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.198193][T13937] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.215202][T13937] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.326090][T13937] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.336157][T13937] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.410509][T13937] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.422240][T13937] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.530783][ T148] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.542692][ T148] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.563293][ T148] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.571967][ T148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.603239][ T2974] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.613201][ T2974] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.637554][ T2974] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.647013][ T2974] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.667749][T13936] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.709471][T13936] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.801843][T13936] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.837864][T13936] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.968512][T13971] bond0: (slave bridge_slave_1): Releasing backup interface [ 308.989187][T13971] bridge_slave_1 (unregistering): left promiscuous mode [ 308.997214][T13971] bridge_slave_1 (unregistering): left allmulticast mode [ 309.032414][T13936] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.043150][T13936] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.112433][T13936] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.127148][T13936] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.240669][T13984] netlink: 'syz.1.2208': attribute type 3 has an invalid length. [ 309.681051][T14015] netlink: 'syz.3.2214': attribute type 29 has an invalid length. [ 309.690916][T14015] netlink: 'syz.3.2214': attribute type 29 has an invalid length. [ 310.230928][T14028] __nla_validate_parse: 9 callbacks suppressed [ 310.230948][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2218'. [ 310.321841][T14030] tipc: Enabling of bearer rejected, already enabled [ 310.336897][T14030] tipc: Resetting bearer [ 310.560871][T14041] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 310.661274][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 310.703014][T14051] xt_connbytes: Forcing CT accounting to be enabled [ 310.727137][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2225'. [ 310.964439][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2227'. [ 310.980884][T14062] x_tables: duplicate underflow at hook 1 [ 310.996924][T14063] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20003 [ 311.004210][T14063] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20003 [ 311.023235][T14063] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20003 [ 311.041222][T14063] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20003 [ 311.058188][T14063] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20003 [ 311.124400][T14069] xt_bpf: check failed: parse error [ 311.800783][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'. [ 311.923572][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2235'. [ 311.951869][T14094] netlink: 'syz.3.2236': attribute type 1 has an invalid length. [ 311.960206][T14094] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2236'. [ 312.056648][T14095] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2236'. [ 312.080161][T14094] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2236'. [ 312.114965][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2236'. [ 312.348349][T14113] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 313.457142][ T3000] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.480040][ T3000] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.581160][ T3000] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.616168][ T3000] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.641141][ T3000] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.650841][ T3000] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.674341][ T3000] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.698153][ T3000] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.749589][T14137] netlink: 'syz.2.2246': attribute type 7 has an invalid length. [ 314.124242][T14173] tap0: tun_chr_ioctl cmd 1074025672 [ 314.129695][T14173] tap0: ignored: set checksum disabled [ 314.380712][T14186] tipc: Resetting bearer [ 314.514228][T14192] tipc: Resetting bearer [ 314.712594][T14206] netlink: 'syz.1.2263': attribute type 4 has an invalid length. [ 314.765892][T14206] netlink: 'syz.1.2263': attribute type 83 has an invalid length. [ 314.892239][T14210] netlink: 'syz.2.2262': attribute type 1 has an invalid length. [ 314.900272][T14210] netlink: 'syz.2.2262': attribute type 4 has an invalid length. [ 315.284102][ T148] tipc: Resetting bearer [ 315.361237][T14242] __nla_validate_parse: 16 callbacks suppressed [ 315.361258][T14242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2277'. [ 315.399580][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2276'. [ 315.423875][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 315.701519][T14264] netlink: 'syz.1.2280': attribute type 1 has an invalid length. [ 315.720826][T14266] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 315.733546][T14264] netlink: 'syz.1.2280': attribute type 1 has an invalid length. [ 315.748217][T14268] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 315.768098][T14266] netlink: 'syz.0.2281': attribute type 1 has an invalid length. [ 315.783899][T14268] tipc: Can't bind to reserved service type 0 [ 315.791300][T14269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2282'. [ 315.858189][T14266] bond12: entered promiscuous mode [ 315.867924][T14266] 8021q: adding VLAN 0 to HW filter on device bond12 [ 315.885926][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 315.970891][T14276] 8021q: adding VLAN 0 to HW filter on device bond12 [ 315.988446][T14276] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 316.013236][T14276] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 316.032250][T14276] bond12: (slave wireguard0): making interface the new active one [ 316.041932][T14276] wireguard0: entered promiscuous mode [ 316.042397][T14293] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2288'. [ 316.049799][T14276] bond12: (slave wireguard0): Enslaving as an active interface with an up link [ 316.080664][T14293] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2288'. [ 316.852095][T14335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2302'. [ 316.861747][T14335] nbd: must specify at least one socket [ 317.240580][T14363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.252331][T14361] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2309'. [ 317.361023][T14367] validate_nla: 2 callbacks suppressed [ 317.361041][T14367] netlink: 'syz.1.2311': attribute type 12 has an invalid length. [ 317.402140][T14370] netlink: 'syz.0.2313': attribute type 3 has an invalid length. [ 317.417900][T14370] netlink: 'syz.0.2313': attribute type 1 has an invalid length. [ 317.729329][T14396] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2320'. [ 318.525868][T14429] team0: Port device team_slave_1 removed [ 318.712988][T14442] netlink: 'syz.3.2333': attribute type 29 has an invalid length. [ 318.731214][T14444] netlink: 'syz.3.2333': attribute type 29 has an invalid length. [ 320.906846][T14487] __nla_validate_parse: 4 callbacks suppressed [ 320.906865][T14487] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2341'. [ 320.952903][T14490] tipc: Resetting bearer [ 321.002377][T14489] tipc: Resetting bearer [ 321.218838][T14514] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 321.247823][T14511] tipc: Enabled bearer , priority 0 [ 321.258105][T14511] syzkaller0: entered promiscuous mode [ 321.280378][T14511] syzkaller0: entered allmulticast mode [ 321.340352][T14511] tipc: Resetting bearer [ 321.383025][T14509] tipc: Resetting bearer [ 321.433273][T14509] tipc: Disabling bearer [ 321.466749][T14524] netlink: 'syz.0.2351': attribute type 4 has an invalid length. [ 321.489523][T14524] netlink: 'syz.0.2351': attribute type 4 has an invalid length. [ 321.821163][ T36] tipc: Resetting bearer [ 