last executing test programs: 2m33.178440239s ago: executing program 0 (id=1627): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) close(r2) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r4, @ANYRESHEX=r3], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2m32.99733489s ago: executing program 0 (id=1632): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {0x0}, {&(0x7f0000003bc0)=""/4100, 0x1004}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0xb}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x6, 0x4022, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000001840)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x560a, 0x401, {{0x13, 0x4, 0x1, 0x7, 0x4c, 0x66, 0x0, 0x6d, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101, {[@noop, @ssrr={0x89, 0xf, 0xc4, [@multicast2, @broadcast, @rand_addr=0x64010101]}, @lsrr={0x83, 0x27, 0xcb, [@loopback, @broadcast, @multicast2, @remote, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) 2m32.457698839s ago: executing program 0 (id=1640): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022000cb", @ANYRES32=r3, @ANYBLOB="08000400640101020800080000010000080002007f00000108000200ffffffff080001e4ab1414430800090003"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {0xffff, 0xd}, {0xb, 0x7}}, [{0x8, 0xb, 0xcb}, {0x8, 0xb, 0xa5}, {0x8, 0xb, 0x2}]}, 0x3c}}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x4c, 0x48, 0x20, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x1f, 0x0, r3, 0xfffffffa}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040090}, 0x4044000) 2m32.28554897s ago: executing program 0 (id=1644): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}}, 0x0) 2m32.065281134s ago: executing program 0 (id=1648): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x1, r8, 0x0, r9}, 0x60) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x50}}, 0x0) 2m31.826057767s ago: executing program 0 (id=1653): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xffffff14}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xffffff4e}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40884) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r3, 0x8d52e7128bb80e97, 0x70bd28, 0x25ffdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20080c0}, 0x2000c000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m31.386359047s ago: executing program 32 (id=1653): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xffffff14}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xffffff4e}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40884) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r3, 0x8d52e7128bb80e97, 0x70bd28, 0x25ffdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20080c0}, 0x2000c000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.50152484s ago: executing program 1 (id=2119): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@restrict, @fwd={0x2, 0x0, 0x0, 0x12}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x48}, 0x20) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000380)='-', 0x1}], 0x1) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1d, 0x0, &(0x7f0000000300)="ffbf53f2081e87f89b60160b08ff7f5dd0d95e81c0fb0be857de4e56fe", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) 2.869724287s ago: executing program 2 (id=2129): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r4, 0xff02, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'gretap0\x00', 0x8000}) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0x4, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000240)={r9, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) 2.706931851s ago: executing program 1 (id=2132): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1, @none}, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071187f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x5) 2.251864754s ago: executing program 1 (id=2136): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "416643c46427168209669d736b27af61"}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r4, 0x0, {0x0, 0xf0, 0x3}, 0xff}, 0x18, &(0x7f0000000500)={&(0x7f0000000080)="df88139e", 0x4}, 0x1, 0x0, 0x0, 0x48045}, 0x840) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000100)={0xa, 0x6}, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500030000000c0016"], 0x38}}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x7ff, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, 0x0) 2.100259181s ago: executing program 5 (id=2138): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000000ff"], 0x20) r2 = socket(0x2, 0x3, 0x40) setsockopt(r2, 0xff, 0x1, 0x0, 0x0) (async) setsockopt(r2, 0xff, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41028}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41028}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x803, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x2}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffe8e, &(0x7f0000000240)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25dfdbf8, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x2, 0x3, {@in6_addr=@private2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x640}, 0x0) 2.081813799s ago: executing program 4 (id=2139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c0002801e000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a300000000009000200737d7a3200000000cc000000030a05000000000000000000020000010900010073797a30000000000b00070066696c74657200000900030073797a320000000008000540ffff0400410008800c00024000000000000004840c00014000000000000000050c00014000000000000000000c0001400000000000000f8c0c0002400000000000000081440004803400030073797a6b616c6c65723100"], 0x174}}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x90, &(0x7f0000000000)={0x11, 0x1, r6, 0x1, 0x70}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910857c2725dd5795f705a444b9d4308000000000000081c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "62fbd100", "03200332f9fa4952a9485e5aa3252300", "b050d136", "e30b166ac163d6e1"}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r13, 0x0, r12, 0x0, 0xffffffffffff8000, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x701, 0x70bd2a, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x10004891}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r14) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="000afeffffff00000000010000001c0007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c0005001f193c99a8772efb4c0007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r13, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r10, @ANYBLOB], 0x88}}, 0x20000000) 1.949475732s ago: executing program 3 (id=2140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r1, 0x0, 0x417}, 0x18) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c00040000001500000000e7050005000a000200050001000700000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.869060754s ago: executing program 1 (id=2141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x6, 0x8, 0x39e4, 0x107, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x281181a4, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x4a, &(0x7f00000000c0)=""/74, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x9, 0xb81, 0x45e}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000001c0)=[r0, r0, r0], &(0x7f0000000200)=[{0x1, 0x2, 0x0, 0x3}, {0x4, 0x3, 0x3, 0x6}, {0x2, 0x3, 0xb, 0x4}, {0x1, 0x2, 0x7, 0x5}, {0x4, 0x1, 0x10, 0xc}, {0x5, 0x8, 0x6, 0x6}, {0x1, 0x1, 0x9, 0x1}, {0x0, 0x4, 0x8, 0x7}, {0x2, 0x3, 0x3, 0xc}]}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r1, r0}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) write$cgroup_subtree(r3, 0x0, 0x4d) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1a8, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x13c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+\xea\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-g]$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, '(@\'(^*&[&(\'\x13]:.&)/,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0x82, 0x5, "da4f29f0190b554c19976d9aaaf2c6cd22e83410c5e7ae6c075278ce8478ec60182c89b0910bb0e7b04b4497440bcb20ffe867704e4db88bd8e567f2be61458986ff4ce4b448cfe4781230915c1c4804d6f93bb64bcd2994276516bab76ae4fd29953ff638aed6a4005671236a7ce612043e5d15874aae7a44d04810a1cd"}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040) 1.830419876s ago: executing program 2 (id=2142): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6f4574be7f000000ff0000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c000040"], 0x44}}, 0x0) 1.66936203s ago: executing program 1 (id=2143): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@restrict, @fwd={0x2, 0x0, 0x0, 0x12}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x48}, 0x20) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 1.668563943s ago: executing program 2 (id=2144): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xffff}}}, 0x24}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f00000001c0)=0x10, 0x4) r7 = accept(r4, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000003c0)=0x80) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1cc, r8, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2aadeae3c2e741bd}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x200000b5}, 0x4060000) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b28f735d409e000c4ec39680bb83a1ff3b8bb89d3ca2d6a6eb048bc04d05dd3c86044ddb45dd04fef408e509000000000000003aa15360bbc495bceab686ac38b9446bbab071b5ea65ac6ea828"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000940)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000080)={r14, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0xf, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f00000000c0)=""/227, 0x2a, 0xe3, 0x0, 0x8000}, 0x28) r16 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r16, 0x891d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, r15}, 0x94) 1.667705524s ago: executing program 3 (id=2145): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0, 0x300}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000003bc0)=""/4100, 0x1004}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0xb}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x6, 0x4022, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000001840)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x560a, 0x401, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x66, 0x0, 0x6d, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101}}}}) 1.593262575s ago: executing program 5 (id=2146): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000606010200000000000000000500000105000800070000000900020073797ad8a549be571735e93dd647ead73000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) 1.393446445s ago: executing program 2 (id=2147): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r5 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="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", 0x132}, {&(0x7f0000000d80)="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", 0x34f}], 0x2, 0x0, 0x0, 0x488c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000680), 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf001}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r11, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r8, 0x0, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x40}}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010004000000000000000100000008000200030000000800010003000000"], 0x24}}, 0x0) 1.293263209s ago: executing program 5 (id=2148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xd, 0x9, 0x5, 0x7, 0x0, 0xd, 0x25dfdbff, [@sadb_address={0x5, 0x5, 0x3c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x32, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}}]}, 0x38}}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000130058c8000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000d05000000000014178d71e4001a8010000480", @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r1], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delqdisc={0x3c, 0x25, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0x6}, {0xfff1, 0xd}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket(0x25, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x20, 0x0, 0x0, 0x0, 0x1, 0x2c, 0x9, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}}]}, 0x8c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r12, 0x100}, 0x8) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r13, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r13, 0x0) 1.292703723s ago: executing program 3 (id=2149): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x200000}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x3501, 0x4, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000)=0x3, 0x4) 1.183402138s ago: executing program 3 (id=2150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r3}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)=r5}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x300, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev}}}}}}, 0x0) r6 = socket(0x22, 0x2, 0x4) bind$bt_hci(r6, &(0x7f00000001c0)={0x22, 0x4, 0x4}, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x8080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pwrite64(r9, &(0x7f0000000080)="95b09fd514fff2fae09244da9f39ab2436717574f2b2acb7babb909cda237f4da91c965d529173bddf01efd202d85bae52c1f8dee4745786d62e709cac94a656135e32ab713662144036c3723109ebf04dc8a80df75aa2cf41205fc8d3ffcb6ad688de20bd6da011104c2753c4dac654ae17fbc84568a800d9dcdf42cff4c600b1c1a7ae1e83b6058f964a05b0b161fd2c97b9a0749428f9b8b1c0fe8393bc0d32577dba1c509b3ef1b37b3edabc695d346608806f305942d2f1ca24b7ecdf14d5e32c11523f4ee681e027893598eedeefe2584a397f4dabd75bf4599c8cb1eb23a06ac5275b", 0xe6, 0xfe62) sendmsg$nl_crypto(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000325bd7000fedbdf2500000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000040}, 0x10000005) 1.086853418s ago: executing program 4 (id=2151): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e9, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = socket(0x1d, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x6000c091) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) 1.058662067s ago: executing program 5 (id=2152): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000080)='./file0\x00', r1, 0x4000, r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xe}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000014c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x1000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "44cb6d37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb", "529ce0c19fb809804c2ff3c5412218a7d847fbc93cfef70c00506d947ea54e7f53d1fdc46c7f32f5461c69dbb12ae334", "93789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a5", {"2e5da89a0ace8edabc766b388285d39f", "375c5bef000000000d4600"}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa55742722f2d891fcf50e9d9ba8c18740091e294f5e3f6919d2e8a39d6119fbbbca9d0a4fe148f638347e08636ba40af31364908adfd64cafc4f7275fce536a74435dced0929185cb17ff57535ea870a2c0b60fcbf5c929988527d6c39b38e250e3af4a548f228bb66cd2ef0b591cf5da93825149d1a981f2bab3882c5b390aa251aa5c81ea7e1ab578306ec55ed304fb348d866586e62ad91d210f5c3df337b0ad85f7505ece06e1317d2d70bd3f24cf881d1a7f08249f3575d8e2729e72fc73c3c6a9107557d4d73c6a16098fad638dd05006ac2496ff16198b05b4eb885824518b5ebe1c5279595486b387fca4d682a8ae38bed86da508891ffb168899ace398b787f37b3a0390059d733be5fd0"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x5e, 0xffffffffffffffff, 0x41100, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x10, 0x100}, 0x94) bind$bt_l2cap(r4, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) 1.027958855s ago: executing program 1 (id=2153): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c59028800ffff0001000000000028213ee20600d4ff4affff00c7e5ed5e00000000000000000000eaf60d", 0x39}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0xc094}, 0x4800) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) close(0x3) 869.406103ms ago: executing program 2 (id=2154): syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000008864"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff004}, {{0x0, 0x0, 0x0, 0x53}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000004e40)=""/4111, 0x100f}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/147, 0x93}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4078, 0xff5}, {&(0x7f0000000240)=""/96, 0x70}, {&(0x7f0000000500)=""/106, 0x6a}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 766.283604ms ago: executing program 5 (id=2155): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r2, 0x1) 745.3253ms ago: executing program 3 (id=2156): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) 677.880436ms ago: executing program 4 (id=2157): r0 = socket(0xf, 0x1, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000180)=0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}}, 0x20000080) 453.4035ms ago: executing program 4 (id=2158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) r3 = epoll_create(0x7) epoll_pwait(r3, &(0x7f0000000380)=[{}], 0x1, 0x3f38, &(0x7f00000002c0), 0x8) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async, rerun: 32) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 452.420066ms ago: executing program 5 (id=2159): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r3, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r11, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x16}]]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r8, 0x34da2000) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x20088884}, 0x48010) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 450.868505ms ago: executing program 3 (id=2160): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="1823010064220200"], 0x20}}, 0x8004) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r5) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2004010d}, 0x4004000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r6) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f00000000c0)) (async) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 340.018737ms ago: executing program 2 (id=2161): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000003bc0)=""/4100, 