last executing test programs: 2m47.345685534s ago: executing program 4 (id=1620): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000007080004400002000f0800014000000000180005800e0001007d6d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0xb15}, 0x14}}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002bbd7000fedbdf252808000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r5, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c0a1}, 0x4000800) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000200)=r14, 0x4) getsockopt$sock_buf(r13, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r15 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) connect$inet(r15, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) 2m47.108735275s ago: executing program 3 (id=1624): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffe9e}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'veth1_vlan\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x31) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x31) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x4, 0x6, @remote}, 0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@mcast1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff6d, 0x8, 0x2, 0x200, 0x7, 0x40000, r7}) (async) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@mcast1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff6d, 0x8, 0x2, 0x200, 0x7, 0x40000, r7}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000a"], 0x70}}, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000a"], 0x70}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000305000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x0) 2m46.823276959s ago: executing program 4 (id=1626): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) r2 = socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'pim6reg\x00'}) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000140)="d4f3097158dc7e43992061a15e4591e90503b9c39080bf0580d9ea9fbf6049417468170e725c81b4ae52e35e4b9878460a1cd9fcd211a37d6a30a5b86b47a8d4ff55d887d75f6564c3b947903f82c0a70b8c4e01b82154ee3f334d9ac32b87be40916dc18fbac03a9694a17d34229d5b60d3fdff0909ef3b0040834d363efb824302a866c9535c0685538976c0648134feb300c6f7edb116074a4e975c4da43c3833e8ee93ecce77f0926dfe1422e7863fd41858e8b629e29ab9c5468f9013056d007cb1709b196f3aa5a6bb93da5981fac77bab2ccc1b645aa58d2df27752af6a80cc70faf539154b09a06aa3069bf688", 0xf1) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xdd47, 0x6f7e, 0x8, 0x80, 0x400, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 2m46.724009847s ago: executing program 3 (id=1629): sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x43}, 0x4008085) r0 = socket(0x1f, 0x5, 0x2000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf2505000000200001800d0001007564703a73797a32"], 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffa196}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002004}, 0x20044004) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 2m46.274934172s ago: executing program 3 (id=1634): syz_emit_ethernet(0x7a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0) 2m46.194101409s ago: executing program 3 (id=1636): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b70500000000000079105d00000000000500000000000000950000000000000083a0654d73055544226cfaba387f8fecbb07a4773cecaf968c7179"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000580)=""/34, 0x22}], 0x3, &(0x7f0000000600)=""/63, 0x3f}, 0x54}, {{&(0x7f0000000640)=@generic, 0x80, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/252, 0xfc}], 0x2, &(0x7f0000000840)=""/231, 0xe7}, 0xf}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000940)=""/130, 0x82}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/34, 0x22}], 0x3, &(0x7f0000000b40)=""/39, 0x34}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000b80)=""/2, 0x2}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/158, 0x9e}, {&(0x7f0000001c80)=""/19, 0x13}, {&(0x7f0000001cc0)=""/214, 0xd6}, {&(0x7f0000001dc0)=""/11, 0xb}, {&(0x7f0000001e00)=""/187, 0xbb}, {&(0x7f0000001ec0)=""/226, 0xe2}], 0x8}, 0x40000}, {{&(0x7f0000002040)=@sco={0x1f, @none}, 0x80, &(0x7f0000002680)=[{&(0x7f00000020c0)=""/186, 0xba}, {&(0x7f0000002180)}, {&(0x7f00000021c0)=""/250, 0xfa}, {&(0x7f00000022c0)=""/79, 0x4f}, {&(0x7f0000002340)=""/123, 0xfffffffffffffefd}, {&(0x7f00000023c0)=""/70, 0x46}, {&(0x7f0000002440)=""/52, 0x34}, {&(0x7f0000002480)=""/95, 0x5f}, {&(0x7f0000002500)=""/123, 0x7b}, {&(0x7f0000002580)=""/237, 0xed}], 0xa, &(0x7f0000002740)=""/232, 0xe8}, 0xffffff50}, {{&(0x7f0000002840), 0x80, &(0x7f0000002980)=[{&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/117, 0x75}], 0x2, &(0x7f00000029c0)=""/31, 0x1f}, 0xfffffffb}], 0x6, 0x20, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfe93, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRESDEC=0x0], 0x24}}, 0x0) 2m45.884345387s ago: executing program 4 (id=1643): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 2m45.386673179s ago: executing program 4 (id=1648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff8001}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x16}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x58}}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r1, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0x8, 0x4, "edb55870"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "79215ce9"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400a0}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x140d, 0x8, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24000c00) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000580)={r0, 0x200, 0x1, 0x6}) openat$cgroup_int(r6, &(0x7f00000005c0)='io.bfq.weight\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45810}, 0x40) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa4, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x102}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x60}, 0x20000808) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x78, r7, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r3) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000a80)={@multicast2, @private, 0x0}, &(0x7f0000000ac0)=0xc) getpeername$packet(r6, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000d40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x12c, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004005) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000d80)={0x0, 0x67, "695e9ae7c2eb3da3ea6c7a7a0d78af508dacfb5756c4a2eb341c1126936d3839f5bbf727145a74d86050f44b53fe79cfb219ed0dab833e5b1de3b90af18c2b2738489499c708c9230c0e7b6734c0738addf3701b751b478f951bd7fb397544e26f6d7bfc785dac"}, &(0x7f0000000e00)=0x6f) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000000e40)={0x9, 0x6, 0x4, 0x0, 0x1, 0xfffffffa, 0x3, 0x5, r13}, 0x20) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r3) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xe4, r14, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x68}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x56c}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @local, 0xffff}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000810}, 0x40004) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000010c0)={'batadv_slave_0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r15, &(0x7f0000001300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000040}, 0x804) 2m45.215274299s ago: executing program 4 (id=1651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080), 0x8) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = socket(0x840000000002, 0x3, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001e000000000000000c0000000c"], 0x0, 0x2a}, 0x20) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}}], 0x2, 0x20004086) recvmmsg(r2, &(0x7f0000002d40)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000300)=""/226, 0xe2}], 0x2, &(0x7f0000000440)=""/161, 0xa1}, 0x6fbbb2a5}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/156, 0x9c}], 0x4, &(0x7f0000000800)=""/11, 0xb}}, {{&(0x7f0000000840)=@nfc_llcp, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000a40)=""/77, 0x4d}, {&(0x7f0000000ac0)=""/175, 0xaf}, {&(0x7f0000000b80)=""/19, 0x13}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x7, &(0x7f0000002c40)=""/227, 0xe3}, 0x8}], 0x3, 0x60, &(0x7f0000002e00)={0x0, 0x989680}) 2m45.212943234s ago: executing