322.047989][T14565] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2361'. [ 322.119047][T14568] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2362'. [ 322.153298][T14571] 8021q: VLANs not supported on dvmrp0 [ 322.424278][T14586] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 322.431238][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 322.485520][T14586] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 322.498053][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2368'. [ 322.500264][T14586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.530224][ T50] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.545487][T14586] veth5: entered promiscuous mode [ 322.558223][T14586] bond0: (slave veth5): Enslaving as a backup interface with a down link [ 322.579469][T14588] vlan3: entered allmulticast mode [ 322.586135][T14588] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 322.647072][ T2974] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.768846][T14593] netlink: 'syz.0.2371': attribute type 1 has an invalid length. [ 322.991142][T14605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2375'. [ 323.028089][T14605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2375'. [ 323.047118][T14606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2375'. [ 323.056574][T14605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.094585][T14606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2375'. [ 323.432797][T14634] syz.0.2385: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 323.484930][T14634] CPU: 0 UID: 0 PID: 14634 Comm: syz.0.2385 Not tainted syzkaller #0 PREEMPT(full) [ 323.484959][T14634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.484987][T14634] Call Trace: [ 323.484995][T14634] [ 323.485008][T14634] dump_stack_lvl+0x189/0x250 [ 323.485038][T14634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.485056][T14634] ? __pfx__printk+0x10/0x10 [ 323.485076][T14634] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 323.485108][T14634] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 323.485135][T14634] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 323.485163][T14634] warn_alloc+0x214/0x310 [ 323.485192][T14634] ? stack_depot_save_flags+0x40/0x860 [ 323.485223][T14634] ? __pfx_warn_alloc+0x10/0x10 [ 323.485251][T14634] ? kasan_save_track+0x3e/0x80 [ 323.485277][T14634] ? __kasan_kmalloc+0x93/0xb0 [ 323.485305][T14634] ? xsk_setsockopt+0x4dc/0x8d0 [ 323.485324][T14634] ? do_sock_setsockopt+0x179/0x1b0 [ 323.485345][T14634] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 323.485364][T14634] ? do_syscall_64+0xfa/0xfa0 [ 323.485384][T14634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.485411][T14634] __vmalloc_node_range_noprof+0x125/0x12d0 [ 323.485471][T14634] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 323.485500][T14634] ? __kasan_kmalloc+0x93/0xb0 [ 323.485531][T14634] vmalloc_user_noprof+0xad/0xf0 [ 323.485558][T14634] ? xskq_create+0xbf/0x170 [ 323.485579][T14634] xskq_create+0xbf/0x170 [ 323.485603][T14634] xsk_init_queue+0xb0/0x110 [ 323.485627][T14634] xsk_setsockopt+0x4dc/0x8d0 [ 323.485650][T14634] ? __pfx_xsk_setsockopt+0x10/0x10 [ 323.485673][T14634] ? __pfx_aa_sk_perm+0x10/0x10 [ 323.485707][T14634] ? aa_sock_opt_perm+0xff/0x1b0 [ 323.485736][T14634] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 323.485755][T14634] ? __pfx_xsk_setsockopt+0x10/0x10 [ 323.485777][T14634] do_sock_setsockopt+0x179/0x1b0 [ 323.485804][T14634] __x64_sys_setsockopt+0x13f/0x1b0 [ 323.485833][T14634] do_syscall_64+0xfa/0xfa0 [ 323.485855][T14634] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.485878][T14634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.485897][T14634] ? clear_bhb_loop+0x60/0xb0 [ 323.485921][T14634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.485938][T14634] RIP: 0033:0x7f891458eec9 [ 323.485965][T14634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.485983][T14634] RSP: 002b:00007f8915370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.486005][T14634] RAX: ffffffffffffffda RBX: 00007f89147e5fa0 RCX: 00007f891458eec9 [ 323.486020][T14634] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 323.486031][T14634] RBP: 