0x1004}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0xb}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x7}], 0x9, 0x4022, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffe}]}, 0x48}}, 0x20000000) 199.15501ms ago: executing program 4 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20, 0x50}, 0x40880) r4 = gettid() (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) (async) r7 = socket$phonet(0x23, 0x2, 0x1) r8 = socket$netlink(0x10, 0x3, 0xc) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9}}}], 0x20, 0x50}, 0x40880) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x3ec, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x58, 0xb1, 0x0, 0x1, [@nested={0x10, 0xc0, 0x0, 0x1, [@nested={0x4, 0x128}, @typed={0x7, 0x37, 0x0, 0x0, @str='%\xef\x00'}]}, @nested={0x42, 0x79, 0x0, 0x1, [@generic="dc8618a7295f6c1256af1383bc75fd8390059fe30580b1395c0a7edac852258117690beb8bfd299921aed090dd6f", @generic="d1fecef02e6b8b47e603dc96", @nested={0x4, 0x134}]}]}, @nested={0x370, 0x1, 0x0, 0x1, [@nested={0x36b, 0x66, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @uid=r3}, @generic="a444ed1f90d110a05634176b18c56646bcf26591a95fdee462a6420aff4fa9540a34d3fbb2738722b4eb281380afea824f216d4dac47026de8d1e5b1a8b6626d14ea52f7bc76893d4580fc8831747d0675cbe5f2d8a65816cd54f24df40ae3b2514447bfe62f730da16b72c194098914ce1bf29c48065a6143184ac0154bfbda2e2cb605d7521264b08ed52265af73a17df9de1078a6098162f9846cf44caf75bb128eff8169cfdfed539ad2194fc416208db4c73604e5336864770eba3f34ab5773ce09a02e65a439ed8564", @typed={0x8, 0x11a, 0x0, 0x0, @pid=r4}, @nested={0xde, 0xe1, 0x0, 0x1, [@nested={0x4, 0x90}, @generic, @nested={0x4, 0x28}, @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x13f, 0x0, 0x0, @u32=0x3}, @generic="d84068076867f792431ae85e7685b5e48b54bb8cfd84a0dacbc4f84a8ec34695810536bc3b848d76fdf5cd5ba31b8d8f89bb62fc32a2d9f286f876003d95a472b8f914dee405bd268d9559583c47e83e5c5363abd13074fc7f6c73ca0d741301997b41c416c311718aa961cb60c8f9f4ce0e3436960cca7078bfca8426ea0fde57db0aea67752e05870c614dbd09e68551279114332c04f2c04d439958ba8e16125f31282dff3cd38f75", @nested={0x4, 0x4a}]}, @nested={0x34, 0x6d, 0x0, 0x1, [@typed={0x14, 0x54, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0xa3, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x42, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x2d, 0x0, 0x0, @str='#@:\x00'}, @nested={0x4, 0xc0}]}, @generic="d57e0656c685e189d3f71649062088b75ddc37222579e4ac79c73ad337ca072aa157568e15b13da78a0fb352c374d51ae44ee9dda6e0a0cbfa908cbb1f93a17fac4ff8bd717ca1d3603403a4f103f43758bce61b6c1867d033120bcef423db", @typed={0x8, 0x104, 0x0, 0x0, @uid=r9}, @typed={0xc, 0xe6, 0x0, 0x0, @u64=0x8000}, @generic="bf0d26deba0aa37ee6df8b9eb593e1db05a5b571d827347eca24571179816827e88f322e5c28f845ca5d620e23843de5b743d3007c03dca4569d27681e94e1061160e8e93d640378", @generic="5c3889fbd64cec5a6e301992dde09f21eb1e15a849f20c4537a499fab41cd6103684b164b097b3c6c1ac34cfc89a86e4f66cdbf21f7646a295bd72889e96b2c29b9da470e230acfa85faf8e0ba39007a2930086ad3f1351b2d9fc61f953393178a3913ed6b45fa40e236c72266475d1ef322b08b6f651d0c495d4aa7143b92bfc1fad1ae8127a4cb868fda90de7655dc6fda10926f1d0a7bd90a7f462a1e4b536ec24a04feaa3ee36b1b3c161b6d71954677cf075c2d3622e651f1cc"]}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x3ec}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 0s ago: executing program 4 (id=2163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x68, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4073, 0xff0, 0x1, 0x0}, &(0x7f0000000140)=0x53) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) (async, rerun: 64) pwritev(r4, &(0x7f0000000740)=[{&(0x7f0000002600)="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", 0x1000}, {&(0x7f00000000c0)="0ceead45880b5c793b05b8572d088fc0b87abb5c557493037e8eb6051f85e853ac15", 0x22}, {&(0x7f0000000440)="11f642306a88f2eb5aa4b686c1a73dc5fd41e20f090178df4bdef0116aee58d99244bc8fab86a74bc7a895c9fba1133ef0c7c00d94a6682272c5949706dd061e03a70f8e90ba234ac55e36c5921cb91960373f524cc6f925beb2c0e58a49", 0x5e}, {&(0x7f0000000180)="2379b817aa6c5d69f9d55d15c98610288557a1f79e647f701c32f3a6f6b737d53b623bf92837c00b2edc62d67095e75ca51a6801", 0x34}, {&(0x7f0000000580)="242e74072e3858524cbd88c5b9c28dd030214f0b36180f88a691b7e16d516017c87a711f2976ecd802dfac97669976198b193ae541dabaa2409656e356fd677b5b1d5a432472ddb532ecd83e606a5892af0e40b9f3b813ab1ddc64eaaf073ecd41618f18ef05b39cdad791b11b308cf8d843cca1169e6182d40a887dfa154f08c10ad57e9b69f09b6c72f9129a840c0bb22af6da9f0c0185a9281ae39736e8907d8fffd9048d0e6236616625e578", 0xae}, {&(0x7f0000000640)="42936dea6a509d8986de87aedb2aa041707b46fc822f7af064928f5ff99d9ade2592fd0df1d7293a3286367f8984bf9e6a2b32366cd504fb279222374fbf6a3a05f74cba1924", 0x46}], 0x6, 0xfffffffe, 0xfff) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a01040000000000000000020000000c00064000000000000000020900020073797a32000000000900010073797a30"], 0x60}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000700000000000a54000000060a09040000000000000000020000000900010073797a3000000000090002e373797a120000000028000480240001800a00010071756575650000001400028006000140000800000600024000000000140000001100010000000000000000000000008a"], 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): f you depend on this functionality. [ 95.250799][ T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.279349][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.289953][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.344501][ T5873] veth0_vlan: entered promiscuous mode [ 95.387837][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.399199][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.429491][ T5873] veth1_vlan: entered promiscuous mode [ 95.483861][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.497495][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.538476][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.548780][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.605986][ T5873] veth0_macvtap: entered promiscuous mode [ 95.619959][ T5873] veth1_macvtap: entered promiscuous mode [ 95.641818][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.663975][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.760760][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.848790][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.873813][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.891363][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.953482][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.966778][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.012435][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.035442][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.211428][ T5993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.249578][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.319390][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.331613][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.382160][ T5993] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 96.428350][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.449555][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.458675][ T6006] netlink: 'syz.2.9': attribute type 2 has an invalid length. [ 96.505142][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 96.548907][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 96.642862][ T6008] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10'. [ 96.652043][ T5864] Bluetooth: hci0: command tx timeout [ 96.652085][ T5864] Bluetooth: hci1: command tx timeout [ 96.715693][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.726003][ T5185] Bluetooth: hci2: command tx timeout [ 96.743851][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.817836][ T6017] syzkaller1: entered promiscuous mode [ 96.835484][ T6017] syzkaller1: entered allmulticast mode [ 96.885526][ T5185] Bluetooth: hci3: command tx timeout [ 96.891030][ T5864] Bluetooth: hci4: command tx timeout [ 97.320493][ T6025] sctp: failed to load transform for md5: -2 [ 97.387028][ T6033] netlink: 'syz.2.16': attribute type 1 has an invalid length. [ 97.471460][ T6033] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 97.617888][ T6044] Zero length message leads to an empty skb [ 97.651818][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.684833][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 97.714934][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 97.742822][ T6048] warning: `syz.0.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.112960][ T6061] netlink: 788 bytes leftover after parsing attributes in process `syz.0.23'. [ 98.487583][ T6074] syzkaller1: entered promiscuous mode [ 98.507419][ T6074] syzkaller1: entered allmulticast mode [ 98.542585][ T6075] tipc: Started in network mode [ 98.555496][ T6075] tipc: Node identity 261ff5dd95b9, cluster identity 4711 [ 98.568017][ T6075] tipc: Enabled bearer , priority 0 [ 98.577766][ T6072] syzkaller0: entered promiscuous mode [ 98.583420][ T6072] syzkaller0: entered allmulticast mode [ 98.656581][ T6071] tipc: Resetting bearer [ 98.719704][ T6071] tipc: Disabling bearer [ 98.877341][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31'. [ 98.894373][ T6084] tunl0: entered promiscuous mode [ 98.905672][ T6084] netlink: 'syz.1.30': attribute type 3 has an invalid length. [ 98.921137][ T6084] netlink: 9 bytes leftover after parsing attributes in process `syz.1.30'. [ 98.930886][ T6095] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 98.946728][ T6095] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 99.512494][ T6125] syzkaller1: entered promiscuous mode [ 99.523449][ T6125] syzkaller1: entered allmulticast mode [ 99.597764][ T6131] netlink: 'syz.4.41': attribute type 2 has an invalid length. [ 99.859873][ T6141] netlink: 'syz.2.48': attribute type 13 has an invalid length. [ 99.894667][ T6142] netlink: 'syz.2.48': attribute type 13 has an invalid length. [ 99.939704][ T6141] netlink: 'syz.2.48': attribute type 58 has an invalid length. [ 99.945814][ T6142] netlink: 'syz.2.48': attribute type 58 has an invalid length. [ 100.056789][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x805 [ 100.290611][ T6166] netlink: 'syz.1.53': attribute type 10 has an invalid length. [ 100.312833][ T6166] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.510450][ T6178] bridge1: entered promiscuous mode [ 100.516306][ T6178] bridge1: entered allmulticast mode [ 100.688687][ T6186] syzkaller1: entered promiscuous mode [ 100.694366][ T6186] syzkaller1: entered allmulticast mode [ 100.959359][ T6192] openvswitch: netlink: IP tunnel dst address not specified [ 101.037704][ T6198] openvswitch: netlink: IP tunnel dst address not specified [ 101.621038][ T6225] syzkaller1: entered promiscuous mode [ 101.638183][ T6225] syzkaller1: entered allmulticast mode [ 101.740050][ T6235] __nla_validate_parse: 8 callbacks suppressed [ 101.740069][ T6235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.73'. [ 102.193267][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 102.556647][ T6254] hsr_slave_0 (unregistering): left promiscuous mode [ 102.876054][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 102.980664][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.988667][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.261138][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.281620][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.524686][ T6286] bridge1: left promiscuous mode [ 103.534822][ T6286] bridge1: left allmulticast mode [ 103.576951][ T6297] syzkaller1: entered promiscuous mode [ 103.591930][ T6297] syzkaller1: entered allmulticast mode [ 103.627897][ T1143] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.649490][ T1143] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.824203][ T1143] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.853389][ T1143] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.982523][ T6326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.97'. [ 104.225996][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'. [ 104.695485][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 104.876075][ T6371] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 104.930448][ T6369] tipc: Enabled bearer , priority 0 [ 104.944029][ T6373] netlink: 'syz.1.109': attribute type 23 has an invalid length. [ 105.000276][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 105.043680][ T6369] syzkaller0: entered promiscuous mode [ 105.051916][ T6369] syzkaller0: entered allmulticast mode [ 105.070644][ T6369] tipc: Resetting bearer [ 105.147326][ T6368] tipc: Resetting bearer [ 105.996945][ T5994] tipc: Node number set to 3014063581 [ 106.380305][ T6368] tipc: Disabling bearer [ 106.594321][ T6410] netlink: 'syz.2.119': attribute type 23 has an invalid length. [ 106.782753][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 107.108687][ T6436] netlink: 'syz.1.127': attribute type 10 has an invalid length. [ 107.161542][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 107.625389][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.134'. [ 107.669471][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.134'. [ 107.701390][ T6458] erspan0: entered promiscuous mode [ 107.765346][ T6458] erspan0: left promiscuous mode [ 107.840350][ T6464] netlink: 'syz.0.135': attribute type 4 has an invalid length. [ 107.895163][ T6465] netlink: 'syz.0.135': attribute type 4 has an invalid length. [ 108.234762][ T6475] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 109.468377][ T6511] syzkaller1: entered promiscuous mode [ 109.474210][ T6511] syzkaller1: entered allmulticast mode [ 109.504718][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'. [ 109.549549][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'. [ 109.833007][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 109.882434][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 109.902778][ T6537] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 110.643936][ T6574] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.158'. [ 110.678836][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 110.688857][ T6574] openvswitch: netlink: Message has 5 unknown bytes. [ 110.874534][ T6586] ip6gre1: entered allmulticast mode [ 111.236417][ T6600] netlink: 'syz.3.168': attribute type 2 has an invalid length. [ 111.352322][ T6605] trusted_key: syz.4.171 sent an empty control message without MSG_MORE. [ 111.466790][ T6609] syzkaller1: entered allmulticast mode [ 112.339151][ T6630] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 112.380249][ T6630] __nla_validate_parse: 2 callbacks suppressed [ 112.380267][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 112.403935][ T6630] netlink: 'syz.1.178': attribute type 10 has an invalid length. [ 112.443565][ T6630] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 112.724317][ T6643] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 112.739198][ T6642] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 112.774273][ T6643] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 112.993567][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 113.003932][ T6652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.185'. [ 113.123556][ T6657] syzkaller1: entered promiscuous mode [ 113.148397][ T6657] syzkaller1: entered allmulticast mode [ 113.321621][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 113.401629][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 113.411994][ T6676] netlink: 'syz.2.190': attribute type 10 has an invalid length. [ 113.496620][ T6671] ip6gre1: entered allmulticast mode [ 113.596561][ T6680] openvswitch: netlink: IP tunnel dst address not specified [ 113.834134][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.194'. [ 113.841155][ T6687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.122494][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 114.369601][ T6704] ip6gre2: entered allmulticast mode [ 114.522941][ T6703] syzkaller1: entered promiscuous mode [ 114.529321][ T6703] syzkaller1: entered allmulticast mode [ 114.703053][ T6718] netlink: 72 bytes leftover after parsing attributes in process `syz.4.204'. [ 114.764143][ T6718] netlink: 44 bytes leftover after parsing attributes in process `syz.4.204'. [ 115.083190][ T6731] batadv1: entered allmulticast mode [ 115.100599][ T6735] netlink: 40 bytes leftover after parsing attributes in process `syz.4.210'. [ 115.398573][ T6743] netlink: 'syz.2.213': attribute type 7 has an invalid length. [ 115.399561][ T6747] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 115.447352][ T6743] netlink: 'syz.2.213': attribute type 8 has an invalid length. [ 115.547993][ T6747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.561728][ T6747] bond1: (slave bond2): making interface the new active one [ 115.571885][ T6747] bond1: (slave bond2): Enslaving as an active interface with an up link [ 115.706985][ T6752] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 115.758995][ T6747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.842078][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.665010][ T6799] veth0: entered promiscuous mode [ 116.709749][ T6794] veth0: left promiscuous mode [ 117.292534][ T6817] netlink: 'syz.4.235': attribute type 10 has an invalid length. [ 117.300810][ T6817] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 117.308674][ T6817] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 117.326900][ T6817] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 117.386393][ T6820] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 117.395296][ T6811] __nla_validate_parse: 9 callbacks suppressed [ 117.395313][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.233'. [ 117.415897][ T6811] IPVS: Error connecting to the multicast addr [ 117.451299][ T6822] tipc: Enabled bearer , priority 0 [ 117.520540][ T6826] syzkaller1: entered promiscuous mode [ 117.540477][ T6826] syzkaller1: entered allmulticast mode [ 117.566603][ T6821] tipc: Disabling bearer [ 118.033782][ T6842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.241'. [ 118.110835][ T6857] Bluetooth: MGMT ver 1.23 [ 118.121002][ T6857] nbd: must specify at least one socket [ 118.261393][ T6845] dvmrp0: entered allmulticast mode [ 118.301654][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'. [ 118.384187][ T6870] netlink: 52 bytes leftover after parsing attributes in process `syz.1.248'. [ 118.630100][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 118.639757][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.873165][ T6877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.105668][ T6886] syzkaller1: entered promiscuous mode [ 119.115064][ T6886] syzkaller1: entered allmulticast mode [ 119.157755][ T6892] syzkaller1: left promiscuous mode [ 119.163126][ T6892] syzkaller1: left allmulticast mode [ 119.290304][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 119.318960][ T6908] netlink: 'syz.0.258': attribute type 5 has an invalid length. [ 119.331230][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'. [ 119.382522][ T6914] IPVS: Error connecting to the multicast addr [ 119.570290][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 119.808792][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 119.848439][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 120.183030][ T6944] veth0: entered promiscuous mode [ 120.209757][ T6945] netlink: 'syz.3.271': attribute type 7 has an invalid length. [ 120.217716][ T6945] netlink: 'syz.3.271': attribute type 8 has an invalid length. [ 120.236311][ T6945] team0: entered promiscuous mode [ 120.241481][ T6945] team_slave_0: entered promiscuous mode [ 120.251286][ T6945] team_slave_1: entered promiscuous mode [ 120.281316][ T6945] bond0: entered promiscuous mode [ 120.295638][ T6945] bond_slave_0: entered promiscuous mode [ 120.303965][ T6945] bond_slave_1: entered promiscuous mode [ 120.315669][ T6945] gretap0: entered promiscuous mode [ 120.323303][ T6945] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 120.337544][ T6941] veth0: left promiscuous mode [ 120.358257][ T6946] syzkaller1: entered promiscuous mode [ 120.371742][ T6946] syzkaller1: entered allmulticast mode [ 120.798361][ T6978] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 121.032700][ T6988] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.074210][ T6988] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 121.135433][ T6987] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.147149][ T6987] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 121.207369][ T6999] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 121.220667][ T6999] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 121.392531][ T7006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.512761][ T7007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.657074][ T7022] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.892159][ T7018] syzkaller1: entered promiscuous mode [ 121.897895][ T7018] syzkaller1: entered allmulticast mode [ 122.141340][ T7046] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 122.307311][ T7046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.508075][ T7066] veth3: entered promiscuous mode [ 122.541442][ T7066] bond2: (slave veth3): Enslaving as an active interface with a down link [ 122.573441][ T7078] __nla_validate_parse: 33 callbacks suppressed [ 122.573461][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 122.592422][ T7046] bond2: entered allmulticast mode [ 122.765992][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 122.843962][ T7089] tipc: Started in network mode [ 122.855034][ T7089] tipc: Node identity 5ec571dbdb0c, cluster identity 4711 [ 122.899581][ T7089] tipc: Enabled bearer , priority 0 [ 122.934632][ T7094] syzkaller0: entered promiscuous mode [ 122.942102][ T7094] syzkaller0: entered allmulticast mode [ 123.051462][ T7089] tipc: Resetting bearer [ 123.149661][ T7084] tipc: Resetting bearer [ 123.298982][ T7084] tipc: Disabling bearer [ 123.343471][ T7113] netlink: 'syz.0.319': attribute type 4 has an invalid length. [ 123.399067][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 123.550887][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 123.772135][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'. [ 123.788418][ T7142] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.325'. [ 123.839928][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 124.153547][ T7152] C: renamed from lo (while UP) [ 124.190599][ T7152] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 124.233760][ T7160] IPVS: Error connecting to the multicast addr [ 124.520844][ T7175] netlink: 60 bytes leftover after parsing attributes in process `syz.4.336'. [ 124.575537][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.336'. [ 124.640619][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.338'. [ 125.502267][ T7233] team0: entered allmulticast mode [ 125.541336][ T7233] team_slave_0: entered allmulticast mode [ 125.572122][ T7233] team_slave_1: entered allmulticast mode [ 125.618691][ T7226] syzkaller1: entered promiscuous mode [ 125.624301][ T7226] syzkaller1: entered allmulticast mode [ 126.271768][ T7262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.709455][ T7297] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 126.743397][ T7296] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 126.769394][ T7297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.779316][ T7296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.808179][ T7305] openvswitch: netlink: IPv6 tunnel dst address is zero [ 127.206859][ T7313] syzkaller0: entered promiscuous mode [ 127.212497][ T7313] syzkaller0: entered allmulticast mode [ 128.809810][ T7357] __nla_validate_parse: 6 callbacks suppressed [ 128.809832][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 128.868740][ T7359] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 128.885911][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'. [ 128.932362][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 128.966695][ T7359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.997861][ T7365] netlink: 3 bytes leftover after parsing attributes in process `syz.1.386'. [ 129.008983][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'. [ 129.036383][ T7357] tipc: Started in network mode [ 129.041313][ T7357] tipc: Node identity 7ebd54291f22, cluster identity 4711 [ 129.068505][ T7357] tipc: Enabled bearer , priority 0 [ 129.171715][ T7359] veth7: entered promiscuous mode [ 129.213387][ T7359] bond1: (slave veth7): Enslaving as an active interface with a down link [ 129.233465][ T7378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'. [ 129.261354][ T7366] vlan2: entered allmulticast mode [ 129.272925][ T7366] bond1: entered allmulticast mode [ 129.284282][ T7366] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 129.344158][ T7357] syzkaller0: entered promiscuous mode [ 129.369572][ T7357] syzkaller0: entered allmulticast mode [ 129.387226][ T7361] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 129.465901][ T7380] tipc: Resetting bearer [ 129.550153][ T7356] tipc: Resetting bearer [ 129.680763][ T7356] tipc: Disabling bearer [ 129.885391][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 129.935078][ T7410] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.987254][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 130.333158][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 130.389715][ T7432] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.401'. [ 131.989480][ T7506] tipc: Enabled bearer , priority 0 [ 132.120009][ T7506] syzkaller0: entered promiscuous mode [ 132.129408][ T7506] syzkaller0: entered allmulticast mode [ 132.137117][ T7506] tipc: Resetting bearer [ 132.188088][ T7503] tipc: Resetting bearer [ 132.978958][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.988488][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.539639][ T7503] tipc: Disabling bearer [ 133.553700][ T7520] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 134.229759][ T7559] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 134.407030][ T7570] __nla_validate_parse: 9 callbacks suppressed [ 134.407051][ T7570] netlink: 17 bytes leftover after parsing attributes in process `syz.2.446'. [ 134.469666][ T7575] netlink: 'syz.3.449': attribute type 9 has an invalid length. [ 134.485130][ T7575] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.449'. [ 134.583499][ T7585] netlink: 'syz.0.445': attribute type 4 has an invalid length. [ 134.591576][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.445'. [ 134.715044][ T7588] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 134.721592][ T7590] IPVS: set_ctl: invalid protocol: 2 4.0.0.0:256 [ 135.002527][ T7604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.048409][ T7607] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20001 [ 135.069697][ T7604] netlink: 'syz.1.455': attribute type 1 has an invalid length. [ 135.139733][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'. [ 135.272963][ T7617] netlink: 256 bytes leftover after parsing attributes in process `syz.4.459'. [ 135.506678][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'. [ 135.650077][ T7629] netlink: 36 bytes leftover after parsing attributes in process `syz.3.463'. [ 135.954841][ T7646] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 135.972831][ T7646] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.466'. [ 136.109765][ T7652] netlink: 3 bytes leftover after parsing attributes in process `syz.2.469'. [ 136.439480][ T7650] openvswitch: netlink: IP tunnel dst address not specified [ 136.731898][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.474'. [ 136.760657][ T7676] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 136.781015][ T7679] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 137.909677][ T7720] netlink: 'syz.4.488': attribute type 8 has an invalid length. [ 138.473334][ T7730] nbd: must specify a device to reconfigure [ 138.541598][ T7732] tipc: Enabled bearer , priority 0 [ 138.777546][ T7727] tipc: Disabling bearer [ 139.311823][ T7756] gre1: entered promiscuous mode [ 139.338429][ T7756] gre1: entered allmulticast mode [ 139.440101][ T7760] __nla_validate_parse: 3 callbacks suppressed [ 139.440121][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 139.478083][ T7761] syzkaller1: entered promiscuous mode [ 139.483601][ T7761] syzkaller1: entered allmulticast mode [ 139.604631][ T7767] netlink: 'syz.1.504': attribute type 2 has an invalid length. [ 139.949318][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 140.079344][ T7789] netlink: 36 bytes leftover after parsing attributes in process `syz.1.509'. [ 140.124926][ T7789] netlink: 44 bytes leftover after parsing attributes in process `syz.1.509'. [ 140.317276][ T7799] Bluetooth: MGMT ver 1.23 [ 140.371780][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 140.499767][ T7801] netlink: 'syz.4.511': attribute type 1 has an invalid length. [ 140.530192][ T7801] netlink: 'syz.4.511': attribute type 2 has an invalid length. [ 141.097479][ T7816] netdevsim netdevsim1: Direct firmware load for /tun failed with error -2 [ 141.125893][ T7816] netdevsim netdevsim1: Falling back to sysfs fallback for: /tun [ 141.444792][ T7833] syzkaller1: entered promiscuous mode [ 141.486551][ T7833] syzkaller1: entered allmulticast mode [ 141.617393][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 141.694393][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.519'. [ 141.844720][ T7843] IPv6: Can't replace route, no match found [ 142.124975][ T30] audit: type=1107 audit(1758162322.112:2): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='œ]Û>ÌÔ·›Êùÿp§¡ÛQÿ«ÏUMí\-¯8ý|‘ö¡Tu¹1$»tÙ:¥=¤5« 6_`’VöÓœs <ãKDüßàÀ -ÍÂŒYSÌùÄcµûjceÇ r5‹¡ýLü…*£ Z2ÉðÕd³MsÍ»·õÿT~—hÁyÅd§~«J' [ 142.326583][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 142.462686][ T7867] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 142.569684][ T7876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.528'. [ 142.799060][ T7883] syzkaller1: entered promiscuous mode [ 142.804608][ T7883] syzkaller1: entered allmulticast mode [ 142.870319][ T7888] bridge_slave_0: left allmulticast mode [ 142.881010][ T7888] bridge_slave_0: left promiscuous mode [ 142.888212][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.903861][ T7888] bridge_slave_1: left allmulticast mode [ 142.909694][ T7888] bridge_slave_1: left promiscuous mode [ 142.927666][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.955297][ T7888] bond0: (slave bond_slave_0): Releasing backup interface [ 142.985549][ T7888] bond0: (slave bond_slave_1): Releasing backup interface [ 143.023646][ T7888] team0: Port device team_slave_0 removed [ 143.041068][ T7888] team0: Port device team_slave_1 removed [ 143.057658][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.531'. [ 143.070862][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.080343][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.092210][ T7888] bond2: (slave veth3): Releasing active interface [ 143.258267][ T7661] Set syz1 is full, maxelem 65536 reached [ 143.437206][ T7905] tipc: MTU too low for tipc bearer [ 143.550739][ T7909] netlink: 'syz.4.536': attribute type 4 has an invalid length. [ 143.693286][ T7913] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.735892][ T7916] netlink: 'syz.4.539': attribute type 1 has an invalid length. [ 143.761947][ T7916] netlink: 'syz.4.539': attribute type 1 has an invalid length. [ 144.852230][ T7970] __nla_validate_parse: 2 callbacks suppressed [ 144.852251][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.552'. [ 145.019129][ T7976] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 145.038736][ T7976] netlink: 'syz.0.552': attribute type 2 has an invalid length. [ 145.050586][ T7978] tipc: Started in network mode [ 145.065243][ T7978] tipc: Node identity a27eecf7660b, cluster identity 4711 [ 145.072470][ T7976] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.552'. [ 145.084251][ T7978] tipc: Enabled bearer , priority 0 [ 145.102026][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 145.112808][ T7984] syzkaller0: entered promiscuous mode [ 145.118997][ T7984] syzkaller0: entered allmulticast mode [ 145.191954][ T7978] tipc: Resetting bearer [ 145.209425][ T7975] tipc: Resetting bearer [ 145.234736][ T7975] tipc: Disabling bearer [ 145.254681][ T7987] netlink: 44 bytes leftover after parsing attributes in process `syz.3.556'. [ 145.479086][ T7995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.686166][ T8011] Driver unsupported XDP return value 0 on prog (id 138) dev N/A, expect packet loss! [ 145.741751][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.563'. [ 145.821058][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 145.859531][ T8023] netlink: 'syz.0.563': attribute type 5 has an invalid length. [ 145.915937][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.563'. [ 146.019892][ T8023] geneve2: entered promiscuous mode [ 146.044240][ T8023] geneve2: entered allmulticast mode [ 146.062425][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 146.074121][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 146.107873][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 146.148484][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 146.364807][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 146.545562][ T8046] netlink: 'syz.3.575': attribute type 1 has an invalid length. [ 146.626308][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 146.725681][ T8049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.576'. [ 146.766629][ T8049] nbd: must specify at least one socket [ 146.785160][ T8060] openvswitch: netlink: Message has 5 unknown bytes. [ 146.842530][ T8047] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 146.919626][ T8047] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 146.957018][ T8070] netlink: 'syz.4.583': attribute type 2 has an invalid length. [ 147.248994][ T8077] syzkaller1: entered promiscuous mode [ 147.265520][ T8077] syzkaller1: entered allmulticast mode [ 147.461637][ T8091] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 148.916060][ T8162] 8021q: VLANs not supported on xfrm0 [ 148.944376][ T8162] 8021q: VLANs not supported on xfrm0 [ 149.039551][ T8169] x_tables: ip_tables: socket.1 match: invalid size 8 (kernel) != (user) 72 [ 149.371176][ T8188] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 149.856604][ T8209] netlink: 'syz.2.622': attribute type 29 has an invalid length. [ 149.867556][ T8207] netlink: 'syz.2.622': attribute type 29 has an invalid length. [ 149.877312][ T8207] __nla_validate_parse: 141 callbacks suppressed [ 149.877329][ T8207] netlink: 500 bytes leftover after parsing attributes in process `syz.2.622'. [ 150.031485][ T8215] netlink: 64 bytes leftover after parsing attributes in process `syz.3.623'. [ 150.390885][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 150.711045][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.633'. [ 150.933902][ T8259] tipc: Started in network mode [ 150.947028][ T8259] tipc: Node identity 86f16074d929, cluster identity 4711 [ 150.972294][ T8259] tipc: Enabled bearer , priority 0 [ 150.986762][ T8260] netlink: 'syz.1.636': attribute type 7 has an invalid length. [ 151.004123][ T8259] syzkaller0: MTU too low for tipc bearer [ 151.020454][ T8259] tipc: Disabling bearer [ 151.220436][ T8267] veth7: entered allmulticast mode [ 152.170706][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.2.651'. [ 152.202090][ T8313] netlink: 43 bytes leftover after parsing attributes in process `syz.2.651'. [ 152.214216][ T8313] netlink: 'syz.2.651': attribute type 6 has an invalid length. [ 152.230814][ T8313] netlink: 'syz.2.651': attribute type 5 has an invalid length. [ 152.239066][ T8313] netlink: 43 bytes leftover after parsing attributes in process `syz.2.651'. [ 152.282309][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 152.509875][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.653'. [ 152.565822][ T8319] netlink: 6 bytes leftover after parsing attributes in process `syz.2.653'. [ 152.879312][ T8344] bond0: entered promiscuous mode [ 152.884531][ T8344] bond0: entered allmulticast mode [ 152.892124][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.072761][ T8352] netlink: 'syz.0.662': attribute type 1 has an invalid length. [ 153.135655][ T8355] netlink: 'syz.1.664': attribute type 5 has an invalid length. [ 153.147549][ T8355] openvswitch: netlink: IP tunnel dst address not specified [ 153.472612][ T8369] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.212400][ T8363] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.225585][ T8363] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 154.480214][ T8363] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.515429][ T8363] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 154.684801][ T8363] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.729511][ T8363] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 154.772304][ T8363] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.805067][ T8363] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 154.875111][ T8363] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.915506][ T8363] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 155.213626][ T8439] tipc: Enabling of bearer rejected, failed to enable media [ 155.253544][ T8443] netlink: 'syz.4.690': attribute type 11 has an invalid length. [ 155.269733][ T8443] __nla_validate_parse: 10 callbacks suppressed [ 155.269751][ T8443] netlink: 224 bytes leftover after parsing attributes in process `syz.4.690'. [ 155.506557][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 155.647269][ T8462] netlink: 'syz.4.693': attribute type 16 has an invalid length. [ 155.700057][ T8462] netlink: 'syz.4.693': attribute type 17 has an invalid length. [ 155.809203][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.862221][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.122507][ T8462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.935009][ T5980] IPVS: starting estimator thread 0... [ 157.013843][ T8505] netlink: 48 bytes leftover after parsing attributes in process `syz.2.701'. [ 157.055230][ T8507] IPVS: using max 28 ests per chain, 67200 per kthread [ 157.142164][ T8512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.703'. [ 157.178214][ T8512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.703'. [ 157.250419][ T8520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.703'. [ 157.347325][ T8525] netlink: 40 bytes leftover after parsing attributes in process `syz.4.707'. [ 157.389179][ T8525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.097158][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 179.107513][ T8586] netlink: 72 bytes leftover after parsing attributes in process `syz.2.710'. [ 179.262418][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 179.537353][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 179.601577][ T8607] netlink: 'syz.2.718': attribute type 7 has an invalid length. [ 179.661624][ T8607] netlink: 'syz.2.718': attribute type 8 has an invalid length. [ 179.669769][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 179.721404][ T8620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.718'. [ 179.923180][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 180.077097][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 180.087759][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 180.126626][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 180.142615][ T8637] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 180.935374][ T8671] tipc: Enabled bearer , priority 0 [ 180.959369][ T8671] syzkaller0: entered promiscuous mode [ 180.968602][ T8676] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 180.976526][ T8671] syzkaller0: entered allmulticast mode [ 181.032417][ T8671] tipc: Resetting bearer [ 181.142962][ T8670] tipc: Resetting bearer [ 181.228038][ T8670] tipc: Disabling bearer [ 181.351236][ T8702] bridge0: entered promiscuous mode [ 181.375362][ T8702] macsec1: entered promiscuous mode [ 181.402328][ T8702] macsec1: entered allmulticast mode [ 181.434015][ T8702] bridge0: entered allmulticast mode [ 181.460071][ T8702] bridge0: port 3(macsec1) entered blocking state [ 181.478660][ T8702] bridge0: port 3(macsec1) entered disabled state [ 181.498677][ T8702] bridge0: left allmulticast mode [ 181.504107][ T8702] bridge0: left promiscuous mode [ 181.720203][ T8719] syzkaller1: entered promiscuous mode [ 181.730295][ T8719] syzkaller1: entered allmulticast mode [ 182.052180][ T8726] tipc: Enabled bearer , priority 0 [ 182.070498][ T8726] syzkaller0: entered promiscuous mode [ 182.076572][ T8726] syzkaller0: entered allmulticast mode [ 182.120702][ T8726] tipc: Resetting bearer [ 182.154221][ T8725] tipc: Resetting bearer [ 182.193433][ T8725] tipc: Disabling bearer [ 182.434736][ T8744] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.502636][ T8744] xt_limit: Overflow, try lower: 271964/0 [ 182.523616][ T8746] tipc: Enabled bearer , priority 0 [ 182.552723][ T8746] syzkaller0: entered promiscuous mode [ 182.557222][ T8750] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.579996][ T8746] syzkaller0: entered allmulticast mode [ 182.673067][ T8746] tipc: Resetting bearer [ 182.698329][ T8758] syzkaller1: entered promiscuous mode [ 182.709453][ T8758] syzkaller1: entered allmulticast mode [ 183.011401][ T8775] netlink: 'syz.1.768': attribute type 29 has an invalid length. [ 183.099997][ T8784] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 183.141087][ T8784] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 183.258802][ T8745] tipc: Resetting bearer [ 183.294567][ T8745] tipc: Disabling bearer [ 183.452576][ T8797] syzkaller0: entered promiscuous mode [ 183.485040][ T8797] syzkaller0: entered allmulticast mode [ 183.518563][ T8804] tipc: Enabled bearer , priority 0 [ 183.555400][ T8797] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 183.645861][ T8797] tipc: Resetting bearer [ 183.672049][ T8811] syzkaller1: entered promiscuous mode [ 183.678845][ T8811] syzkaller1: entered allmulticast mode [ 183.689441][ T8796] tipc: Resetting bearer [ 183.710206][ T8796] tipc: Disabling bearer [ 183.897211][ T8821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.796084][ T8856] syzkaller1: entered promiscuous mode [ 184.825080][ T8856] syzkaller1: entered allmulticast mode [ 185.351063][ T8884] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.875340][ T8908] syzkaller1: entered promiscuous mode [ 185.880866][ T8908] syzkaller1: entered allmulticast mode [ 186.031815][ T8920] __nla_validate_parse: 16 callbacks suppressed [ 186.031834][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 186.051732][ T8920] netlink: 60 bytes leftover after parsing attributes in process `syz.1.814'. [ 186.112320][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 186.137595][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 186.204148][ T8925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.625422][ T8950] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 186.650969][ T8952] syzkaller1: entered promiscuous mode [ 186.658742][ T8952] syzkaller1: entered allmulticast mode [ 186.870657][ T8963] netlink: 152064 bytes leftover after parsing attributes in process `syz.3.828'. [ 186.902507][ T8963] netlink: zone id is out of range [ 186.921472][ T8963] netlink: zone id is out of range [ 186.948683][ T8963] netlink: zone id is out of range [ 186.979883][ T8963] netlink: zone id is out of range [ 187.006316][ T8963] netlink: zone id is out of range [ 187.015882][ T8963] netlink: zone id is out of range [ 187.029290][ T5980] IPVS: starting estimator thread 0... [ 187.035737][ T8969] IPVS: nq: FWM 3 0x00000003 - no destination available [ 187.135180][ T8971] IPVS: using max 26 ests per chain, 62400 per kthread [ 187.246720][ T8975] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 187.643515][ T8994] netlink: 'syz.0.838': attribute type 4 has an invalid length. [ 187.699575][ T8994] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 187.800188][ T8986] netlink: 'syz.3.835': attribute type 27 has an invalid length. [ 187.907784][ T9007] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.841'. [ 187.951340][ T9000] bond1: (slave bridge1): making interface the new active one [ 187.959974][ T9000] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 188.292425][ T9027] net_ratelimit: 225 callbacks suppressed [ 188.292444][ T9027] sock: sock_set_timeout: `syz.3.848' (pid 9027) tries to set negative timeout [ 188.306410][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 188.317464][ T9028] openvswitch: netlink: IPv4 tun info is not correct [ 188.358298][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.847'. [ 188.427293][ T9027] IPVS: Scheduler module ip_vs_sip not found [ 188.694628][ T9047] veth0: entered promiscuous mode [ 188.704027][ T9047] veth0: left promiscuous mode [ 189.795937][ T9058] bridge_slave_0: left allmulticast mode [ 189.801826][ T9058] bridge_slave_0: left promiscuous mode [ 189.832875][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.845774][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.856'. [ 189.881118][ T9058] bridge_slave_1: left allmulticast mode [ 189.915155][ T9058] bridge_slave_1: left promiscuous mode [ 189.935359][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.957320][ T9058] bond0: (slave bond_slave_0): Releasing backup interface [ 189.984005][ T9058] bond0: (slave bond_slave_1): Releasing backup interface [ 190.025664][ T9058] team0: Port device team_slave_0 removed [ 190.051880][ T9058] team0: Port device team_slave_1 removed [ 190.064387][ T9058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.079427][ T9058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.091138][ T9058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.102490][ T9058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.132338][ T9058] bond1: (slave bond2): Releasing backup interface [ 190.142498][ T9058] bond1: (slave bond2): the permanent HWaddr of slave - d2:d3:61:bc:54:99 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 190.162066][ T9075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'. [ 190.165594][ T9058] bond1: (slave gretap1): making interface the new active one [ 190.194078][ T9058] bond1: (slave gretap1): Releasing backup interface [ 190.280922][ T9058] syz.4.858 (9058) used greatest stack depth: 17448 bytes left [ 190.621768][ T9095] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 190.866124][ T9098] tipc: Enabled bearer , priority 0 [ 190.887056][ T9105] netlink: 'syz.0.869': attribute type 6 has an invalid length. [ 190.923803][ T9105] netlink: 'syz.0.869': attribute type 6 has an invalid length. [ 190.983135][ T9098] tipc: Disabling bearer [ 191.186593][ T9126] __nla_validate_parse: 2 callbacks suppressed [ 191.186614][ T9126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.874'. [ 191.464322][ T9138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.877'. [ 191.671512][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.880'. [ 192.075645][ T9168] netlink: 'syz.2.887': attribute type 10 has an invalid length. [ 192.101492][ T9168] bridge_slave_1: entered promiscuous mode [ 192.122275][ T9168] bridge_slave_1: entered allmulticast mode [ 192.154440][ T9168] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 192.196866][ T9174] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 192.233213][ T9174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.796046][ T9204] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.288890][ T9223] netlink: 'syz.1.902': attribute type 1 has an invalid length. [ 193.343848][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 193.521157][ T9227] openvswitch: netlink: Missing key (keys=40, expected=100) [ 193.575932][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 193.593810][ T9228] macvtap1: entered promiscuous mode [ 193.617903][ T9228] vlan0: entered promiscuous mode [ 193.631942][ T9228] macvtap1: entered allmulticast mode [ 193.640654][ T9228] vlan0: entered allmulticast mode [ 193.647791][ T9228] veth0_vlan: entered allmulticast mode [ 193.697938][ T9228] netlink: 100 bytes leftover after parsing attributes in process `syz.4.905'. [ 193.794516][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'. [ 194.069610][ T9257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.913'. [ 194.080445][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 194.092524][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 194.173536][ T9262] tipc: Enabled bearer , priority 0 [ 194.194066][ T9258] syzkaller0: entered promiscuous mode [ 194.212881][ T9258] syzkaller0: entered allmulticast mode [ 194.240714][ T9265] veth1_to_bond: entered allmulticast mode [ 194.325670][ T9265] bond0: (slave bond_slave_1): Releasing backup interface [ 194.391392][ T9265] veth1_to_bond (unregistering): left allmulticast mode [ 194.410884][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.437108][ T9272] tipc: Resetting bearer [ 194.478276][ T9255] tipc: Resetting bearer [ 194.522317][ T9255] tipc: Disabling bearer [ 194.551895][ T9277] netlink: 'syz.0.920': attribute type 6 has an invalid length. [ 194.714803][ T9273] syzkaller1: entered promiscuous mode [ 194.720171][ T9284] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 194.721032][ T9273] syzkaller1: entered allmulticast mode [ 194.876280][ T9288] bond2: (slave geneve2): making interface the new active one [ 194.894422][ T9288] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 194.915086][ T9290] netlink: 'syz.3.924': attribute type 29 has an invalid length. [ 194.985342][ T74] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.085757][ T74] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.105788][ T74] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.114658][ T74] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.342633][ T9317] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 195.464237][ T9324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.685746][ T9338] IPVS: set_ctl: invalid protocol: 47 172.20.20.46:20004 [ 195.808902][ T9346] sch_tbf: peakrate 32768 is lower than or equals to rate 16059369461988446116 ! [ 196.377298][ T9374] __nla_validate_parse: 38 callbacks suppressed [ 196.377318][ T9374] netlink: 13 bytes leftover after parsing attributes in process `syz.2.949'. [ 196.403799][ T9368] syzkaller0: entered promiscuous mode [ 196.409514][ T9368] syzkaller0: entered allmulticast mode [ 196.674661][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 197.107986][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 197.154802][ T9407] netlink: 72 bytes leftover after parsing attributes in process `syz.1.958'. [ 197.198629][ T9413] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 197.244415][ T9413] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 197.271696][ T9413] netlink: 164 bytes leftover after parsing attributes in process `syz.4.959'. [ 197.899235][ T9449] netlink: 256 bytes leftover after parsing attributes in process `syz.1.968'. [ 198.028162][ T9455] netlink: 56 bytes leftover after parsing attributes in process `syz.2.970'. [ 198.557429][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 198.584101][ T9473] syzkaller0: entered promiscuous mode [ 198.591709][ T9473] syzkaller0: entered allmulticast mode [ 198.609227][ T9481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.975'. [ 199.746260][ T9478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.975'. [ 199.781889][ T9477] hsr_slave_0 (unregistering): left promiscuous mode [ 199.955767][ T9486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.180216][ T9493] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 200.215217][ T9493] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 200.379281][ T9504] netlink: 'syz.2.986': attribute type 8 has an invalid length. [ 200.388327][ T9504] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 200.651492][ T9521] netlink: 'syz.2.990': attribute type 21 has an invalid length. [ 200.700051][ T9522] netlink: 'syz.2.990': attribute type 21 has an invalid length. [ 201.002983][ T9529] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.338038][ T9549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.490668][ T9558] __nla_validate_parse: 7 callbacks suppressed [ 201.490688][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 201.803562][ T9573] tipc: Enabling of bearer rejected, failed to enable media [ 202.307472][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1016'. [ 202.446261][ T9612] netlink: 'syz.1.1019': attribute type 11 has an invalid length. [ 202.484832][ T9612] netlink: 'syz.1.1019': attribute type 11 has an invalid length. [ 202.511019][ T9612] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1019'. [ 202.576259][ T9612] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 202.586878][ T9612] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 202.761266][ T30] audit: type=1107 audit(1758162382.752:3): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ÿ0i1¤¸i[çCסpc·2³™P!_@q`†Éþ ÒJ~žm¬2ÃÓÉô‰ZÓƒªw»Qžâ¨’™ÅšœQ„‰¥˜AB"„r×Âö\z=èüT³ ùï…ääçiâÐ÷ŽŽ ïð|é"$Q¿¡Ø·}Ö²•á…ÕO,gä™|˜³Îº/•Ï5¥v.