program 3 (id=1653): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0007000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0007000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2m44.918300599s ago: executing program 3 (id=1658): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'pimreg\x00', @multicast}) 2m44.85488381s ago: executing program 4 (id=1660): socket$nl_crypto(0x10, 0x3, 0x15) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2m44.569836028s ago: executing program 32 (id=1658): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'pimreg\x00', @multicast}) 2m44.554524519s ago: executing program 33 (id=1660): socket$nl_crypto(0x10, 0x3, 0x15) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.003372973s ago: executing program 2 (id=2213): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r3, &(0x7f0000000080)=""/60, 0x3c, 0x2000, 0x0, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.145623916s ago: executing program 0 (id=2217): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r1, 0xc08ba000) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x40000000) 1.145226253s ago: executing program 6 (id=2218): socket$inet(0x2, 0xa, 0x2736) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffff5ab, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) writev(r1, &(0x7f0000000040), 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, 0x0, 0x88) syz_emit_ethernet(0x151, &(0x7f0000000940)={@random="86c1d56a8e6f", @link_local, @void, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}], @ipv4=@dccp={{0x18, 0x4, 0x1, 0x2e, 0x13f, 0x67, 0x0, 0x4, 0x21, 0x0, @empty, @empty, {[@ra={0x94, 0x4}, @generic={0x86, 0x2}, @timestamp_addr={0x44, 0x44, 0x3a, 0x1, 0xf, [{@multicast1, 0x9}, {@empty, 0x2}, {@multicast1, 0x3}, {@private=0xa010102, 0x5c8b}, {@rand_addr=0x64010101, 0x1}, {@multicast1, 0xff}, {@multicast1, 0x823}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}]}}, {{0x4e24, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x3, 0x5, '\"JQ', 0x2, "3d0343"}, "fc5dc382a9e77c0a47a3f442727e3c6f0fac375741142f3b794e0e140113e7e663e1db0f4f0a28fe9e8f0e0807b0149846d0460894fe5c7ee96beed25d4d1f81d8a16ac0b9a1f8ab18e8ab6b90cbdd996b667063ef02f7b48375a58735a89d952b71b0851f6450de0b0f025d63897b10a15d46e39f47fd40146b640ee211737a0e0114bb853aaeb409acbb152bbab11e4a783961f86acf5249e6b5550a2c937dedd1280a90b8ac1eb3b75b103b1c9672c6a8f5b76adbf3ac88b3ff9bf9c479dd24cabd05369f046ee29b6b93013749"}}}}}}, &(0x7f0000000000)={0x1, 0x2, [0xbda, 0x288, 0xdb, 0x84f]}) close(r1) 1.144137009s ago: executing program 0 (id=2219): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xa8, 0xa, 0x1}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e24, 0xfffffffe, @mcast2, 0x1000}}}, &(0x7f00000005c0)=0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000710"], 0x1c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x130, 0x130, 0xa, [@float={0x8, 0x0, 0x0, 0x10, 0x4}, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0xc, 0x10}, {0xf, 0x5}, {0xb, 0x2}, {0x10, 0x6}, {0x0, 0x1}]}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @ptr={0xe}, @enum64={0x6, 0x5, 0x0, 0x13, 0x0, 0x3, [{0xb, 0x13d3, 0xda91}, {0x1, 0x8, 0x9}, {0x9, 0x7f, 0x1}, {0xa, 0x9, 0x7ff}, {0xf, 0x4, 0x1}]}, @enum64={0x4, 0xa, 0x0, 0x13, 0x1, 0xd, [{0x6, 0x84e3, 0x4}, {0xe, 0x200, 0x8}, {0xd, 0x8000, 0xdc8}, {0x10, 0x7f, 0x400}, {0xa, 0x116, 0x5}, {0x5, 0x4, 0x9}, {0x7, 0x1, 0x9}, {0xd, 0x8, 0x80000001}, {0xf, 0x7b52, 0x9}, {0xe, 0x3, 0x1}]}]}, {0x0, [0x2e, 0x5f, 0x0, 0x2e, 0x2e, 0x0, 0x5f, 0x0]}}, &(0x7f0000000400)=""/218, 0x152, 0xda, 0x1, 0x399}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x7ff, 0x1, 0x2800, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x0, 0x2, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r4}, 0x38) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80001002, 0x4) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x5, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xff000000, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x10, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x8e}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x9c, &(0x7f0000000800)=""/156, 0x41100, 0x0, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000900)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[r4, r4, r4, r4, r4, r4], &(0x7f0000000980)=[{0x4, 0x1, 0xa, 0x6}], 0x10, 0x37}, 0x94) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r11, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x40000001}}, {0x8}, {0x6, 0x11, 0x4000}}]}, 0x4c}}, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) 1.143525291s ago: executing program 6 (id=2220): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r1, r3, 0x2f, 0x18, 0x4, @void, @value=r1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) sendto$inet6(r4, &(0x7f0000000400)="0b7c41c51f0c00509da874", 0xb, 0x20000811, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112da000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.139626031s ago: executing program 1 (id=2223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840000000000110002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) 1.138776197s ago: executing program 1 (id=2224): r0 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @enum, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x3}, 0x28) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 64) sendmmsg$inet(r6, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e04476fbe702e073ef07b1177175236dd2be1232", 0x14}], 0x1}}], 0x1, 0x2000c000) (rerun: 64) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0xc, 0x0, 0x0) (async) sendto$inet(r6, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="3800308014000400403a050c5bae0001800c0003800600010001000000080001000000000005000200"/56], 0x54}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x70, r4, 0x10, 0x70bd27, 0x25dfdbf8, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}]}, 0x70}}, 0x8004) 1.137975218s ago: executing program 1 (id=2225): socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x30000011}) close(r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x800, 0xf77, 0x8001, 0xfffffffffffffffb, 0x6, 0x84ad, 0x4, 0x0, 0x7fffffff, 0x6fd, 0x951, 0x7, 0x2, 0x200}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000f00)={r4, r5, "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", "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"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025b57000fbdbdf253a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990040000ceed3e3000010005b00c39716940c506d5104000004"], 0x38}, 0x1, 0x0, 0x0, 0x24000850}, 0x20008040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/ipc\x00') unshare(0x6a040000) r9 = socket(0x8, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) ioctl$IMGETCOUNT(r9, 0x61d9, &(0x7f0000000000)) close(r6) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 1.125223685s ago: executing program 6 (id=2227): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010101}, 0xc) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 1.121264215s ago: executing program 2 (id=2228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10, r2}, 0x18) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01, 0x0, 0x4}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r4) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200025bd7000ffdbdf250200000008000800ac14143208000b00", @ANYRES32=r3, @ANYBLOB="5eae7d40d8f0a93fbec0a85ffd0b170ce94702a345dd7f83509a397065707522e57f69f34040d6c77e12a4c9159193f9578ba8f86988e15c66f950a44c1194443a8c0864d655b423d5dd8b97524ee1e96a0d5457b75c41fd5334953147338fc9a6a69b980e65e3241eb0586d51ee6bafc5"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 995.348006ms ago: executing program 6 (id=2229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 974.454752ms ago: executing program 5 (id=2230): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x5c433b6d2fe6cc3a, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x5c433b6d2fe6cc3a, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffffffff}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000200)=0xf50, 0x4) (async) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000200)=0xf50, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, 0x0, &(0x7f0000000180)=@udp}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000000000100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 