00007f8914611f91 R08: 0000000000000004 R09: 0000000000000000 [ 323.486043][T14634] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.486055][T14634] R13: 00007f89147e6038 R14: 00007f89147e5fa0 R15: 00007ffe8766c738 [ 323.486090][T14634] [ 323.783882][T14634] Mem-Info: [ 323.798008][T14634] active_anon:6076 inactive_anon:0 isolated_anon:0 [ 323.798008][T14634] active_file:2761 inactive_file:39950 isolated_file:0 [ 323.798008][T14634] unevictable:768 dirty:85 writeback:0 [ 323.798008][T14634] slab_reclaimable:11608 slab_unreclaimable:105660 [ 323.798008][T14634] mapped:29323 shmem:1367 pagetables:1226 [ 323.798008][T14634] sec_pagetables:0 bounce:0 [ 323.798008][T14634] kernel_misc_reclaimable:0 [ 323.798008][T14634] free:1318433 free_pcp:14395 free_cma:0 [ 323.856094][T14634] Node 0 active_anon:24392kB inactive_anon:0kB active_file:11044kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117392kB dirty:340kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13392kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 323.901677][T14634] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 323.933790][T14634] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.973704][T14634] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 323.982841][T14634] Node 0 DMA32 free:1359152kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24292kB inactive_anon:0kB active_file:11044kB inactive_file:159592kB unevictable:1536kB writepending:340kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:40544kB local_pcp:21300kB free_cma:0kB [ 323.995654][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2389'. [ 324.018229][T14634] lowmem_reserve[]: 0 0 1 1 1 [ 324.018582][T14634] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 324.018643][T14634] lowmem_reserve[]: 0 0 0 0 0 [ 324.018684][T14634] Node 1 Normal free:3899348kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17680kB local_pcp:10864kB free_cma:0kB [ 324.100775][T14634] lowmem_reserve[]: 0 0 0 0 0 [ 324.106154][T14634] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 324.120697][T14634] Node 0 DMA32: 1302*4kB (UM) 435*8kB (UME) 484*16kB (UM) 594*32kB (UM) 40*64kB (UM) 30*128kB (UM) 16*256kB (UM) 7*512kB (UM) 13*1024kB (UM) 5*2048kB (UM) 314*4096kB (M) = 1359216kB [ 324.145380][T14643] netlink: 'syz.1.2388': attribute type 7 has an invalid length. [ 324.153274][T14643] netlink: 'syz.1.2388': attribute type 8 has an invalid length. [ 324.161382][T14634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 324.174946][T14634] Node 1 Normal: 149*4kB (UM) 36*8kB (UME) 30*16kB (UME) 126*32kB (UME) 23*64kB (UME) 4*128kB (UME) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 949*4096kB (ME) = 3899348kB [ 324.194391][T14634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.230988][T14634] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.251852][T14634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.305211][T14634] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.322153][T14660] netlink: 'syz.3.2392': attribute type 32 has an invalid length. [ 324.333788][T14634] 44074 total pagecache pages [ 324.356000][T14634] 0 pages in swap cache [ 324.365192][T14634] Free swap = 124996kB [ 324.369432][T14634] Total swap = 124996kB [ 324.374115][T14634] 2097051 pages RAM [ 324.384245][T14634] 0 pages HighMem/MovableOnly [ 324.390004][T14634] 424543 pages reserved [ 324.407112][T14634] 0 pages cma reserved [ 324.511298][T14666] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.190569][T14713] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 325.244587][T14713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.273980][T14717] netem: unknown loss type 0 [ 325.281057][T14717] netem: change failed [ 325.319981][T14713] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 325.402094][T14726] netlink: 'syz.1.2409': attribute type 1 has an invalid length. [ 325.517819][T14726] bond8 (unregistering): Released all slaves [ 325.972918][T14761] netlink: 'syz.4.2422': attribute type 1 has an invalid length. [ 325.981928][T14761] netlink: 'syz.4.2422': attribute type 1 has an invalid length. [ 325.999568][T14761] xt_hashlimit: overflow, try lower: 3/0 [ 326.187488][T14773] __nla_validate_parse: 10 