ÿ¡ò·å*õµÔ@À¦˜]Wˆ' [ 203.062722][ T9639] netlink: 'syz.4.1025': attribute type 4 has an invalid length. [ 203.749783][ T9659] netlink: 'syz.2.1032': attribute type 11 has an invalid length. [ 203.777679][ T9665] netlink: 'syz.0.1035': attribute type 1 has an invalid length. [ 203.911362][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1035'. [ 203.993927][ T9665] vlan2: entered allmulticast mode [ 204.005618][ T9665] bridge0: entered allmulticast mode [ 204.021598][ T9669] netlink: 'syz.1.1036': attribute type 2 has an invalid length. [ 204.492321][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1041'. [ 204.749694][ T9694] syzkaller0: entered promiscuous mode [ 204.764798][ T9694] syzkaller0: entered allmulticast mode [ 204.934386][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'. [ 206.028390][ T9704] syzkaller1: entered promiscuous mode [ 206.033932][ T9704] syzkaller1: entered allmulticast mode [ 206.155831][ T9717] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 206.202795][ T9718] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 206.389824][ T9726] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1050'. [ 206.442449][ T9736] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 206.747605][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 206.946769][ T9761] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1062'. [ 207.030965][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1062'. [ 207.150590][ T9774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1066'. [ 207.168273][ T9774] ve: renamed from ipvlan1 [ 207.350832][ T9781] sch_fq: defrate 0 ignored. [ 207.546624][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 207.570060][ T9790] netlink: 'syz.0.1073': attribute type 11 has an invalid length. [ 207.578286][ T9790] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1073'. [ 207.590039][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 207.599598][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 207.850132][ T9796] tipc: Enabled bearer , priority 0 [ 207.878294][ T9796] syzkaller0: entered promiscuous mode [ 207.900535][ T9796] syzkaller0: entered allmulticast mode [ 207.940594][ T9796] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 207.940789][ T9803] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 208.032567][ T9796] tipc: Resetting bearer [ 208.060501][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 208.105242][ T9795] tipc: Resetting bearer [ 208.130525][ T9795] tipc: Disabling bearer [ 208.163797][ T9813] syzkaller1: entered promiscuous mode [ 208.170907][ T9813] syzkaller1: entered allmulticast mode [ 208.182537][ T9818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1082'. [ 208.357036][ T9813] pim6reg: entered allmulticast mode [ 209.324326][ T1153] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.590035][ T9875] xfrm1: entered allmulticast mode [ 210.018729][ T9895] TC_ACT_REPEAT abuse ? [ 210.023469][ T9895] TC_ACT_REPEAT abuse ? [ 210.027925][ T9895] TC_ACT_REPEAT abuse ? [ 210.095361][ T9895] TC_ACT_REPEAT abuse ? [ 210.099864][ T9895] TC_ACT_REPEAT abuse ? [ 210.104227][ T9895] TC_ACT_REPEAT abuse ? [ 210.141859][ T9895] TC_ACT_REPEAT abuse ? [ 210.146340][ T9895] TC_ACT_REPEAT abuse ? [ 210.150729][ T9895] TC_ACT_REPEAT abuse ? [ 212.245771][ T1011] net_ratelimit: 42 callbacks suppressed [ 212.245802][ T1011] TC_ACT_REPEAT abuse ? [ 212.259555][ T5994] TC_ACT_REPEAT abuse ? [ 212.269025][ T1229] TC_ACT_REPEAT abuse ? [ 213.184763][ T9918] syzkaller1: entered allmulticast mode [ 213.191706][ T9915] __nla_validate_parse: 4 callbacks suppressed [ 213.191725][ T9915] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1110'. [ 213.375126][ T9934] ksmbd: Unknown IPC event: 3, ignore. [ 213.571967][ T9939] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 213.736691][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1119'. [ 213.855143][ T9966] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 214.432791][ T9994] 8021q: VLANs not supported on ip_vti0 [ 214.533538][ T9998] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 214.541329][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1136'. [ 214.950068][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 214.971422][T10030] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 214.999852][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 215.138053][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 215.176300][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 215.201527][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 215.211152][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 215.401525][T10050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1147'. [ 215.431961][T10053] tipc: Enabling of bearer rejected, failed to enable media [ 215.494583][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aefb000: rx timeout, send abort [ 215.504699][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807aefb000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 215.829507][T10070] bridge_slave_0: left allmulticast mode [ 215.845362][T10070] bridge_slave_0: left promiscuous mode [ 215.889416][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.090189][T10070] bridge_slave_1: left allmulticast mode [ 216.105693][T10070] bridge_slave_1: left promiscuous mode [ 216.111828][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.188447][T10070] bond0: (slave bond_slave_0): Releasing backup interface [ 216.203782][T10070] bond_slave_0: left promiscuous mode [ 216.470094][T10070] bond0: (slave bond_slave_1): Releasing backup interface [ 216.478690][T10070] bond_slave_1: left promiscuous mode [ 216.486884][T10070] team_slave_0: left promiscuous mode [ 216.503602][T10070] team0: Port device team_slave_0 removed [ 216.510948][T10070] team_slave_1: left promiscuous mode [ 216.527412][T10070] team0: Port device team_slave_1 removed [ 216.534291][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.542148][T10070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.552067][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.560392][T10070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.591288][T10072] netlink: 'syz.3.1151': attribute type 10 has an invalid length. [ 216.606888][T10077] netlink: 'syz.2.1154': attribute type 23 has an invalid length. [ 216.890382][T10088] netlink: 'syz.1.1156': attribute type 4 has an invalid length. [ 216.961564][T10088] netlink: 'syz.1.1156': attribute type 5 has an invalid length. [ 217.446786][ T37] TC_ACT_REPEAT abuse ? [ 217.452265][ T5980] TC_ACT_REPEAT abuse ? [ 217.458151][ T1229] TC_ACT_REPEAT abuse ? [ 217.611812][T10131] netlink: 'syz.0.1168': attribute type 12 has an invalid length. [ 217.708394][T10123] veth0_macvtap: left promiscuous mode [ 217.803010][T10141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.226870][T10160] __nla_validate_parse: 8 callbacks suppressed [ 218.226890][T10160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 218.331591][T10160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 218.445097][T10160] gretap0: entered promiscuous mode [ 218.508519][T10160] gretap0: left promiscuous mode [ 218.555584][ T5927] IPVS: starting estimator thread 0... [ 218.655000][T10179] IPVS: using max 31 ests per chain, 74400 per kthread [ 218.693358][T10175] IPVS: rr: FWM 3 0x00000003 - no destination available [ 218.876740][T10192] delete_channel: no stack [ 219.127865][T10202] netlink: 'syz.3.1188': attribute type 4 has an invalid length. [ 219.189122][T10205] netlink: 'syz.3.1188': attribute type 4 has an invalid length. [ 219.209782][T10206] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 219.229996][T10206] netlink: 'syz.4.1189': attribute type 2 has an invalid length. [ 219.242978][T10204] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 219.411730][T10216] nbd: must specify a device to reconfigure [ 219.621590][T10226] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1194'. [ 220.005745][ C0] TC_ACT_REPEAT abuse ? [ 220.261046][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 220.304051][T10266] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1202'. [ 220.379595][T10271] nbd: couldn't find a device at index -373156329 [ 220.671833][T10282] team0: Port device dummy0 added [ 220.718601][T10285] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 220.742825][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 220.782787][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 220.792670][T10285] team0: Failed to send options change via netlink (err -105) [ 220.802922][T10285] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 220.816491][T10285] team0: Port device dummy0 removed [ 220.832773][T10285] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 220.842180][T10290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1212'. [ 220.880232][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 221.063225][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 221.118949][T10296] IPv4: Oversized IP packet from 127.202.26.0 [ 221.471238][T10305] raw_sendmsg: syz.3.1215 forgot to set AF_INET. Fix it! [ 221.482510][T10307] unsupported nlmsg_type 40 [ 221.643446][T10317] validate_nla: 6 callbacks suppressed [ 221.643467][T10317] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 222.180457][T10336] IPVS: Error joining to the multicast group [ 222.337299][T10334] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 222.392559][T10352] dvmrp0: entered allmulticast mode [ 222.523906][T10357] netlink: 'syz.3.1231': attribute type 10 has an invalid length. [ 222.574050][ T12] TC_ACT_REPEAT abuse ? [ 222.579354][ T5994] TC_ACT_REPEAT abuse ? [ 222.584145][ T1229] TC_ACT_REPEAT abuse ? [ 222.604496][T10357] bridge_slave_1: entered promiscuous mode [ 222.621694][T10357] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 222.928290][T10383] IPv6: Can't replace route, no match found [ 223.333218][T10405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.385135][T10407] netlink: 'syz.4.1249': attribute type 2 has an invalid length. [ 223.414501][T10407] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 223.429032][T10407] __nla_validate_parse: 7 callbacks suppressed [ 223.429051][T10407] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1249'. [ 223.519709][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 223.768113][ T30] audit: type=1800 audit(1758162403.752:4): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1253" name="memory.events" dev="tmpfs" ino=1322 res=0 errno=0 [ 223.791372][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 223.849647][ T30] audit: type=1804 audit(1758162403.782:5): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1253" name="/newroot/256/memory.events" dev="tmpfs" ino=1322 res=1 errno=0 [ 224.332156][T10436] openvswitch: netlink: EtherType 0 is less than min 600 [ 224.996387][T10458] syzkaller0: entered promiscuous mode [ 225.002078][T10458] syzkaller0: entered allmulticast mode [ 225.147889][ T1229] TC_ACT_REPEAT abuse ? [ 225.256370][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 225.324136][T10496] netlink: 'syz.4.1275': attribute type 5 has an invalid length. [ 225.333824][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 225.504163][T10504] tipc: Enabled bearer , priority 0 [ 225.641884][T10510] netlink: 'syz.2.1280': attribute type 15 has an invalid length. [ 225.667950][T10504] syzkaller0: entered promiscuous mode [ 225.673593][T10504] syzkaller0: entered allmulticast mode [ 225.683517][T10504] tipc: Resetting bearer [ 226.528771][ T1229] tipc: Node number set to 3296062711 [ 226.875284][T10502] tipc: Resetting bearer [ 228.290064][T10502] tipc: Disabling bearer [ 228.327304][ T12] TC_ACT_REPEAT abuse ? [ 228.334479][ T5927] TC_ACT_REPEAT abuse ? [ 228.353700][ T1229] TC_ACT_REPEAT abuse ? [ 228.692669][T10555] tipc: Enabling of bearer rejected, failed to enable media [ 228.731828][T10560] netlink: 'syz.3.1295': attribute type 9 has an invalid length. [ 229.030573][T10572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1301'. [ 229.141707][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 229.376418][T10590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1303'. [ 229.396273][T10590] netlink: 'syz.3.1303': attribute type 7 has an invalid length. [ 229.404054][T10590] netlink: 'syz.3.1303': attribute type 8 has an invalid length. [ 229.422498][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1303'. [ 229.492711][T10590] erspan0: entered promiscuous mode [ 229.510654][T10590] batadv_slave_1: entered promiscuous mode [ 229.543890][T10590] erspan0: left promiscuous mode [ 229.544456][T10602] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1306'. [ 229.561233][T10590] batadv_slave_1: left promiscuous mode [ 229.956812][T10616] team0: Device ip6gre3 is up. Set it down before adding it as a team port [ 230.093587][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 230.187554][T10626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1314'. [ 230.207073][T10626] netlink: 'syz.1.1314': attribute type 7 has an invalid length. [ 230.252801][ T1229] TC_ACT_REPEAT abuse ? [ 230.258577][T10626] netlink: 'syz.1.1314': attribute type 8 has an invalid length. [ 230.284599][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 230.357307][T10646] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.1317'. [ 230.479644][T10651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1320'. [ 230.505802][T10652] netlink: 'syz.2.1320': attribute type 2 has an invalid length. [ 230.514566][T10649] netlink: 'syz.4.1318': attribute type 1 has an invalid length. [ 230.536377][T10649] block nbd1: not configured, cannot reconfigure [ 230.930359][T10681] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 230.991973][T10681] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 231.230903][T10698] C: renamed from lo (while UP) [ 231.252285][T10698] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 231.531401][T10709] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 232.097191][T10741] netlink: 'syz.2.1345': attribute type 10 has an invalid length. [ 232.135749][T10743] netlink: 'syz.4.1343': attribute type 16 has an invalid length. [ 232.211409][T10741] team0: Port device geneve0 added [ 232.466647][T10743] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 232.483036][T10743] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 232.699230][T10743] ip6gre1: left allmulticast mode [ 232.714127][ T5980] TC_ACT_REPEAT abuse ? [ 232.732522][T10743] ip6gre2: left allmulticast mode [ 232.771712][T10743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.842419][T10743] macvtap1: left promiscuous mode [ 232.849904][T10743] vlan0: left promiscuous mode [ 232.858592][T10743] macvtap1: left allmulticast mode [ 232.863891][T10743] vlan0: left allmulticast mode [ 232.869802][T10743] veth0_vlan: left allmulticast mode [ 232.883593][T10743] veth0_macvtap: entered promiscuous mode [ 232.905929][ T74] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.914446][ T74] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.013608][ T74] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.056116][ T74] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.159123][ T5980] TC_ACT_REPEAT abuse ? [ 233.718327][ T30] audit: type=1800 audit(1758162413.692:6): pid=10809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1355" name="memory.events" dev="tmpfs" ino=1460 res=0 errno=0 [ 233.894361][T10795] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 233.973676][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.003737][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 234.028450][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.037921][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 234.064541][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.099265][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 234.368994][T10831] bond4: entered promiscuous mode [ 234.375049][T10831] bond4: entered allmulticast mode [ 234.384174][T10831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.682309][T10854] __nla_validate_parse: 20 callbacks suppressed [ 234.682327][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1369'. [ 234.921296][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 234.931600][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 234.952837][T10865] validate_nla: 2 callbacks suppressed [ 234.952853][T10865] netlink: 'syz.4.1371': attribute type 3 has an invalid length. [ 235.123498][T10878] netlink: 'syz.2.1376': attribute type 1 has an invalid length. [ 235.124731][T10875] syzkaller1: entered promiscuous mode [ 235.161103][T10875] syzkaller1: entered allmulticast mode [ 236.129134][T10918] netlink: 'syz.4.1390': attribute type 4 has an invalid length. [ 236.258317][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 236.519874][T10924] syzkaller1: entered promiscuous mode [ 236.536737][T10924] syzkaller1: entered allmulticast mode [ 236.777590][T10941] netlink: 'syz.0.1396': attribute type 1 has an invalid length. [ 237.040663][T10941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.383550][T10979] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1405'. [ 237.392842][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1405'. [ 237.420103][T10975] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1406'. [ 237.623021][T10990] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1409'. [ 237.663974][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 237.764533][T10994] syzkaller1: entered promiscuous mode [ 237.782771][T10994] syzkaller1: entered allmulticast mode [ 238.213191][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1416'. [ 298.175263][T11034] netlink: 'syz.1.1418': attribute type 4 has an invalid length. [ 298.344119][T11045] netlink: 'syz.1.1424': attribute type 29 has an invalid length. [ 298.384543][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 298.863553][T11067] pim6reg: entered allmulticast mode [ 298.892819][T11063] syzkaller1: entered promiscuous mode [ 298.917147][T11063] syzkaller1: entered allmulticast mode [ 299.328807][T11078] scsi_nl_rcv_msg: discarding partial skb [ 299.379014][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1432'. [ 299.498786][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 299.529282][T11088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1432'. [ 299.739187][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'. [ 300.047415][T11125] syzkaller0: entered promiscuous mode [ 300.066900][T11125] syzkaller0: entered allmulticast mode [ 300.092222][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'. [ 300.118325][T11129] syzkaller1: entered promiscuous mode [ 300.124126][T11129] syzkaller1: entered allmulticast mode [ 300.162741][T11130] hsr_slave_0: left promiscuous mode [ 300.185521][T11130] hsr_slave_1: left promiscuous mode [ 300.472616][T11140] Can't find ip_set type hash:nt,port [ 300.922545][T11172] netlink: 'syz.1.1456': attribute type 1 has an invalid length. [ 301.178759][T11172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.190890][T11179] netlink: 'syz.2.1457': attribute type 29 has an invalid length. [ 301.230225][T11183] netlink: 'syz.2.1457': attribute type 29 has an invalid length. [ 301.375767][T11192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1461'. [ 301.450607][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 301.535641][T11202] syzkaller1: entered promiscuous mode [ 301.541259][T11202] syzkaller1: entered allmulticast mode [ 302.349570][T11247] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1473'. [ 302.528983][T11256] netlink: del zone limit has 4 unknown bytes [ 303.446226][T11269] netlink: 'syz.4.1480': attribute type 11 has an invalid length. [ 303.454095][T11269] netlink: 'syz.4.1480': attribute type 11 has an invalid length. [ 