873.007555ms ago: executing program 6 (id=2231): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)={@map, 0xffffffffffffffff, 0x16}, 0x20) (async, rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) (rerun: 64) 723.103706ms ago: executing program 6 (id=2232): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x3c}}, 0x0) shutdown(r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x88d, 0x4) recvmmsg(r2, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x1, 0x0, 0x0, [{}]}, 0x88) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 722.101068ms ago: executing program 1 (id=2233): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060"], 0xfce) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0091af76d027000000000008000a00a8"], 0x6c}}, 0x10) listen(r7, 0xfffffffc) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 721.460203ms ago: executing program 5 (id=2234): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x3f39, 0x4a3, 0xdb1, 0x7, 0xa6]}, &(0x7f0000000300)=0x54) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r3, r1, 0x0, 0xe25) 710.645845ms ago: executing program 2 (id=2235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x4, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 692.026592ms ago: executing program 0 (id=2236): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0], 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) close(0x3) 491.073439ms ago: executing program 5 (id=2237): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x70}, 0x1, 0x7}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x41800}, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) pipe(&(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x70}, 0x1, 0x7}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x41800}, 0x0) (async) write$cgroup_subtree(r0, 0x0, 0xfe33) (async) 479.192983ms ago: executing program 0 (id=2238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 477.967515ms ago: executing program 2 (id=2239): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xe, &(0x7f0000000700)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r4, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff807000000000000000000ffa6080009000d000000", 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 316.003005ms ago: executing program 5 (id=2240): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xb}, 0x94) 267.228032ms ago: executing program 0 (id=2241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) connect$ax25(r3, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008000100ac141400080005000a01010208000b0060"], 0x34}}, 0x0) sendmsg$can_raw(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x210}}, 0x0) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@loopback, @rand_addr=' \x01\x00', @local, 0x4, 0xf800, 0x3, 0x500, 0x40, 0x100, r5}) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED]}, 0x28}}, 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04010200", @ANYRES16=r7, @ANYBLOB="000827bd7000ffdbdf25050000004c00018014000300fe8000000000000000000000000000bb060001000a000000080006007772720014000300fe88000000000000000000000000000108000b0073697000080008000300000034000180060002002b0000000600020000000000060004004e20000008000b00736970000800080007000000080009000c0000000c0001800600020001000000500003800600040000000000080003000000000014000600fc02000000000000000000000000000014000600fc0100000000000000000000000000001400020070696d367265673100000000000000000c000280080004000d1200000800040000020000"], 0x104}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 265.646198ms ago: executing program 2 (id=2242): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) listen(r1, 0x0) 264.165359ms ago: executing program 1 (id=2243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x0, 0x92a, 0xa, 0x0, 0x0, [{{r1}, 0x80000000}, {{}, 0x6}, {{r1}, 0x1}, {{r0}, 0x1}, {{r1}, 0x4102924}, {{}, 0x1}, {{r1}, 0x5}, {{r1}, 0xffff}, {{r1}, 0x4421}, {{r0}, 0xfffffffffffffff8}]}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) 192.715913ms ago: executing program 5 (id=2244): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x8}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000003c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xfffd, 0x2, 0x3, 0xfff, 0x6, 0x401, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}}, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000002050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r3, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r2, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 160.501334ms ago: executing program 0 (id=2245): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000fee000)=0x3fb, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000200)}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100001038e8ca0000000000000000030006000000000002000000ffffffff000000000000000005000500000000000a00000000000000000000000000000000000000000000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt(r8, 0x1, 0x6, 0x0, &(0x7f00000008c0)) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r9, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x24, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) 87.156969ms ago: executing program 1 (id=2246): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, r3, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0xfa0, 0x0, @wg=@data={0x4, 0x2, 0xa, "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"}}}}, 0xfce) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000001240)={r5, 0x7, 0x2, 0x7}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffff0000}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) 86.509055ms ago: executing program 2 (id=2247): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x2}]}]}}, &(0x7f0000000540)=""/228, 0x36, 0xe4, 0x1}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000280)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010102}}}}}}, 0x26) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x1, 0x6, 0xa4, &(0x7f0000000000)=""/164}) 0s ago: executing program 5 (id=2248): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @null, 0xfffffdb6, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) kernel console output (not intermixed with test programs): T6228] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 102.859050][ T6228] Node 0 DMA32 free:1400292kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22876kB inactive_anon:0kB active_file:10256kB inactive_file:159296kB unevictable:1536kB writepending:6128kB zspages:0kB present:3129332kB managed:2565180kB mlocked:0kB bounce:0kB free_pcp:81980kB local_pcp:28136kB free_cma:0kB [ 102.859116][ T6228] lowmem_reserve[]: 0 0 0 0 0 [ 102.859164][ T6228] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.859221][ T6228] lowmem_reserve[]: 0 0 0 0 0 [ 102.859269][ T6228] Node 1 Normal free:3891944kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19712kB local_pcp:10656kB free_cma:0kB [ 102.859333][ T6228] lowmem_reserve[]: 0 0 0 0 0 [ 102.859381][ T6228] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 102.859561][ T6228] Node 0 DMA32: 729*4kB (UE) 208*8kB (UME) 58*16kB (UM) 1*32kB (M) 1*64kB (M) 1*128kB (U) 3*256kB (ME) 4*512kB (UM) 1*1024kB (M) 3*2048kB (ME) 338*4096kB (M) = 1400164kB [ 102.859772][ T6228] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 102.859902][ T6228] Node 1 Normal: 212*4kB (UE) 59*8kB (UME) 50*16kB (UME) 71*32kB (UME) 23*64kB (UME) 6*128kB (UME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3891944kB [ 102.860114][ T6228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.860132][ T6228] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.860150][ T6228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.860168][ T6228] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.860186][ T6228] 43790 total pagecache pages [ 102.860202][ T6228] 0 pages in swap cache [ 102.860212][ T6228] Free swap = 124996kB [ 103.037425][ T6244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.83'. [ 103.063396][ T6228] Total swap = 124996kB [ 103.289800][ T6228] 2097051 pages RAM [ 103.293688][ T6228] 0 pages HighMem/MovableOnly [ 103.311363][ T6228] 424114 pages reserved [ 103.348178][ T6228] 0 pages cma reserved [ 104.634515][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.672482][ T6319] batadv_slave_0: entered promiscuous mode [ 104.684764][ T6319] batadv_slave_0: entered allmulticast mode [ 104.807655][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 104.820863][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 104.848972][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 104.876431][ T6333] netlink: 'syz.0.107': attribute type 12 has an invalid length. [ 104.885309][ T6333] netlink: 'syz.0.107': attribute type 29 has an invalid length. [ 104.895714][ T6333] netlink: 148 bytes leftover after parsing attributes in process `syz.0.107'. [ 104.905681][ T6333] netlink: 'syz.0.107': attribute type 2 has an invalid length. [ 104.913474][ T6333] netlink: 23 bytes leftover after parsing attributes in process `syz.0.107'. [ 104.936352][ T6334] IPVS: set_ctl: invalid protocol: 43 172.30.1.5:20000 [ 105.229126][ T6350] chnl_net:caif_netlink_parms(): no params data found [ 105.778343][ T6367] tap0: tun_chr_ioctl cmd 1074025677 [ 105.791993][ T6367] tap0: linktype set to 65534 [ 106.544950][ T6407] "syz.3.127" (6407) uses obsolete ecb(arc4) skcipher [ 106.739351][ T6428] Bluetooth: MGMT ver 1.23 [ 107.370394][ T5939] IPVS: starting estimator thread 0... [ 107.474309][ T6472] IPVS: using max 28 ests per chain, 67200 per kthread [ 107.535257][ T6481] netlink: 'syz.0.145': attribute type 18 has an invalid length. [ 108.151715][ T6496] __nla_validate_parse: 7 callbacks suppressed [ 108.151737][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.150'. [ 108.170984][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.150'. [ 108.551711][ T6508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.568051][ T6507] netlink: 'syz.4.154': attribute type 2 has an invalid length. [ 108.642187][ T6509] bond1: entered promiscuous mode [ 108.665722][ T6509] bond1: entered allmulticast mode [ 108.671727][ T6509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.695740][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.157'. [ 108.764457][ T5844] Bluetooth: hci0: command tx timeout [ 108.907144][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'. [ 109.255778][ T6555] trusted_key: syz.3.166 sent an empty control message without MSG_MORE. [ 109.267776][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 109.435355][ T6565] unsupported nlmsg_type 40 [ 109.471345][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 109.819864][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 109.829330][ T6580] netlink: 'syz.3.174': attribute type 5 has an invalid length. [ 109.838673][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 109.900570][ T6580] geneve2: entered promiscuous mode [ 109.930045][ T6580] geneve2: entered allmulticast mode [ 109.975010][ T4524] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 110.014028][ T4524] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 110.044813][ T4524] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 110.079428][ T4524] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 110.159817][ T6598] openvswitch: netlink: IP tunnel dst address not specified [ 110.267738][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'. [ 110.329560][ T6607] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 110.423942][ T6607] bond2: entered promiscuous mode [ 110.429633][ T6607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.530049][ T6609] 8021q: VLANs not supported on ip6gre0 [ 110.592838][ T6607] bond2: (slave bridge2): making interface the new active one [ 110.600862][ T6607] bridge2: entered promiscuous mode [ 110.630713][ T6607] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 110.739612][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 110.915383][ T6618] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 111.185521][ T6626] netlink: 'syz.2.188': attribute type 11 has an invalid length. [ 111.207894][ T6627] netlink: 'syz.2.188': attribute type 11 has an invalid length. [ 111.424623][ T6631] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 111.663486][ T6645] tipc: Started in network mode [ 111.671265][ T6645] tipc: Node identity 82c6b49e680d, cluster identity 4711 [ 111.679669][ T6645] tipc: Enabled bearer , priority 0 [ 111.837250][ T6644] tipc: Disabling bearer [ 112.008271][ T6658] geneve2: entered promiscuous mode [ 112.029578][ T6660] veth0_to_team: entered promiscuous mode [ 112.385906][ T6675] veth0_to_bond: entered allmulticast mode [ 112.424853][ T6677] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 112.981331][ T6713] tipc: Enabled bearer , priority 0 [ 113.004803][ T6713] syzkaller0: entered promiscuous mode [ 113.022533][ T6713] syzkaller0: entered allmulticast mode [ 113.057299][ T6713] tipc: Resetting bearer [ 113.065963][ T6716] tipc: Started in network mode [ 113.071791][ T6716] tipc: Node identity 2a4147116ee3, cluster identity 4711 [ 113.099912][ T6716] tipc: Enabled bearer , priority 0 [ 113.109263][ T6712] tipc: Resetting bearer [ 113.123758][ T6712] tipc: Disabling bearer [ 113.136303][ T6716] syzkaller0: entered promiscuous mode [ 113.142484][ T6716] syzkaller0: entered allmulticast mode [ 113.158407][ T6716] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 113.194890][ T6716] tipc: Resetting bearer [ 113.213242][ T6716] __nla_validate_parse: 13 callbacks suppressed [ 113.213261][ T6716] netlink: 92 bytes leftover after parsing attributes in process `syz.2.216'. [ 113.280553][ T6716] tipc: Resetting bearer [ 113.311877][ T6716] tipc: Disabling bearer [ 113.422754][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 113.437381][ T6730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.449969][ T6730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.460297][ T6730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.468093][ T6730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.539251][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 113.560999][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 114.008657][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 114.075557][ T6753] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 114.180208][ T6753] team1: entered promiscuous mode [ 114.192151][ T6753] team1: entered allmulticast mode [ 114.198848][ T6767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.232'. [ 114.292020][ T6768] netlink: 124 bytes leftover after parsing attributes in process `syz.1.232'. [ 114.392267][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 114.418237][ T6776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 114.670079][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 115.368753][ T60] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 115.403677][ T6828] vlan2: entered allmulticast mode [ 115.409296][ T6828] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 115.431214][ T6822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.681176][ T6839] x_tables: duplicate underflow at hook 3 [ 115.815136][ T6841] geneve2: entered promiscuous mode [ 116.085708][ T6857] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 116.128496][ T6857] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 116.277671][ T6859] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 116.291741][ T6859] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 116.728602][ T6892] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 117.217570][ T6919] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 117.520879][ T6928] netlink: 'syz.0.275': attribute type 3 has an invalid length. [ 117.843406][ T6937] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 117.877151][ T6936] ip6gre2: entered promiscuous mode [ 117.893518][ T6936] ip6gre2: entered allmulticast mode [ 117.956574][ T6936] sctp: [Deprecated]: syz.1.280 (pid 6936) Use of int in maxseg socket option. [ 117.956574][ T6936] Use struct sctp_assoc_value instead [ 118.435214][ T6950] __nla_validate_parse: 13 callbacks suppressed [ 118.435235][ T6950] netlink: 88 bytes leftover after parsing attributes in process `syz.0.284'. [ 118.453321][ T6953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.285'. [ 119.041717][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 119.135132][ T6990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.004451][ T6995] wg1: entered promiscuous mode [ 120.009464][ T6995] wg1: entered allmulticast mode [ 120.025348][ T6997] netlink: 27 bytes leftover after parsing attributes in process `syz.2.298'. [ 120.068148][ T6997] netlink: 27 bytes leftover after parsing attributes