callbacks suppressed [ 326.187508][T14773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2425'. [ 326.561743][T14800] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2434'. [ 326.904088][T14822] : entered promiscuous mode [ 327.078218][ T5835] Bluetooth: hci4: link tx timeout [ 327.083525][ T5835] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 327.092780][ T5838] Bluetooth: hci4: link tx timeout [ 327.098414][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 327.106621][ T5838] Bluetooth: hci4: link tx timeout [ 327.111893][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 327.114869][T14833] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 327.119953][ T5838] Bluetooth: hci4: link tx timeout [ 327.120010][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 327.142934][ T5838] Bluetooth: hci4: link tx timeout [ 327.149136][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 327.157292][ T5838] Bluetooth: hci4: link tx timeout [ 327.162679][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 327.471951][T14856] [ 327.474336][T14856] ====================================================== [ 327.482243][T14856] WARNING: possible circular locking dependency detected [ 327.489818][T14856] syzkaller #0 Not tainted [ 327.494254][T14856] ------------------------------------------------------ [ 327.501497][T14856] syz.3.2452/14856 is trying to acquire lock: [ 327.507751][T14856] ffffffff8f639558 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 327.517886][T14856] [ 327.517886][T14856] but task is already holding lock: [ 327.525699][T14856] ffff888146684c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 327.535745][T14856] [ 327.535745][T14856] which lock already depends on the new lock. [ 327.535745][T14856] [ 327.546445][T14856] [ 327.546445][T14856] the existing dependency chain (in reverse order) is: [ 327.555466][T14856] [ 327.555466][T14856] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 327.563463][T14856] lock_acquire+0x120/0x360 [ 327.568484][T14856] _raw_spin_lock_bh+0x36/0x50 [ 327.573755][T14856] nr_rt_device_down+0x12a/0x720 [ 327.579303][T14856] nr_device_event+0x137/0x150 [ 327.584602][T14856] notifier_call_chain+0x1b6/0x3e0 [ 327.590229][T14856] __dev_notify_flags+0x18d/0x2e0 [ 327.595855][T14856] netif_change_flags+0xe8/0x1a0 [ 327.601306][T14856] dev_change_flags+0x130/0x260 [ 327.606954][T14856] dev_ioctl+0x7b4/0x1150 [ 327.611965][T14856] sock_do_ioctl+0x22c/0x300 [ 327.617522][T14856] sock_ioctl+0x576/0x790 [ 327.622451][T14856] __se_sys_ioctl+0xfc/0x170 [ 327.627555][T14856] do_syscall_64+0xfa/0xfa0 [ 327.632575][T14856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.639067][T14856] [ 327.639067][T14856] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 327.647419][T14856] lock_acquire+0x120/0x360 [ 327.652435][T14856] _raw_spin_lock_bh+0x36/0x50 [ 327.657895][T14856] nr_rt_device_down+0xa9/0x720 [ 327.663286][T14856] nr_device_event+0x137/0x150 [ 327.668583][T14856] notifier_call_chain+0x1b6/0x3e0 [ 327.674226][T14856] __dev_notify_flags+0x18d/0x2e0 [ 327.680475][T14856] netif_change_flags+0xe8/0x1a0 [ 327.686550][T14856] dev_change_flags+0x130/0x260 [ 327.691999][T14856] dev_ioctl+0x7b4/0x1150 [ 327.696927][T14856] sock_do_ioctl+0x22c/0x300 [ 327.702035][T14856] sock_ioctl+0x576/0x790 [ 327.706877][T14856] __se_sys_ioctl+0xfc/0x170 [ 327.711981][T14856] do_syscall_64+0xfa/0xfa0 [ 327.716999][T14856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.723509][T14856] [ 327.723509][T14856] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 327.731412][T14856] validate_chain+0xb9b/0x2140 [ 327.736686][T14856] __lock_acquire+0xab9/0xd20 [ 327.741975][T14856] lock_acquire+0x120/0x360 [ 327.747023][T14856] _raw_spin_lock_bh+0x36/0x50 [ 327.752307][T14856] nr_rt_ioctl+0x390/0xd50 [ 327.757245][T14856] sock_do_ioctl+0xd9/0x300 [ 327.762290][T14856] sock_ioctl+0x576/0x790 [ 327.767132][T14856] __se_sys_ioctl+0xfc/0x170 [ 327.772234][T14856] do_syscall_64+0xfa/0xfa0 [ 327.777252][T14856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.783650][T14856] [ 327.783650][T14856] other info that might help us debug this: [ 327.783650][T14856] [ 327.793945][T14856] Chain exists of: [ 