303.484306][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1482'. [ 303.495952][T11269] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1480'. [ 303.513102][T11268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1481'. [ 303.535477][T11275] syzkaller1: entered promiscuous mode [ 303.543738][T11275] syzkaller1: entered allmulticast mode [ 303.612104][T11279] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 303.645538][T11279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.125816][T11298] tunl0: left promiscuous mode [ 304.164594][T11298] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.197182][T11298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.683620][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 304.778247][T11320] netlink: 10092 bytes leftover after parsing attributes in process `syz.2.1494'. [ 304.960867][T11329] syzkaller1: entered promiscuous mode [ 304.976859][T11329] syzkaller1: entered allmulticast mode [ 305.225877][T11346] netlink: 'syz.1.1501': attribute type 30 has an invalid length. [ 306.026492][T11388] syzkaller1: entered promiscuous mode [ 306.032196][T11388] syzkaller1: entered allmulticast mode [ 306.184601][T11392] nbd: must specify a device to reconfigure [ 307.004335][T11428] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.111352][T11428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.121149][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1527'. [ 307.329466][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.344766][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 307.382313][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.416196][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 307.450663][T11439] syzkaller1: entered promiscuous mode [ 307.465483][T11439] syzkaller1: entered allmulticast mode [ 307.492300][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.513515][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 307.590536][T11455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.602114][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 307.606262][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.626722][T11457] x_tables: ip_tables: udp match: only valid for protocol 17 [ 307.629575][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 308.385488][T11495] syzkaller1: entered promiscuous mode [ 308.396541][T11495] syzkaller1: entered allmulticast mode [ 308.401228][T11498] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1546'. [ 308.406982][T11496] netlink: 'syz.0.1544': attribute type 4 has an invalid length. [ 308.595971][T11504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.603237][T11504] IPv6: NLM_F_CREATE should be set when creating new route [ 308.672442][T11508] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1550'. [ 308.796492][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 308.839902][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 308.839921][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 309.216801][T11539] syzkaller1: entered promiscuous mode [ 309.231373][T11539] syzkaller1: entered allmulticast mode [ 309.539755][T11542] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1561'. [ 309.943866][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 310.231015][T11568] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 310.259625][T11568] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 310.314327][T11568] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 310.359870][T11568] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 310.401987][T11568] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1570'. [ 310.605356][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'. [ 310.688130][T11580] syzkaller1: entered promiscuous mode [ 310.715095][T11580] syzkaller1: entered allmulticast mode [ 310.853639][T11592] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 311.272447][T11615] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 311.473337][T11626] block nbd0: Unsupported socket: shutdown callout must be supported. [ 311.503370][T11615] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.515731][T11601] block nbd1: Unsupported socket: shutdown callout must be supported. [ 311.676284][T11619] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.684624][T11619] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 311.702587][T11619] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 312.007277][T11644] syzkaller1: entered promiscuous mode [ 312.023157][T11644] syzkaller1: entered allmulticast mode [ 312.094104][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 312.134410][T11650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1592'. [ 312.603491][T11681] ip6tnl1: entered promiscuous mode [ 313.350789][T11716] syzkaller1: entered promiscuous mode [ 313.362981][T11716] syzkaller1: entered allmulticast mode [ 313.787680][T11735] __nla_validate_parse: 7 callbacks suppressed [ 313.787702][T11735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1617'. [ 313.841328][T11737] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1618'. [ 314.691066][T11764] syzkaller1: entered promiscuous mode [ 314.706855][T11767] openvswitch: netlink: Missing key (keys=40, expected=100) [ 314.716537][T11764] syzkaller1: entered allmulticast mode [ 314.728832][T11771] openvswitch: netlink: Missing key (keys=40, expected=100) [ 314.820543][T11780] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 315.029285][T11789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 315.288024][T11809] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1640'. [ 315.414238][T11813] erspan0: entered promiscuous mode [ 315.445229][T11813] erspan0: entered allmulticast mode [ 315.533997][T11820] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1645'. [ 315.571989][T11821] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1645'. [ 315.584484][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1646'. [ 316.045871][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 316.442054][T11861] syzkaller1: entered promiscuous mode [ 316.463498][T11861] syzkaller1: entered allmulticast mode [ 316.575889][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 316.970699][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'. [ 317.042289][T11889] netlink: 'syz.2.1670': attribute type 1 has an invalid length. [ 317.080213][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.090481][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.100525][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.111692][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.119920][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.495814][T11893] chnl_net:caif_netlink_parms(): no params data found [ 317.582518][T11893] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.589882][T11893] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.597486][T11893] bridge_slave_0: entered allmulticast mode [ 317.605819][T11893] bridge_slave_0: entered promiscuous mode [ 317.613666][T11893] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.621561][T11893] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.631049][T11893] bridge_slave_1: entered allmulticast mode [ 317.639545][T11893] bridge_slave_1: entered promiscuous mode [ 317.722647][T11893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.736429][T11893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.821008][T11893] team0: Port device team_slave_0 added [ 317.830225][T11893] team0: Port device team_slave_1 added [ 317.837238][T11926] syzkaller1: entered promiscuous mode [ 317.842734][T11926] syzkaller1: entered allmulticast mode [ 317.903462][T11893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.911739][T11893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.940509][T11893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.954529][T11893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.961736][T11893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.989209][T11893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.088618][T11893] hsr_slave_0: entered promiscuous mode [ 318.145752][T11893] hsr_slave_1: entered promiscuous mode [ 318.165704][T11893] debugfs: 'hsr0' already exists in 'hsr' [ 318.181389][T11893] Cannot create hsr debugfs directory [ 318.316842][T11938] pim6reg: left allmulticast mode [ 318.801614][T11893] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.820960][T11893] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.832963][T11959] syzkaller1: entered promiscuous mode [ 318.838622][T11959] syzkaller1: entered allmulticast mode [ 318.863476][T11893] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.890680][T11893] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 319.043703][T11970] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 319.082018][T11893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.140181][T11893] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.181142][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.188438][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.205539][ T5185] Bluetooth: hci0: command tx timeout [ 319.249152][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.256418][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.320448][T11982] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 319.328892][T11982] __nla_validate_parse: 5 callbacks suppressed [ 319.328911][T11982] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1694'. [ 319.350175][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 319.361533][T11982] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 319.370739][T11982] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1694'. [ 319.382660][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 319.558394][T11993] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1696'. [ 319.654185][T12001] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1698'. [ 319.679896][T12001] openvswitch: netlink: Flow key attr not present in new flow. [ 319.789305][T12007] syzkaller1: entered promiscuous mode [ 319.811298][T12007] syzkaller1: entered allmulticast mode [ 319.991600][T11893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.188022][T12027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.423087][T12037] vlan3: entered allmulticast mode [ 320.434179][T12037] bridge_slave_0: entered allmulticast mode [ 320.769744][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'. [ 320.930936][T12055] syzkaller1: entered promiscuous mode [ 320.942137][T12055] syzkaller1: entered allmulticast mode [ 321.087985][T11893] veth0_vlan: entered promiscuous mode [ 321.111583][T11893] veth1_vlan: entered promiscuous mode [ 321.225538][T12074] tipc: Enabled bearer , priority 0 [ 321.240558][T11893] veth0_macvtap: entered promiscuous mode [ 321.249701][T12072] tipc: Enabling of bearer rejected, already enabled [ 321.259394][T12074] syzkaller0: entered promiscuous mode [ 321.264987][T12074] syzkaller0: entered allmulticast mode [ 321.277954][T11893] veth1_macvtap: entered promiscuous mode [ 321.287730][ T5185] Bluetooth: hci0: command tx timeout [ 321.296431][T12072] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 321.343578][T12072] tipc: Resetting bearer [ 321.397050][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 321.428093][T11893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.450114][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 321.462193][T12072] netlink: 'syz.1.1716': attribute type 21 has an invalid length. [ 321.478309][T11893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.489632][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'. [ 321.516237][ T74] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.546790][ T74] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.589162][T12072] netlink: 'syz.1.1716': attribute type 21 has an invalid length. [ 321.609217][ T74] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.621196][ T74] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.634113][ T74] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.653755][ T74] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.701525][T12071] tipc: Resetting bearer [ 321.775724][T12071] tipc: Disabling bearer [ 321.848134][ T74] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.869308][ T74] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.028806][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.037385][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.209972][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.233045][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.639278][T12111] syzkaller1: entered promiscuous mode [ 322.677773][T12111] syzkaller1: entered allmulticast mode [ 322.707124][T12120] netlink: 'syz.2.1730': attribute type 13 has an invalid length. [ 322.743482][T12120] netlink: 'syz.2.1730': attribute type 58 has an invalid length. [ 323.366101][ T5185] Bluetooth: hci0: command tx timeout [ 323.540567][T12163] syzkaller1: entered promiscuous mode [ 323.558753][T12163] syzkaller1: entered allmulticast mode [ 323.731687][T12170] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 323.948237][T12194] xt_socket: unknown flags 0xd0 [ 324.199346][T12204] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 324.570466][T12216] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 324.602124][T12216] __nla_validate_parse: 7 callbacks suppressed [ 324.602142][T12216] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1759'. [ 324.647813][T12217] syzkaller1: entered promiscuous mode [ 324.661924][T12217] syzkaller1: entered allmulticast mode [ 324.711195][T12220] tipc: Started in network mode [ 324.732772][T12220] tipc: Node identity 5a92956b9f5f, cluster identity 4711 [ 324.765899][T12220] tipc: Enabled bearer , priority 0 [ 324.885381][T12220] syzkaller0: entered promiscuous mode [ 324.890918][T12220] syzkaller0: entered allmulticast mode [ 324.903188][T12220] tipc: Resetting bearer [ 324.912198][T12219] tipc: Resetting bearer [ 324.931822][T12219] tipc: Disabling bearer [ 325.017606][T12235] netlink: 'syz.1.1766': attribute type 27 has an invalid length. [ 325.060257][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 325.308038][T12246] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1768'. [ 325.350193][T12246] gretap0: entered promiscuous mode [ 325.366520][T12249] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1768'. [ 325.448859][ T5185] Bluetooth: hci0: command tx timeout [ 325.509202][T12249] 0ªî{X¹¦: renamed from gretap0 [ 325.529539][T12249] 0ªî{X¹¦: left promiscuous mode [ 325.545163][T12249] 0ªî{X¹¦: entered allmulticast mode [ 325.561344][T12249] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 325.827437][T12266] team0: Device vti0 is of different type [ 325.963339][T12279] netlink: 'syz.5.1777': attribute type 1 has an invalid length. [ 326.078234][T12273] syzkaller1: entered promiscuous mode [ 326.084010][T12273] syzkaller1: entered allmulticast mode [ 326.841354][T12319] tipc: Enabled bearer , priority 0 [ 326.877500][T12319] tipc: Resetting bearer [ 326.966818][T12325] syzkaller1: entered promiscuous mode [ 326.972344][T12325] syzkaller1: entered allmulticast mode [ 327.301047][T12343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1800'. [ 327.704512][T12369] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1808'. [ 327.715959][T12363] netlink: 'syz.3.1804': attribute type 1 has an invalid length. [ 327.760574][T12363] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1804'. [ 327.813922][T12369] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1808'. [ 327.848225][T12369] gretap0: entered promiscuous mode [ 327.920061][T12375] syzkaller1: entered promiscuous mode [ 327.947318][T12375] syzkaller1: entered allmulticast mode [ 328.060599][T12379] netlink: 'syz.1.1813': attribute type 2 has an invalid length. [ 328.313685][T12391] netlink: 'syz.2.1817': attribute type 11 has an invalid length. [ 328.473806][T12400] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 328.655926][T12404] tipc: Enabling of bearer rejected, failed to enable media [ 328.992487][T12426] syzkaller1: entered promiscuous mode [ 328.998712][T12426] syzkaller1: entered allmulticast mode [ 329.089232][T12436] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 329.307700][T12450] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 329.326920][T12450] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 329.352537][T12450] tipc: Resetting bearer [ 329.405265][T12450] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1832'. [ 329.459657][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1832'. [ 329.602664][ T12] tipc: Resetting bearer [ 329.683482][T12474] netlink: 'syz.2.1841': attribute type 1 has an invalid length. [ 329.727427][T12474] __nla_validate_parse: 1 callbacks suppressed [ 329.727443][T12474] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1841'. [ 329.784413][T12478] openvswitch: netlink: Tunnel attr 10 has unexpected len 1 expected 2 [ 330.146912][T12489] syzkaller1: entered promiscuous mode [ 330.152510][T12489] syzkaller1: entered allmulticast mode [ 330.485308][ T5185] Bluetooth: hci2: command tx timeout [ 330.562709][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1854'. [ 330.577859][T12521] netlink: 'syz.2.1855': attribute type 1 has an invalid length. [ 330.596460][T12521] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1855'. [ 330.623025][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 331.097902][T12543] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 331.121285][T12543] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1862'. [ 331.223803][T12549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 331.415721][T12557] syzkaller1: entered promiscuous mode [ 331.425219][T12557] syzkaller1: entered allmulticast mode [ 331.585852][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 331.612697][T12562] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1869'. [ 331.761834][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1872'. [ 332.134031][T12601] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1874'. [ 332.473845][T12612] netem: incorrect gi model size [ 332.481897][T12612] netem: change failed [ 332.969107][T12625] syzkaller1: entered promiscuous mode [ 332.974741][T12625] syzkaller1: entered allmulticast mode [ 333.017263][T12632] C: entered allmulticast mode [ 333.279288][T12641] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 333.483250][T12645] bridge8: entered promiscuous mode [ 333.502719][T12645] bridge8: entered allmulticast mode [ 333.865622][T12640] syzkaller1: entered promiscuous mode [ 333.871293][T12640] syzkaller1: entered allmulticast mode [ 334.490775][T12682] netlink: 'syz.2.1902': attribute type 4 has an invalid length. [ 334.561306][T12687] syzkaller1: entered promiscuous mode [ 334.578966][T12687] syzkaller1: entered allmulticast mode [ 335.501363][T12723] __nla_validate_parse: 5 callbacks suppressed [ 335.501383][T12723] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1915'. [ 335.555402][T12721] netlink: 'syz.4.1914': attribute type 10 has an invalid length. [ 335.591531][T12724] netlink: 'syz.4.1914': attribute type 10 has an invalid length. [ 335.653019][T12721] bond0: (slave dummy0): Releasing backup interface [ 335.699904][T12721] team0: Port device dummy0 added [ 335.760768][T12727] netlink: 'syz.4.1914': attribute type 3 has an invalid length. [ 335.795905][T12735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1917'. [ 336.463788][T12762] Bluetooth: MGMT ver 1.23 [ 336.629565][T12768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1923'. [ 336.664254][T12749] syzkaller1: entered promiscuous mode [ 336.671700][T12749] syzkaller1: entered allmulticast mode [ 336.839946][T12768] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1923'. [ 337.050093][T12779] openvswitch: netlink: Actions may not be safe on all matching packets [ 337.107495][T12779] netlink: 'syz.3.1928': attribute type 1 has an invalid length. [ 337.115496][T12779] netlink: 'syz.3.1928': attribute type 4 has an invalid length. [ 337.121304][T12787] tipc: New replicast peer: 255.255.255.255 [ 337.123250][T12779] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1928'. [ 337.132560][T12787] tipc: Enabled bearer , priority 10 [ 337.229691][T12787] team0: No ports can be present during mode change [ 337.452931][T12800] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 337.473211][T12800] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 337.541800][T12800] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 337.563942][T12812] netlink: 'syz.4.1934': attribute type 83 has an invalid length. [ 337.686467][T12813] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 337.894368][T12830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1941'. [ 337.965960][T12831] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1941'. [ 337.976591][T12831] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1941'. [ 338.246278][ T5994] tipc: Node number set to 3318584683 [ 339.540421][T12823] syzkaller1: entered promiscuous mode [ 339.546320][T12823] syzkaller1: entered allmulticast mode [ 339.774397][T12874] tipc: Enabled bearer , priority 0 [ 339.837455][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 339.990775][T12882] sctp: [Deprecated]: syz.5.1953 (pid 12882) Use of int in max_burst socket option deprecated. [ 339.990775][T12882] Use struct sctp_assoc_value instead [ 340.033147][T12871] tipc: Disabling bearer [ 340.190981][T12895] tipc: Enabling of bearer rejected, failed to enable media [ 340.366717][T12904] FAULT_INJECTION: forcing a failure. [ 340.366717][T12904] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 340.403651][T12904] CPU: 1 UID: 0 PID: 12904 Comm: syz.5.1959 Not tainted syzkaller #0 PREEMPT(full) [ 340.403682][T12904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.403703][T12904] Call Trace: [ 340.403713][T12904] [ 340.403722][T12904] dump_stack_lvl+0x189/0x250 [ 340.403755][T12904] ? __pfx____ratelimit+0x10/0x10 [ 340.403779][T12904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.403805][T12904] ? __pfx__printk+0x10/0x10 [ 340.403835][T12904] ? __might_fault+0xb0/0x130 [ 340.403877][T12904] should_fail_ex+0x414/0x560 [ 340.403915][T12904] _copy_from_user+0x2d/0xb0 [ 340.403945][T12904] ___sys_sendmsg+0x158/0x2a0 [ 340.403976][T12904] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.404052][T12904] ? __fget_files+0x2a/0x420 [ 340.404070][T12904] ? __fget_files+0x3a0/0x420 [ 340.404100][T12904] __sys_sendmmsg+0x227/0x430 [ 340.404133][T12904] ? __pfx___sys_sendmmsg+0x10/0x10 [ 340.404158][T12904] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 340.404210][T12904] ? ksys_write+0x22a/0x250 [ 340.404241][T12904] ? __pfx_ksys_write+0x10/0x10 [ 340.404266][T12904] ? rcu_is_watching+0x15/0xb0 [ 340.404295][T12904] __x64_sys_sendmmsg+0xa0/0xc0 [ 340.404324][T12904] do_syscall_64+0xfa/0x3b0 [ 340.404347][T12904] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.404368][T12904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.404407][T12904] ? clear_bhb_loop+0x60/0xb0 [ 340.404434][T12904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.404460][T12904] RIP: 0033:0x7f647438eba9 [ 340.404485][T12904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.404504][T12904] RSP: 002b:00007f6475138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 340.404532][T12904] RAX: ffffffffffffffda RBX: 00007f64745d5fa0 RCX: 00007f647438eba9 [ 340.404547][T12904] RDX: 0000000000000003 RSI: 0000200000003300 RDI: 0000000000000003 [ 340.404561][T12904] RBP: 00007f6475138090 R08: 0000000000000000 R09: 0000000000000000 [ 340.404574][T12904] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 340.404587][T12904] R13: 00007f64745d6038 R14: 00007f64745d5fa0 R15: 00007ffe0d727f58 [ 340.404625][T12904] [ 340.737177][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 340.800586][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1961'. [ 340.810041][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1961'. [ 340.917306][T12917] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1963'. [ 340.967826][T12922] syzkaller1: entered promiscuous mode [ 340.973349][T12922] syzkaller1: entered allmulticast mode [ 341.040718][ T30] audit: type=1800 audit(1758162521.032:7): pid=12926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1965" name="memory.events" dev="tmpfs" ino=1813 res=0 errno=0 [ 341.081374][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1965'. [ 341.115013][ T30] audit: type=1804 audit(1758162521.032:8): pid=12926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1965" name="/newroot/354/memory.events" dev="tmpfs" ino=1813 res=1 errno=0 [ 341.676436][T12948] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1970'. [ 342.092830][T12963] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 342.263504][T12970] syzkaller1: entered promiscuous mode [ 342.307400][T12970] syzkaller1: entered allmulticast mode [ 342.417273][T12979] netlink: 'syz.3.1983': attribute type 1 has an invalid length. [ 342.449650][T12978] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1983'. [ 342.496704][T12978] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1983'. [ 342.514541][T12978] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1983'. [ 403.685609][T13011] openvswitch: netlink: Flow key attr not present in new flow. [ 404.002794][T13025] syzkaller1: entered promiscuous mode [ 404.019802][T13025] syzkaller1: entered allmulticast mode [ 404.249813][T13037] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 404.600565][T13053] IPv6: sit2: Disabled Multicast RS [ 404.608426][T13053] sit2: entered allmulticast mode [ 404.686375][T13056] netlink: 'syz.3.2008': attribute type 10 has an invalid length. [ 404.752057][T13062] netlink: 'syz.3.2008': attribute type 10 has an invalid length. [ 404.829386][T13056] dummy0: entered promiscuous mode [ 404.867005][T13056] team0: Port device dummy0 added [ 404.877540][T13065] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 404.922874][T13062] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 405.018186][T13065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2011'. [ 405.019276][T13062] dummy0: left promiscuous mode [ 405.055188][T13062] team0: Failed to send options change via netlink (err -105) [ 405.063060][T13062] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 405.073842][T13062] team0: Port device dummy0 removed [ 405.090619][T13062] dummy0: entered promiscuous mode [ 405.098975][T13062] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 405.216413][T13083] syzkaller1: entered promiscuous mode [ 405.235957][T13083] syzkaller1: entered allmulticast mode [ 405.302984][T13086] netlink: 'syz.3.2016': attribute type 10 has an invalid length. [ 405.664275][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 405.682548][T13109] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 405.753767][T13109] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 405.784119][T13109] gretap0: entered promiscuous mode [ 405.796469][T13109] gretap0: entered allmulticast mode [ 405.974604][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 406.009284][T13126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2026'. [ 406.050832][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 406.258007][T13135] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2029'. [ 406.356739][T13137] netlink: 'syz.1.2030': attribute type 29 has an invalid length. [ 406.402446][T13137] netlink: 'syz.1.2030': attribute type 29 has an invalid length. [ 406.454340][T13148] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2030'. [ 406.484711][T13147] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2031'. [ 406.597553][T13152] syzkaller1: entered promiscuous mode [ 406.625193][T13152] syzkaller1: entered allmulticast mode [ 407.002393][T13171] bridge7: entered promiscuous mode [ 407.037511][T13171] bridge7: entered allmulticast mode [ 407.056681][T13178] netlink: 'syz.1.2041': attribute type 4 has an invalid length. [ 407.076932][T13177] tipc: Cannot configure node identity twice [ 407.607049][T13206] netlink: 'syz.4.2047': attribute type 31 has an invalid length. [ 407.787350][T13216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2049'. [ 407.801417][T13213] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2051'. [ 408.028231][T13227] syzkaller1: entered promiscuous mode [ 408.043114][T13227] syzkaller1: entered allmulticast mode [ 408.066717][T13231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.657652][T13258] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 408.967826][T13267] syzkaller1: entered promiscuous mode [ 408.988253][T13267] syzkaller1: entered allmulticast mode [ 409.052583][T13269] syz.4.2070: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 409.089403][T13269] CPU: 0 UID: 0 PID: 13269 Comm: syz.4.2070 Not tainted syzkaller #0 PREEMPT(full) [ 409.089433][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.089457][T13269] Call Trace: [ 409.089466][T13269] [ 409.089476][T13269] dump_stack_lvl+0x189/0x250 [ 409.089511][T13269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.089537][T13269] ? __pfx__printk+0x10/0x10 [ 409.089575][T13269] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 409.089601][T13269] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 409.089628][T13269] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 409.089657][T13269] warn_alloc+0x214/0x310 [ 409.089697][T13269] ? __pfx_warn_alloc+0x10/0x10 [ 409.089740][T13269] ? __get_vm_area_node+0x28f/0x300 [ 409.089771][T13269] ? hash_net_create+0x358/0xfe0 [ 409.089798][T13269] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 409.089829][T13269] ? do_syscall_64+0xfa/0x3b0 [ 409.089884][T13269] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 409.089922][T13269] ? rcu_is_watching+0x15/0xb0 [ 409.089947][T13269] ? hash_net_create+0x358/0xfe0 [ 409.089985][T13269] ? hash_net_create+0x358/0xfe0 [ 409.090004][T13269] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 409.090035][T13269] ? hash_net_create+0x358/0xfe0 [ 409.090058][T13269] ? hash_net_create+0x2fe/0xfe0 [ 409.090085][T13269] hash_net_create+0x358/0xfe0 [ 409.090116][T13269] ? __nla_parse+0x40/0x60 [ 409.090140][T13269] ? __pfx_hash_net_create+0x10/0x10 [ 409.090163][T13269] ip_set_create+0xa94/0x1940 [ 409.090194][T13269] ? ip_set_create+0x4a2/0x1940 [ 409.090237][T13269] ? __pfx_ip_set_create+0x10/0x10 [ 409.090303][T13269] nfnetlink_rcv_msg+0xb4d/0x1130 [ 409.090339][T13269] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 409.090391][T13269] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 409.090456][T13269] ? __lock_acquire+0xab9/0xd20 [ 409.090510][T13269] netlink_rcv_skb+0x208/0x470 [ 409.090534][T13269] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 409.090578][T13269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.090613][T13269] ? bpf_lsm_capable+0x9/0x20 [ 409.090641][T13269] ? security_capable+0x7e/0x2e0 [ 409.090682][T13269] nfnetlink_rcv+0x26a/0x2520 [ 409.090716][T13269] ? is_bpf_text_address+0x26/0x2b0 [ 409.090752][T13269] ? kernel_text_address+0xa5/0xe0 [ 409.090796][T13269] ? __kernel_text_address+0xd/0x40 [ 409.090825][T13269] ? unwind_get_return_address+0x4d/0x90 [ 409.090849][T13269] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 409.090876][T13269] ? arch_stack_walk+0xfc/0x150 [ 409.090917][T13269] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 409.090951][T13269] ? stack_depot_save_flags+0x40/0x860 [ 409.090988][T13269] ? __lock_acquire+0xab9/0xd20 [ 409.091048][T13269] ? __lock_acquire+0xab9/0xd20 [ 409.091090][T13269] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.091120][T13269] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.091152][T13269] netlink_unicast+0x82f/0x9e0 [ 409.091213][T13269] ? __pfx_netlink_unicast+0x10/0x10 [ 409.091264][T13269] ? netlink_sendmsg+0x642/0xb30 [ 409.091285][T13269] ? skb_put+0x11b/0x210 [ 409.091314][T13269] netlink_sendmsg+0x805/0xb30 [ 409.091348][T13269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.091375][T13269] ? aa_sock_msg_perm+0xf1/0x1d0 [ 409.091398][T13269] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.091420][T13269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.091444][T13269] __sock_sendmsg+0x21c/0x270 [ 409.091481][T13269] ____sys_sendmsg+0x505/0x830 [ 409.091515][T13269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.091552][T13269] ? import_iovec+0x74/0xa0 [ 409.091592][T13269] ___sys_sendmsg+0x21f/0x2a0 [ 409.091623][T13269] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.091690][T13269] ? __fget_files+0x2a/0x420 [ 409.091708][T13269] ? __fget_files+0x3a0/0x420 [ 409.091739][T13269] __x64_sys_sendmsg+0x19b/0x260 [ 409.091770][T13269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.091809][T13269] ? rcu_is_watching+0x15/0xb0 [ 409.091837][T13269] ? do_syscall_64+0xbe/0x3b0 [ 409.091864][T13269] do_syscall_64+0xfa/0x3b0 [ 409.091887][T13269] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.091908][T13269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.091929][T13269] ? clear_bhb_loop+0x60/0xb0 [ 409.091956][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.091976][T13269] RIP: 0033:0x7ff76078eba9 [ 409.091996][T13269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.092016][T13269] RSP: 002b:00007ff7616e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.092039][T13269] RAX: ffffffffffffffda RBX: 00007ff7609d5fa0 RCX: 00007ff76078eba9 [ 409.092055][T13269] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 409.092068][T13269] RBP: 00007ff760811e19 R08: 0000000000000000 R09: 0000000000000000 [ 409.092082][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.092113][T13269] R13: 00007ff7609d6038 R14: 00007ff7609d5fa0 R15: 00007fff42209388 [ 409.092161][T13269] [ 409.150827][T13269] Mem-Info: [ 409.249320][T13282] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 409.310874][T13269] active_anon:4679 inactive_anon:0 isolated_anon:0 [ 409.310874][T13269] active_file:3346 inactive_file:39945 isolated_file:0 [ 409.310874][T13269] unevictable:768 dirty:58 writeback:0 [ 409.310874][T13269] slab_reclaimable:11144 slab_unreclaimable:109527 [ 409.310874][T13269] mapped:29446 shmem:1367 pagetables:1050 [ 409.310874][T13269] sec_pagetables:0 bounce:0 [ 409.310874][T13269] kernel_misc_reclaimable:0 [ 409.310874][T13269] free:1321008 free_pcp:14542 free_cma:0 [ 409.645334][T13269] Node 0 active_anon:19316kB inactive_anon:0kB active_file:13384kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126084kB dirty:232kB writeback:0kB shmem:4132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12204kB pagetables:4344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.681658][T13269] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.712843][T13269] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.742273][T13269] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 409.748504][T13269] Node 0 DMA32 free:1382116kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18968kB inactive_anon:0kB active_file:13384kB inactive_file:158000kB unevictable:1536kB writepending:232kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:36392kB local_pcp:19964kB free_cma:0kB [ 409.793581][T13269] lowmem_reserve[]: 0 0 1 1 1 [ 409.820481][T13269] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 409.854202][T13269] lowmem_reserve[]: 0 0 0 0 0 [ 409.881847][T13269] Node 1 Normal free:3886544kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21792kB local_pcp:13568kB free_cma:0kB [ 409.997109][T13269] lowmem_reserve[]: 0 0 0 0 0 [ 410.002438][T13269] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 410.003400][T13282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.016611][T13269] Node 0 DMA32: 1661*4kB (UME) 649*8kB (UM) 161*16kB (UME) 345*32kB (UME) 37*64kB (UME) 82*128kB (UME) 75*256kB (UM) 43*512kB (UM) 22*1024kB (UM) 11*2048kB (UME) 307*4096kB (UM) = 1382060kB [ 410.045495][T13269] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 410.062824][T13269] Node 1 Normal: 204*4kB (UE) 52*8kB (UME) 50*16kB (UME) 83*32kB (UME) 24*64kB (UME) 9*128kB (UME) 5*256kB (UM) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3886544kB [ 410.083797][T13269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.116435][T13269] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.129485][T13286] veth7: entered promiscuous mode [ 410.156987][T13269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.185222][T13269] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.214018][T13269] 