in process `syz.2.298'. [ 120.118412][ T7006] IPVS: length: 142 != 8 [ 120.332802][ T7016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.302'. [ 120.544515][ T7016] syzkaller1: entered promiscuous mode [ 120.550061][ T7016] syzkaller1: entered allmulticast mode [ 120.704704][ T7037] netlink: zone id is out of range [ 120.892934][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.312'. [ 121.152661][ T7069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.317'. [ 121.199168][ T7078] netlink: 'syz.3.318': attribute type 30 has an invalid length. [ 121.207082][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 121.230677][ T7080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.346167][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.323'. [ 121.389057][ T7087] netlink: 'syz.2.323': attribute type 12 has an invalid length. [ 121.393471][ T7089] sctp: [Deprecated]: syz.4.324 (pid 7089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.393471][ T7089] Use struct sctp_sack_info instead [ 121.419463][ T7087] netlink: 'syz.2.323': attribute type 29 has an invalid length. [ 121.429940][ T7087] netlink: 'syz.2.323': attribute type 2 has an invalid length. [ 121.566761][ T7095] openvswitch: netlink: EtherType 53b is less than min 600 [ 121.922757][ T7124] netlink: 'syz.3.333': attribute type 4 has an invalid length. [ 122.029340][ T7131] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 122.103136][ T7132] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 122.116676][ T7132] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 122.452743][ T7160] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 122.666632][ T7165] bond4: (slave gretap2): making interface the new active one [ 122.678751][ T7165] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 122.865970][ T7176] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 123.043015][ T7197] lo: entered promiscuous mode [ 123.063548][ T7197] lo: entered allmulticast mode [ 123.071706][ T7197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.490426][ T7228] tipc: Started in network mode [ 123.502881][ T7228] tipc: Node identity f64b59a2757f, cluster identity 4711 [ 123.525958][ T7228] tipc: Enabled bearer , priority 0 [ 123.611157][ T7228] syzkaller0: entered promiscuous mode [ 123.617725][ T7228] syzkaller0: entered allmulticast mode [ 123.624275][ T7228] tipc: Resetting bearer [ 123.648964][ T7227] tipc: Resetting bearer [ 123.690062][ T7245] __nla_validate_parse: 8 callbacks suppressed [ 123.690082][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 123.739244][ T7243] netlink: 56 bytes leftover after parsing attributes in process `syz.2.364'. [ 123.946112][ T60] tipc: Subscription rejected, illegal request [ 123.973509][ T7256] netlink: 14 bytes leftover after parsing attributes in process `syz.1.371'. [ 124.637455][ T983] tipc: Node number set to 2201246114 [ 124.875569][ T7227] tipc: Disabling bearer [ 124.886005][ T7237] pim6reg1: entered promiscuous mode [ 124.891455][ T7237] pim6reg1: entered allmulticast mode [ 124.998784][ T7256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.021531][ T7256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.044446][ T7256] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 125.054909][ T7256] bond0 (unregistering): Released all slaves [ 125.134796][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 125.205868][ T7282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 125.356271][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.378'. [ 125.391790][ T7296] netlink: 160 bytes leftover after parsing attributes in process `syz.4.381'. [ 125.406425][ T7298] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 125.418318][ T7293] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 125.429018][ T7298] netlink: 'syz.2.379': attribute type 2 has an invalid length. [ 125.580378][ T7305] syzkaller0: entered promiscuous mode [ 125.605069][ T7305] syzkaller0: entered allmulticast mode [ 125.627563][ T7304] tipc: Started in network mode [ 125.632492][ T7304] tipc: Node identity 8ad703f9195a, cluster identity 4711 [ 125.669005][ T7304] tipc: Enabled bearer , priority 0 [ 125.750864][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 125.761038][ T7318] netlink: 'syz.0.388': attribute type 15 has an invalid length. [ 125.779294][ T7318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'. [ 125.876392][ T7304] tipc: Resetting bearer [ 125.954236][ T7304] tipc: Disabling bearer [ 126.210865][ T7343] syzkaller0: entered promiscuous mode [ 126.228991][ T7343] syzkaller0: entered allmulticast mode [ 126.250483][ T7343] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 126.330169][ T7349] gtp0: entered promiscuous mode [ 126.336510][ T7349] gtp0: entered allmulticast mode [ 126.723564][ T7357] batadv0: entered promiscuous mode [ 126.735145][ T7357] bond0: entered promiscuous mode [ 126.740297][ T7357] bond_slave_0: entered promiscuous mode [ 126.761284][ T7357] bond_slave_1: entered promiscuous mode [ 126.766698][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 126.780547][ T7357] hsr1: entered allmulticast mode [ 126.787240][ T7357] batadv0: entered allmulticast mode [ 126.793173][ T7357] bond0: entered allmulticast mode [ 126.809485][ T7357] bond_slave_0: entered allmulticast mode [ 126.819599][ T7357] bond_slave_1: entered allmulticast mode [ 126.853061][ T7371] netlink: 'syz.3.400': attribute type 14 has an invalid length. [ 126.867897][ T7366] syzkaller0: entered promiscuous mode [ 126.873940][ T7371] netlink: 'syz.3.400': attribute type 13 has an invalid length. [ 126.893768][ T7366] syzkaller0: entered allmulticast mode [ 127.347300][ T7402] bridge_slave_1: left allmulticast mode [ 127.353165][ T7402] bridge_slave_1: left promiscuous mode [ 127.369489][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.387677][ T7402] bridge_slave_0: left allmulticast mode [ 127.393592][ T7402] bridge_slave_0: left promiscuous mode [ 127.399996][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.517273][ T7408] veth0: entered promiscuous mode [ 127.700677][ T7413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.124250][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.143598][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.174826][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.207516][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.278020][ T7441] lo: entered promiscuous mode [ 128.297431][ T7441] netlink: 'syz.4.426': attribute type 2 has an invalid length. [ 128.311596][ T7441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.350950][ T7445] veth1_to_bond: entered allmulticast mode [ 128.451063][ T7445] veth1_to_bond (unregistering): left allmulticast mode [ 128.720469][ T7462] netlink: 'syz.4.431': attribute type 15 has an invalid length. [ 128.744347][ T7468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.947833][ T7481] __nla_validate_parse: 12 callbacks suppressed [ 128.947854][ T7481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.437'. [ 128.987708][ T7481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.437'. [ 129.274653][ T7499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.443'. [ 129.375131][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 129.384069][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 129.515516][ T7510] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 129.738604][ T7536] netlink: 108 bytes leftover after parsing attributes in process `syz.0.455'. [ 129.870821][ T7548] netlink: 'syz.4.458': attribute type 2 has an invalid length. [ 129.946257][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 130.036238][ T7554] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 130.086109][ T7556] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 130.168167][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 130.335930][ T7571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.466'. [ 130.476574][ T7575] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 130.517666][ T7577] Bluetooth: MGMT ver 1.23 [ 130.796950][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 130.821850][ T7601] bridge0: entered promiscuous mode [ 130.837407][ T7601] macsec1: entered promiscuous mode [ 130.852808][ T7601] macsec1: entered allmulticast mode [ 130.865004][ T7601] bridge0: entered allmulticast mode [ 130.876477][ T7601] bridge0: port 3(macsec1) entered blocking state [ 130.884944][ T7601] bridge0: port 3(macsec1) entered disabled state [ 130.896969][ T7601] bridge0: left allmulticast mode [ 130.908091][ T7601] bridge0: left promiscuous mode [ 130.946000][ T7605] netlink: 'syz.3.476': attribute type 3 has an invalid length. [ 131.190324][ T7623] xt_TCPMSS: Only works on TCP SYN packets [ 131.202131][ T7623] IPv6: addrconf: prefix option has invalid lifetime [ 131.322862][ T7625] hsr_slave_1 (unregistering): left promiscuous mode [ 131.875297][ T7654] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 131.937520][ T7663] netlink: 'syz.2.495': attribute type 4 has an invalid length. [ 131.992742][ T7654] bond1: (slave bridge1): making interface the new active one [ 132.036106][ T7654] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 132.087968][ T7669] gretap1: entered promiscuous mode [ 132.093233][ T7669] gretap1: entered allmulticast mode [ 132.137924][ T7669] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 132.353714][ T7685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.421286][ T7683] Bluetooth: MGMT ver 1.23 [ 132.445027][ T7683] netlink: 'syz.2.500': attribute type 18 has an invalid length. [ 132.485943][ T1155] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.514114][ T1155] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.551590][ T1155] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.571922][ T1155] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.879551][ T7719] SET target dimension over the limit! [ 132.906791][ T7719] SET target dimension over the limit! [ 133.009464][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.023904][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.129138][ T7735] netlink: 'syz.3.513': attribute type 12 has an invalid length. [ 133.188843][ T7735] bond1: option primary_reselect: invalid value (255) [ 133.216845][ T7735] bond1 (unregistering): Released all slaves [ 133.222179][ T5903] IPVS: starting estimator thread 0... [ 133.240423][ T7738] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 133.301649][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.326080][ T7739] IPVS: using max 25 ests per chain, 60000 per kthread [ 133.352077][ T7738] bridge_slave_1: left allmulticast mode [ 133.369372][ T7738] bridge_slave_1: left promiscuous mode [ 133.388081][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.448569][ T7738] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 133.575757][ T7753] netlink: 'syz.3.515': attribute type 1 has an invalid length. [ 133.662675][ T7753] bond1: entered promiscuous mode [ 133.669446][ T7753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.969677][ T7776] bond2: option all_slaves_active: invalid value (222) [ 133.984563][ T7776] bond2 (unregistering): Released all slaves [ 134.090013][ T7777] bond2: option all_slaves_active: invalid value (222) [ 134.105186][ T7777] bond2 (unregistering): Released all slaves [ 134.187615][ T7786] tipc: Enabled bearer , priority 0 [ 134.206971][ T7792] syzkaller0: entered promiscuous mode [ 134.221861][ T7792] syzkaller0: entered allmulticast mode [ 134.232040][ T7782] tipc: Enabling of bearer rejected, failed to enable media [ 134.263959][ T7797] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 134.299610][ T7786] tipc: Resetting bearer [ 134.335811][ T7785] tipc: Resetting bearer [ 134.439028][ T7785] tipc: Disabling bearer [ 134.501573][ T7806] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 134.807667][ T7830] sctp: [Deprecated]: syz.3.537 (pid 7830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.807667][ T7830] Use struct sctp_sack_info instead [ 134.827373][ T7832] __nla_validate_parse: 10 callbacks suppressed [ 134.827393][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 134.835312][ T7830] openvswitch: netlink: Message has 592 unknown bytes. [ 134.852361][ T7830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.951764][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 135.291076][ T7861] bridge_slave_0: left allmulticast mode [ 135.297285][ T7861] bridge_slave_0: left promiscuous mode [ 135.304908][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.329017][ T7861] bridge_slave_1: left allmulticast mode [ 135.334942][ T7861] bridge_slave_1: left promiscuous mode [ 135.340944][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.360096][ T7861] bond0: (slave bond_slave_0): Releasing backup interface [ 135.387482][ T7861] bond0: (slave bond_slave_1): Releasing backup interface [ 135.423370][ T7861] team0: Port device team_slave_0 removed [ 135.440354][ T7861] team0: Port device team_slave_1 removed [ 135.454588][ T7861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.462036][ T7861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.470894][ T7861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.478364][ T7861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.507230][ T7868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.548'. [ 135.537909][ T7867] netlink: 232 bytes leftover after parsing attributes in process `syz.4.550'. [ 135.627610][ T7874] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 135.947104][ T7882] syzkaller0: entered promiscuous mode [ 135.954273][ T7882] syzkaller0: entered allmulticast mode [ 135.960737][ T7895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.364883][ T7909] veth5: entered allmulticast mode [ 137.548131][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 137.849248][ T7952] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 137.956098][ T7959] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 137.975230][ T7959] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 137.987685][ T7959] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 138.181124][ T7959] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.212113][ T7959] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 138.267679][ T7967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.572'. [ 138.303651][ T7973] netlink: 'syz.0.576': attribute type 83 has an invalid length. [ 138.474087][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 138.527499][ T7983] netlink: 9 bytes leftover after parsing attributes in process `syz.3.578'. [ 138.555024][ T7985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.868992][ T7995] netlink: 1 bytes leftover after parsing attributes in process `syz.1.583'. [ 138.878424][ T7995] xt_policy: neither incoming nor outgoing policy selected [ 139.177861][ T8007] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 139.200301][ T8009] netlink: 63 bytes leftover after parsing attributes in process `syz.2.588'. [ 139.537258][ T8027] netlink: 'syz.2.592': attribute type 10 has an invalid length. [ 139.753773][ T8042] sit0: entered promiscuous mode [ 139.767815][ T8042] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 139.775702][ T8042] netlink: 'syz.3.595': attribute type 2 has an invalid length. [ 139.861292][ T8054] __nla_validate_parse: 1 callbacks suppressed [ 139.861312][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 139.934337][ T8054] netlink: 44 bytes leftover after parsing attributes in process `syz.2.599'. [ 139.943275][ T8054] netlink: 21 bytes leftover after parsing attributes in process `syz.2.599'. [ 139.965886][ T8054] netlink: 21 bytes leftover after parsing attributes in process `syz.2.599'. [ 140.110641][ T8064] nbd: must specify a device to reconfigure [ 140.666462][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 140.706756][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 140.721594][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 140.827305][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'. [ 140.862874][ T8115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.614'. [ 141.001597][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 141.602664][ T8160] netlink: 'syz.1.629': attribute type 25 has an invalid length. [ 141.662736][ T8162] xt_policy: output policy not valid in PREROUTING and INPUT [ 141.714430][ T8162] xt_policy: output policy not valid in PREROUTING and INPUT [ 142.407630][ T8219] ksmbd: Unknown IPC event: 3, ignore. [ 142.484266][ T8218] tipc: Enabled bearer , priority 0 [ 142.494642][ T8218] syzkaller0: entered promiscuous mode [ 142.500175][ T8218] syzkaller0: entered allmulticast mode [ 142.584660][ T8218] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 