327.793945][T14856] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 327.793945][T14856] [ 327.807856][T14856] Possible unsafe locking scenario: [ 327.807856][T14856] [ 327.815333][T14856] CPU0 CPU1 [ 327.820704][T14856] ---- ---- [ 327.826067][T14856] lock(&nr_node->node_lock); [ 327.830850][T14856] lock(nr_node_list_lock); [ 327.838643][T14856] lock(&nr_node->node_lock); [ 327.845916][T14856] lock(nr_neigh_list_lock); [ 327.850587][T14856] [ 327.850587][T14856] *** DEADLOCK *** [ 327.850587][T14856] [ 327.858865][T14856] 2 locks held by syz.3.2452/14856: [ 327.864066][T14856] #0: ffffffff8f6395b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 327.873580][T14856] #1: ffff888146684c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 327.883281][T14856] [ 327.883281][T14856] stack backtrace: [ 327.889173][T14856] CPU: 1 UID: 0 PID: 14856 Comm: syz.3.2452 Not tainted syzkaller #0 PREEMPT(full) [ 327.889195][T14856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.889205][T14856] Call Trace: [ 327.889217][T14856] [ 327.889226][T14856] dump_stack_lvl+0x189/0x250 [ 327.889256][T14856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.889273][T14856] ? __pfx__printk+0x10/0x10 [ 327.889288][T14856] ? stack_trace_save+0x9c/0xe0 [ 327.889316][T14856] print_circular_bug+0x2ee/0x310 [ 327.889339][T14856] check_noncircular+0x134/0x160 [ 327.889361][T14856] validate_chain+0xb9b/0x2140 [ 327.889390][T14856] __lock_acquire+0xab9/0xd20 [ 327.889408][T14856] ? nr_rt_ioctl+0x390/0xd50 [ 327.889424][T14856] lock_acquire+0x120/0x360 [ 327.889439][T14856] ? nr_rt_ioctl+0x390/0xd50 [ 327.889457][T14856] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 327.889480][T14856] ? nr_rt_ioctl+0x390/0xd50 [ 327.889496][T14856] _raw_spin_lock_bh+0x36/0x50 [ 327.889515][T14856] ? nr_rt_ioctl+0x390/0xd50 [ 327.889531][T14856] nr_rt_ioctl+0x390/0xd50 [ 327.889553][T14856] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 327.889568][T14856] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.889592][T14856] ? apparmor_capable+0x137/0x1b0 [ 327.889612][T14856] ? capable+0x89/0xe0 [ 327.889630][T14856] ? nr_ioctl+0x1b1/0x3b0 [ 327.889655][T14856] sock_do_ioctl+0xd9/0x300 [ 327.889680][T14856] ? __pfx_sock_do_ioctl+0x10/0x10 [ 327.889708][T14856] sock_ioctl+0x576/0x790 [ 327.889730][T14856] ? __pfx_sock_ioctl+0x10/0x10 [ 327.889752][T14856] ? __fget_files+0x3a0/0x420 [ 327.889767][T14856] ? __fget_files+0x2a/0x420 [ 327.889782][T14856] ? bpf_lsm_file_ioctl+0x9/0x20 [ 327.889801][T14856] ? __pfx_sock_ioctl+0x10/0x10 [ 327.889821][T14856] __se_sys_ioctl+0xfc/0x170 [ 327.889842][T14856] do_syscall_64+0xfa/0xfa0 [ 327.889862][T14856] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.889880][T14856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.889897][T14856] ? clear_bhb_loop+0x60/0xb0 [ 327.889915][T14856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.889931][T14856] RIP: 0033:0x7f4be7f8eec9 [ 327.889950][T14856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.889965][T14856] RSP: 002b:00007f4be8d71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.889983][T14856] RAX: ffffffffffffffda RBX: 00007f4be81e5fa0 RCX: 00007f4be7f8eec9 [ 327.889996][T14856] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 327.890006][T14856] RBP: 00007f4be8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 327.890017][T14856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.890026][T14856] R13: 00007f4be81e6038 R14: 00007f4be81e5fa0 R15: 00007ffc27222288 [ 327.890047][T14856] [ 327.902205][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2453'. [ 328.172372][T14868] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2453'. [ 329.095591][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 336.295636][ T51] block nbd0: Possible stuck request ffff8880252f0000: control (read@0,1024B). Runtime 240 seconds [ 336.306469][ T51] block nbd0: Possible stuck request ffff8880252f01c0: control (read@1024,1024B). Runtime 240 seconds [ 336.317681][ T51] block nbd0: Possible stuck request ffff8880252f0380: control (read@2048,1024B). Runtime 240 seconds [ 336.328787][ T51] block nbd0: Possible stuck request ffff8880252f0540: control (read@3072,1024B). Runtime 240 seconds