44783 total pagecache pages [ 410.261150][T13269] 0 pages in swap cache [ 410.274939][T13269] Free swap = 124996kB [ 410.291294][T13269] Total swap = 124996kB [ 410.299723][T13308] ip6gre2: entered allmulticast mode [ 410.304731][T13269] 2097051 pages RAM [ 410.344050][T13269] 0 pages HighMem/MovableOnly [ 410.363288][T13315] sctp: [Deprecated]: syz.5.2082 (pid 13315) Use of int in maxseg socket option. [ 410.363288][T13315] Use struct sctp_assoc_value instead [ 410.394972][T13269] 425670 pages reserved [ 410.399185][T13269] 0 pages cma reserved [ 410.678819][T13330] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 410.909612][T13342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.016970][T13346] __nla_validate_parse: 7 callbacks suppressed [ 411.016986][T13346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2091'. [ 411.045514][T13346] vlan2: entered allmulticast mode [ 411.050798][T13346] bridge0: entered allmulticast mode [ 411.191916][T13349] netlink: 'syz.3.2094': attribute type 21 has an invalid length. [ 411.203258][T13349] netlink: 'syz.3.2094': attribute type 22 has an invalid length. [ 411.218884][T13351] netlink: 'syz.5.2093': attribute type 1 has an invalid length. [ 411.220390][T13349] netlink: 'syz.3.2094': attribute type 23 has an invalid length. [ 411.241782][T13351] netlink: 'syz.5.2093': attribute type 1 has an invalid length. [ 411.246770][T13349] netlink: 'syz.3.2094': attribute type 25 has an invalid length. [ 411.263732][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2094'. [ 411.286067][T13349] netlink: 'syz.3.2094': attribute type 26 has an invalid length. [ 411.315790][T13349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2094'. [ 411.679626][T13366] netlink: 'syz.5.2099': attribute type 10 has an invalid length. [ 411.694218][T13366] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2099'. [ 411.782676][T13366] team0: Port device geneve0 added [ 411.788868][ T5235] udevd[5235]: worker [13112] terminated by signal 33 (Unknown signal 33) [ 411.820959][ T5235] udevd[5235]: worker [13112] failed while handling '/devices/virtual/block/loop1' [ 411.855407][T13372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2101'. [ 411.879848][T13371] netlink: 'syz.1.2101': attribute type 4 has an invalid length. [ 412.075377][T13384] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2105'. [ 412.131785][T13385] xt_l2tp: missing protocol rule (udp|l2tpip) [ 412.254174][T13394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2107'. [ 412.317868][T13403] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2109'. [ 412.365258][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2109'. [ 412.470751][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 412.499370][T13412] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 412.514631][T13412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.249457][T13437] tipc: Enabled bearer , priority 0 [ 464.273646][T13439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2119'. [ 464.316631][T13437] syzkaller0: entered promiscuous mode [ 464.330064][T13437] syzkaller0: entered allmulticast mode [ 464.372834][T13437] tipc: Resetting bearer [ 464.452765][T13441] vlan0: entered allmulticast mode [ 464.494225][T13441] hsr0: entered allmulticast mode [ 464.517533][T13441] hsr_slave_1: entered allmulticast mode [ 464.581835][T13431] tipc: Resetting bearer [ 464.639039][T13431] tipc: Disabling bearer [ 465.213023][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2131'. [ 465.324614][T13485] netlink: 'syz.5.2134': attribute type 10 has an invalid length. [ 465.390497][ T30] audit: type=1107 audit(1758162645.382:9): pid=13486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='QýQ\mSL5˜aÑh}ÕeYT~*…áÑf›žÎAÑi/ª' [ 465.436180][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2134'. [ 465.452486][T13490] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2134'. [ 465.749725][T13498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2139'. [ 465.762950][T13499] netlink: 'syz.5.2138': attribute type 1 has an invalid length. [ 465.847984][T13499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.855122][T13506] netlink: 'syz.3.2140': attribute type 4 has an invalid length. [ 465.913846][T13500] bond1: (slave gretap1): making interface the new active one [ 465.947382][T13500] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 466.119111][T13520] veth0: entered promiscuous mode [ 466.162195][T13516] veth0: left promiscuous mode [ 466.193850][T13525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2143'. [ 466.250095][T13526] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2146'. [ 466.495794][T13533] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 466.850922][T13542] can: request_module (can-proto-0) failed. [ 467.074829][T13560] netlink: 'syz.5.2155': attribute type 11 has an invalid length. [ 467.090636][T13560] netlink: 'syz.5.2155': attribute type 11 has an invalid length. [ 467.098877][T13560] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2155'. [ 467.554272][T13577] IPv6: sit2: Disabled Multicast RS [ 467.567456][T13577] sit2: entered allmulticast mode [ 467.582478][ T30] audit: type=1804 audit(1758162647.572:10): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2159" name="/newroot/86/cgroup.controllers" dev="tmpfs" ino=455 res=1 errno=0 [ 467.654109][ T30] audit: type=1800 audit(1758162647.572:11): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2159" name="cgroup.controllers" dev="tmpfs" ino=455 res=0 errno=0 [ 467.826525][T13585] [ 467.828914][T13585] ====================================================== [ 467.835999][T13585] WARNING: possible circular locking dependency detected [ 467.843041][T13585] syzkaller #0 Not tainted [ 467.847456][T13585] ------------------------------------------------------ [ 467.854470][T13585] syz.2.2161/13585 is trying to acquire lock: [ 467.860535][T13585] ffffffff8e21e7e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 467.870142][T13585] [ 467.870142][T13585] but task is already holding lock: [ 467.877508][T13585] ffff8881437e58f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 467.887816][T13585] [ 467.887816][T13585] which lock already depends on the new lock. [ 467.887816][T13585] [ 467.898216][T13585] [ 467.898216][T13585] the existing dependency chain (in reverse order) is: [ 467.907324][T13585] [ 467.907324][T13585] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 467.915979][T13585] lock_acquire+0x120/0x360 [ 467.921015][T13585] blk_alloc_queue+0x538/0x620 [ 467.926317][T13585] __blk_mq_alloc_disk+0x15c/0x340 [ 467.931975][T13585] nbd_dev_add+0x46c/0xae0 [ 467.936913][T13585] nbd_init+0x168/0x1f0 [ 467.941604][T13585] do_one_initcall+0x233/0x820 [ 467.946923][T13585] do_initcall_level+0x104/0x190 [ 467.952399][T13585] do_initcalls+0x59/0xa0 [ 467.957302][T13585] kernel_init_freeable+0x334/0x4b0 [ 467.963038][T13585] kernel_init+0x1d/0x1d0 [ 467.967898][T13585] ret_from_fork+0x436/0x7d0 [ 467.973014][T13585] ret_from_fork_asm+0x1a/0x30 [ 467.978309][T13585] [ 467.978309][T13585] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 467.985526][T13585] lock_acquire+0x120/0x360 [ 467.990562][T13585] fs_reclaim_acquire+0x72/0x100 [ 467.996016][T13585] prepare_alloc_pages+0x153/0x610 [ 468.001644][T13585] __alloc_frozen_pages_noprof+0x123/0x370 [ 468.007978][T13585] __alloc_pages_noprof+0xa/0x30 [ 468.013454][T13585] pcpu_populate_chunk+0x182/0xb30 [ 468.019116][T13585] pcpu_alloc_noprof+0xcbf/0x1720 [ 468.024674][T13585] bpf_map_alloc_percpu+0xbc/0x1b0 [ 468.030324][T13585] array_map_alloc+0x385/0x700 [ 468.035617][T13585] map_create+0xaa0/0x14d0 [ 468.040559][T13585] __sys_bpf+0x60f/0x870 [ 468.045339][T13585] __x64_sys_bpf+0x7c/0x90 [ 468.050294][T13585] do_syscall_64+0xfa/0x3b0 [ 468.055330][T13585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.061750][T13585] [ 468.061750][T13585] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 468.069484][T13585] validate_chain+0xb9b/0x2140 [ 468.074787][T13585] __lock_acquire+0xab9/0xd20 [ 468.080010][T13585] lock_acquire+0x120/0x360 [ 468.085046][T13585] __mutex_lock+0x187/0x1350 [ 468.090161][T13585] pcpu_alloc_noprof+0x286/0x1720 [ 468.095716][T13585] sbitmap_init_node+0x1e1/0x630 [ 468.101265][T13585] sbitmap_queue_init_node+0x3e/0x4d0 [ 468.107180][T13585] blk_mq_init_tags+0x110/0x280 [ 468.112569][T13585] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 468.118568][T13585] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 468.124927][T13585] nbd_start_device+0x17f/0xb10 [ 468.130372][T13585] nbd_genl_connect+0x135b/0x18f0 [ 468.135944][T13585] genl_family_rcv_msg_doit+0x212/0x300 [ 468.142028][T13585] genl_rcv_msg+0x60e/0x790 [ 468.147062][T13585] netlink_rcv_skb+0x208/0x470 [ 468.152378][T13585] genl_rcv+0x28/0x40 [ 468.156910][T13585] netlink_unicast+0x82f/0x9e0 [ 468.162225][T13585] netlink_sendmsg+0x805/0xb30 [ 468.167533][T13585] __sock_sendmsg+0x21c/0x270 [ 468.172749][T13585] ____sys_sendmsg+0x505/0x830 [ 468.178048][T13585] ___sys_sendmsg+0x21f/0x2a0 [ 468.183284][T13585] __x64_sys_sendmsg+0x19b/0x260 [ 468.188758][T13585] do_syscall_64+0xfa/0x3b0 [ 468.193790][T13585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.200210][T13585] [ 468.200210][T13585] other info that might help us debug this: [ 468.200210][T13585] [ 468.210444][T13585] Chain exists of: [ 468.210444][T13585] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 468.210444][T13585] [ 468.224131][T13585] Possible unsafe locking scenario: [ 468.224131][T13585] [ 468.231701][T13585] CPU0 CPU1 [ 468.237108][T13585] ---- ---- [ 468.242500][T13585] lock(&q->q_usage_counter(io)#49); [ 468.247926][T13585] lock(fs_reclaim); [ 468.254466][T13585] lock(&q->q_usage_counter(io)#49); [ 468.262560][T13585] lock(pcpu_alloc_mutex); [ 468.267068][T13585] [ 468.267068][T13585] *** DEADLOCK *** [ 468.267068][T13585] [ 468.275235][T13585] 6 locks held by syz.2.2161/13585: [ 468.280528][T13585] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 468.288814][T13585] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 468.297806][T13585] #2: ffff888025208988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 468.309215][T13585] #3: ffff8880252088d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 468.320191][T13585] #4: ffff8881437e58f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 468.330913][T13585] #5: ffff8881437e5930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 468.341895][T13585] [ 468.341895][T13585] stack backtrace: [ 468.347783][T13585] CPU: 0 UID: 0 PID: 13585 Comm: syz.2.2161 Not tainted syzkaller #0 PREEMPT(full) [ 468.347802][T13585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.347813][T13585] Call Trace: [ 468.347821][T13585] [ 468.347828][T13585] dump_stack_lvl+0x189/0x250 [ 468.347852][T13585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.347870][T13585] ? __pfx__printk+0x10/0x10 [ 468.347894][T13585] ? print_lock_name+0xde/0x100 [ 468.347917][T13585] print_circular_bug+0x2ee/0x310 [ 468.347937][T13585] check_noncircular+0x134/0x160 [ 468.347957][T13585] validate_chain+0xb9b/0x2140 [ 468.347983][T13585] __lock_acquire+0xab9/0xd20 [ 468.348009][T13585] ? pcpu_alloc_noprof+0x286/0x1720 [ 468.348034][T13585] lock_acquire+0x120/0x360 [ 468.348058][T13585] ? pcpu_alloc_noprof+0x286/0x1720 [ 468.348092][T13585] __mutex_lock+0x187/0x1350 [ 468.348109][T13585] ? pcpu_alloc_noprof+0x286/0x1720 [ 468.348133][T13585] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 468.348161][T13585] ? kasan_save_track+0x4f/0x80 [ 468.348180][T13585] ? kasan_save_track+0x3e/0x80 [ 468.348198][T13585] ? __kasan_kmalloc+0x93/0xb0 [ 468.348219][T13585] ? blk_mq_init_tags+0x85/0x280 [ 468.348241][T13585] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 468.348256][T13585] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 468.348275][T13585] ? pcpu_alloc_noprof+0x286/0x1720 [ 468.348298][T13585] ? nbd_genl_connect+0x135b/0x18f0 [ 468.348313][T13585] ? genl_family_rcv_msg_doit+0x212/0x300 [ 468.348335][T13585] ? genl_rcv_msg+0x60e/0x790 [ 468.348357][T13585] ? __pfx___mutex_lock+0x10/0x10 [ 468.348372][T13585] ? ____sys_sendmsg+0x505/0x830 [ 468.348392][T13585] ? do_syscall_64+0xfa/0x3b0 [ 468.348410][T13585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.348432][T13585] pcpu_alloc_noprof+0x286/0x1720 [ 468.348466][T13585] sbitmap_init_node+0x1e1/0x630 [ 468.348485][T13585] ? __kasan_kmalloc+0x93/0xb0 [ 468.348508][T13585] sbitmap_queue_init_node+0x3e/0x4d0 [ 468.348528][T13585] blk_mq_init_tags+0x110/0x280 [ 468.348551][T13585] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 468.348571][T13585] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 468.348589][T13585] ? kfree+0x18e/0x440 [ 468.348611][T13585] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 468.348638][T13585] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 468.348664][T13585] ? sysfs_add_file_mode_ns+0x259/0x300 [ 468.348694][T13585] nbd_start_device+0x17f/0xb10 [ 468.348713][T13585] ? device_create_file+0xf4/0x1c0 [ 468.348732][T13585] nbd_genl_connect+0x135b/0x18f0 [ 468.348751][T13585] ? __pfx_nbd_genl_connect+0x10/0x10 [ 468.348771][T13585] ? __nla_parse+0x40/0x60 [ 468.348788][T13585] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 468.348815][T13585] genl_family_rcv_msg_doit+0x212/0x300 [ 468.348841][T13585] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.348869][T13585] ? stack_trace_save+0x9c/0xe0 [ 468.348890][T13585] genl_rcv_msg+0x60e/0x790 [ 468.348914][T13585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.348935][T13585] ? __pfx_nbd_genl_connect+0x10/0x10 [ 468.348955][T13585] netlink_rcv_skb+0x208/0x470 [ 468.348971][T13585] ? __lock_acquire+0xab9/0xd20 [ 468.348994][T13585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.349016][T13585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.349039][T13585] ? down_read+0x1ad/0x2e0 [ 468.349058][T13585] genl_rcv+0x28/0x40 [ 468.349078][T13585] netlink_unicast+0x82f/0x9e0 [ 468.349106][T13585] ? __pfx_netlink_unicast+0x10/0x10 [ 468.349131][T13585] ? netlink_sendmsg+0x642/0xb30 [ 468.349147][T13585] ? skb_put+0x11b/0x210 [ 468.349167][T13585] netlink_sendmsg+0x805/0xb30 [ 468.349187][T13585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.349205][T13585] ? aa_sock_msg_perm+0xf1/0x1d0 [ 468.349222][T13585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.349239][T13585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.349256][T13585] __sock_sendmsg+0x21c/0x270 [ 468.349282][T13585] ____sys_sendmsg+0x505/0x830 [ 468.349304][T13585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.349327][T13585] ? import_iovec+0x74/0xa0 [ 468.349349][T13585] ___sys_sendmsg+0x21f/0x2a0 [ 468.349370][T13585] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.349404][T13585] ? __fget_files+0x2a/0x420 [ 468.349417][T13585] ? __fget_files+0x3a0/0x420 [ 468.349434][T13585] __x64_sys_sendmsg+0x19b/0x260 [ 468.349460][T13585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.349485][T13585] ? do_user_addr_fault+0xc8a/0x1390 [ 468.349512][T13585] ? do_syscall_64+0xbe/0x3b0 [ 468.349531][T13585] do_syscall_64+0xfa/0x3b0 [ 468.349547][T13585] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.349563][T13585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.349578][T13585] ? clear_bhb_loop+0x60/0xb0 [ 468.349595][T13585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.349611][T13585] RIP: 0033:0x7f6fd3d8eba9 [ 468.349626][T13585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.349640][T13585] RSP: 002b:00007f6fd4c80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.349657][T13585] RAX: ffffffffffffffda RBX: 00007f6fd3fd6270 RCX: 00007f6fd3d8eba9 [ 468.349669][T13585] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 468.349679][T13585] RBP: 00007f6fd3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 468.349689][T13585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.349698][T13585] R13: 00007f6fd3fd6308 R14: 00007f6fd3fd6270 R15: 00007fff2dca7568 [ 468.349717][T13585] [ 468.938231][ T5185] block nbd0: Receive control failed (result -32) [ 468.945524][ T5185] block nbd0: Receive control failed (result -32) [ 468.975108][T13585] nbd0: detected capacity change from 0 to 127 [ 468.985206][T13442] block nbd0: Dead connection, failed to find a fallback [ 468.992395][T13442] block nbd0: shutting down sockets [ 468.997898][T13442] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.007032][T13442] Buffer I/O error on dev nbd0, logical block 0, async page read [ 469.014977][T13442] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.024064][T13442] Buffer I/O error on dev nbd0, logical block 1, async page read [ 469.032067][T13442] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.041230][T13442] Buffer I/O error on dev nbd0, logical block 2, async page read [ 469.049565][T13442] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.058696][T13442] Buffer I/O error on dev nbd0, logical block 3, async page read [ 469.066742][T13442] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.075986][T13442] Buffer I/O error on dev nbd0, logical block 0, async page read [ 469.084113][T13442] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.095893][T13442] Buffer I/O error on dev nbd0, logical block 1, async page read [ 469.103849][T13442] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.113409][T13442] Buffer I/O error on dev nbd0, logical block 2, async page read [ 469.121431][T13442] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.130631][T13442] Buffer I/O error on dev nbd0, logical block 3, async page read [ 469.138712][T13442] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.147896][T13442] Buffer I/O error on dev nbd0, logical block 0, async page read [ 469.155878][T13442] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.165073][T13442] Buffer I/O error on dev nbd0, logical block 1, async page read [ 469.174711][T13442] ldm_validate_partition_table(): Disk read failed. [ 469.182875][T13442] Dev nbd0: unable to read RDB block 0 [ 469.190462][T13442] nbd0: unable to read partition table [ 469.203421][T13442] ldm_validate_partition_table(): Disk read failed. [ 469.212406][T13442] Dev nbd0: unable to read RDB block 0 [ 469.220180][T13442] nbd0: unable to read partition table