142.619088][ T8218] tipc: Resetting bearer [ 142.668381][ T8216] tipc: Resetting bearer [ 142.703009][ T8216] tipc: Disabling bearer [ 142.752888][ T8237] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 142.798772][ T8235] tipc: Enabled bearer , priority 0 [ 142.834685][ T8235] syzkaller0: entered promiscuous mode [ 142.874740][ T8235] syzkaller0: entered allmulticast mode [ 142.943425][ T8235] tipc: Resetting bearer [ 142.972008][ T8234] tipc: Resetting bearer [ 143.005217][ T8234] tipc: Disabling bearer [ 143.096313][ T8257] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 144.057551][ T8311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.071441][ T8312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.117886][ T8311] batadv_slave_0: entered promiscuous mode [ 144.154423][ T8311] batadv_slave_0: entered allmulticast mode [ 144.307121][ T8328] lo: entered allmulticast mode [ 144.331720][ T8328] pim6reg: entered allmulticast mode [ 144.386107][ T8328] pim6reg: left allmulticast mode [ 144.500180][ T8327] lo: left allmulticast mode [ 144.843089][ T8347] gtp0: entered promiscuous mode [ 144.852533][ T8347] gtp0: entered allmulticast mode [ 145.090769][ T5939] hid-generic 0005:0C45:1010.0001: unknown main item tag 0x1 [ 145.107570][ T5939] hid-generic 0005:0C45:1010.0001: ignoring exceeding usage max [ 145.121677][ T5939] hid-generic 0005:0C45:1010.0001: unknown main item tag 0x4 [ 145.133965][ T5939] hid-generic 0005:0C45:1010.0001: unknown main item tag 0x5 [ 145.141761][ T5939] hid-generic 0005:0C45:1010.0001: reserved main item tag 0xd [ 145.149991][ T5939] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 31/56 [ 145.161760][ T5939] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 145.175964][ T8366] vlan1: mtu greater than device maximum [ 145.195356][ T8366] gtp1: entered promiscuous mode [ 145.200553][ T8366] gtp1: entered allmulticast mode [ 145.218302][ T8373] __nla_validate_parse: 14 callbacks suppressed [ 145.218321][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 145.342296][ T8378] netlink: 92 bytes leftover after parsing attributes in process `syz.2.698'. [ 145.691238][ T8391] IPVS: persistence engine module ip_vs_pe_ not found [ 145.804560][ T8401] netlink: 104 bytes leftover after parsing attributes in process `syz.4.706'. [ 145.863444][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 146.062774][ T8420] syzkaller0: entered promiscuous mode [ 146.071121][ T8420] syzkaller0: entered allmulticast mode [ 146.083322][ T8424] netlink: 666 bytes leftover after parsing attributes in process `syz.4.711'. [ 146.106206][ T8425] x_tables: duplicate underflow at hook 1 [ 146.155474][ T8429] x_tables: duplicate underflow at hook 1 [ 146.245925][ T10] IPVS: starting estimator thread 0... [ 146.253324][ T8431] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 146.307930][ T8441] set match dimension is over the limit! [ 146.354242][ T8434] IPVS: using max 27 ests per chain, 64800 per kthread [ 146.440216][ T8445] netlink: 'syz.4.718': attribute type 2 has an invalid length. [ 146.536878][ T8449] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 146.572307][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 146.615039][ T8449] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 146.630272][ T8452] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.720'. [ 146.640716][ T8449] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 146.656450][ T8449] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 146.713144][ T8451] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 146.726047][ T8451] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 146.842804][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 147.125375][ T8474] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 147.167621][ T8474] bridge0: port 2(team0) entered blocking state [ 147.198836][ T8474] bridge0: port 2(team0) entered disabled state [ 147.238269][ T8474] team0: entered allmulticast mode [ 147.261279][ T8474] team_slave_0: entered allmulticast mode [ 147.291325][ T8474] team_slave_1: entered allmulticast mode [ 147.332292][ T8474] team0: entered promiscuous mode [ 147.364175][ T8474] team_slave_0: entered promiscuous mode [ 147.384620][ T8474] team_slave_1: entered promiscuous mode [ 147.448154][ T8474] bridge0: port 2(team0) entered blocking state [ 147.454654][ T8474] bridge0: port 2(team0) entered forwarding state [ 148.042079][ T8509] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 148.074934][ T8509] bond5: option packets_per_slave: allowed values 0 - 65535 [ 148.089044][ T8514] xt_CT: No such helper "snmp_trap" [ 148.097911][ T8509] bond5 (unregistering): Released all slaves [ 148.138406][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.741'. [ 148.294920][ T8526] netlink: 'syz.0.745': attribute type 10 has an invalid length. [ 148.310664][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.745'. [ 148.367934][ T8526] geneve0: entered promiscuous mode [ 148.396984][ T8526] geneve0: entered allmulticast mode [ 148.404508][ T8526] team0: Port device geneve0 added [ 148.556981][ T8545] veth0: entered promiscuous mode [ 148.591689][ T8544] veth0: left promiscuous mode [ 148.808959][ T8563] netlink: 'syz.4.757': attribute type 33 has an invalid length. [ 148.927756][ T8563] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 149.003304][ T8563] bond2 (unregistering): Released all slaves [ 149.267448][ T8592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.832935][ T8605] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 149.852692][ T8605] netlink: 'syz.2.765': attribute type 15 has an invalid length. [ 149.869059][ T8608] xt_connbytes: Forcing CT accounting to be enabled [ 150.050737][ T8616] syzkaller0: entered promiscuous mode [ 150.064871][ T8616] syzkaller0: entered allmulticast mode [ 150.131549][ T8616] netlink: 'syz.2.768': attribute type 32 has an invalid length. [ 150.206921][ T8616] bond5: option coupled_control: invalid value (24) [ 150.217328][ T8616] bond5 (unregistering): Released all slaves [ 150.236584][ T8631] netlink: 'syz.1.773': attribute type 12 has an invalid length. [ 150.372180][ T8636] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.744713][ T8652] __nla_validate_parse: 11 callbacks suppressed [ 150.744735][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 150.931326][ T8674] netlink: 'syz.4.788': attribute type 1 has an invalid length. [ 150.998109][ T8675] netlink: 'syz.0.786': attribute type 11 has an invalid length. [ 151.183393][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 151.217878][ T8685] netlink: 48 bytes leftover after parsing attributes in process `syz.4.792'. [ 151.227099][ T8685] netlink: 48 bytes leftover after parsing attributes in process `syz.4.792'. [ 151.371333][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 151.402044][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 151.468972][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 151.587440][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 151.704684][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 151.808123][ T8721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.804'. [ 151.910040][ T8729] netlink: 'syz.1.807': attribute type 2 has an invalid length. [ 151.923316][ T8729] tipc: Enabling of bearer rejected, failed to enable media [ 151.954191][ T8723] tipc: Enabled bearer , priority 0 [ 151.973627][ T8723] syzkaller0: entered promiscuous mode [ 151.982485][ T8723] syzkaller0: entered allmulticast mode [ 152.011265][ T8723] tipc: Resetting bearer [ 152.056612][ T8722] tipc: Resetting bearer [ 152.100982][ T8722] tipc: Disabling bearer [ 152.139018][ T8742] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20003 [ 152.797048][ T8780] netlink: 'syz.0.824': attribute type 3 has an invalid length. [ 152.835425][ T8779] vlan3: entered promiscuous mode [ 152.847649][ T8779] bridge0: entered promiscuous mode [ 153.112401][ T8799] netlink: 'syz.0.829': attribute type 8 has an invalid length. [ 153.430051][ T8814] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 153.600890][ T8818] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.619221][ T8823] bridge0: port 2(team0) entered disabled state [ 153.637074][ T8823] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.926258][ T8839] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 153.951857][ T8839] netlink: 'syz.0.840': attribute type 4 has an invalid length. [ 154.673740][ T8873] sctp: [Deprecated]: syz.2.852 (pid 8873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.673740][ T8873] Use struct sctp_sack_info instead [ 155.268676][ T8912] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 155.506712][ T8917] syzkaller0: entered promiscuous mode [ 155.513432][ T8917] syzkaller0: entered allmulticast mode [ 155.743355][ T8934] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 156.149208][ T8965] netlink: 'syz.4.883': attribute type 9 has an invalid length. [ 156.267098][ T8970] __nla_validate_parse: 15 callbacks suppressed [ 156.267119][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'. [ 156.286963][ T8971] netlink: 'syz.0.886': attribute type 2 has an invalid length. [ 156.299243][ T8971] netlink: 244 bytes leftover after parsing attributes in process `syz.0.886'. [ 156.338917][ T8975] tipc: Enabling of bearer rejected, failed to enable media [ 156.454589][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 156.527242][ T8990] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 156.579290][ T8990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.617767][ T8992] bond0: (slave ip6erspan0): making interface the new active one [ 156.628601][ T8992] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 156.673282][ T8997] netlink: 11 bytes leftover after parsing attributes in process `syz.0.895'. [ 156.716086][ T8982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.885181][ T9009] netlink: 'syz.0.899': attribute type 4 has an invalid length. [ 156.911764][ T9010] netlink: 'syz.0.899': attribute type 4 has an invalid length. [ 156.925738][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 157.104790][ T9029] xt_bpf: check failed: parse error [ 157.113444][ T9028] xt_bpf: check failed: parse error [ 157.146159][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.901'. [ 157.184087][ T9032] netlink: 10 bytes leftover after parsing attributes in process `syz.1.901'. [ 157.215514][ T9028] tipc: Enabled bearer , priority 10 [ 157.241888][ T9040] netlink: 56 bytes leftover after parsing attributes in process `syz.3.909'. [ 157.253025][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 157.255444][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 157.271374][ T9040] netlink: 'syz.3.909': attribute type 2 has an invalid length. [ 157.610419][ T9064] x_tables: duplicate underflow at hook 1 [ 157.712036][ T9062] syzkaller0: entered promiscuous mode [ 157.739663][ T9062] syzkaller0: entered allmulticast mode [ 158.334764][ T24] tipc: Node number set to 3939218590 [ 159.500116][ T9116] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 159.817146][ T9140] netlink: 'syz.2.934': attribute type 11 has an invalid length. [ 159.859243][ T9143] v: renamed from vlan0 [ 160.159235][ T9160] bond4 (unregistering): Released all slaves [ 160.612731][ T9188] bond4: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 160.800172][ T9201] netlink: 'syz.4.952': attribute type 21 has an invalid length. [ 160.832514][ T9201] netlink: 'syz.4.952': attribute type 5 has an invalid length. [ 160.832641][ T9208] nftables ruleset with unbound set [ 160.868023][ T9209] netlink: 'syz.0.951': attribute type 16 has an invalid length. [ 160.892711][ T9209] netlink: 'syz.0.951': attribute type 16 has an invalid length. [ 161.357477][ T9241] __nla_validate_parse: 13 callbacks suppressed [ 161.357498][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 161.414162][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.964'. [ 161.423616][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 161.444425][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 161.450690][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 161.465866][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 161.477329][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 161.485667][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.964'. [ 161.550699][ T9253] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 161.920457][ T9278] tipc: Enabling of bearer rejected, failed to enable media [ 162.108762][ T9291] tipc: Enabled bearer , priority 10 [ 162.137258][ T9290] Z7nz>RA: renamed from lo [ 162.328903][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'. [ 162.374500][ T9304] netlink: 48 bytes leftover after parsing attributes in process `syz.3.987'. [ 162.454618][ T9313] tc_dump_action: action bad kind [ 163.224028][ T6034] tipc: Node number set to 1151485713 [ 163.554413][ T9375] netlink: 'syz.1.1010': attribute type 2 has an invalid length. [ 163.665418][ T9385] syz_tun: entered allmulticast mode [ 163.706549][ T9384] syz_tun: left allmulticast mode [ 163.903776][ T9401] ip6t_rpfilter: unknown options [ 163.931032][ T9401] pim6reg1: entered promiscuous mode [ 163.936611][ T9401] pim6reg1: entered allmulticast mode [ 163.958721][ T9344] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 165.666675][ T9481] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 165.836714][ T9487] bond5: Removing last arp target with arp_interval on [ 166.360219][ T9524] netlink: zone id is out of range [ 166.372323][ T9524] netlink: zone id is out of range [ 166.372423][ T9520] __nla_validate_parse: 10 callbacks suppressed [ 166.372441][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 166.404472][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 166.415780][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 166.435901][ T9533] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1051'. [ 166.568998][ T9533] bond4 (unregistering): Released all slaves [ 166.605131][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 166.633252][ T9542] veth0_macvtap: left promiscuous mode [ 166.750886][ T9544] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1059'. [ 166.941326][ T9556] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 166.980528][ T9559] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.011232][ T9559] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1064'. [ 167.195750][ T9575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1070'. [ 167.358657][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1073'. [ 167.599552][ T9605] netlink: 'syz.4.1078': attribute type 8 has an invalid length. [ 167.756842][ T9611] netlink: 'syz.4.1080': attribute type 29 has an invalid length. [ 167.787328][ T9611] netlink: 'syz.4.1080': attribute type 29 has an invalid length. [ 167.810741][ T9611] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1080'. [ 168.201152][ T9638] netlink: 'syz.3.1088': attribute type 1 has an invalid length. [ 168.211481][ T9624] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 168.320779][ T9643] veth5: entered promiscuous mode [ 168.387122][ T9638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.008439][ T9675] team0 (unregistering): Port device team_slave_0 removed [ 169.051997][ T9675] team0 (unregistering): Port device team_slave_1 removed [ 169.291414][ T9696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.592680][ T9713] pimreg: entered allmulticast mode [ 169.629269][ T9713] bridge0: port 3(batadv0) entered blocking state [ 169.638068][ T9713] bridge0: port 3(batadv0) entered disabled state [ 169.675696][ T9713] batadv0: entered allmulticast mode [ 169.693700][ T9713] batadv0: entered promiscuous mode [ 169.746871][ T9725] bond0: entered promiscuous mode [ 169.753262][ T9723] netlink: 'syz.1.1109': attribute type 11 has an invalid length. [ 169.756276][ T9725] batadv0: entered promiscuous mode [ 169.768072][ T9725] debugfs: 'hsr0' already exists in 'hsr' [ 169.774055][ T9725] Cannot create hsr debugfs directory [ 169.779746][ T9725] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 169.791584][ T9725] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 169.803153][ T9726] tipc: Enabled bearer , priority 0 [ 169.811064][ T9730] syzkaller0: entered promiscuous mode [ 169.817843][ T9730] syzkaller0: entered allmulticast mode [ 169.837827][ T9731] : entered promiscuous mode [ 169.878530][ T9726] tipc: Resetting bearer [ 169.897917][ T9724] tipc: Resetting bearer [ 169.916823][ T9724] tipc: Disabling bearer [ 169.965683][ T9737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.981929][ T9737] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 170.009646][ T9737] bond0: (slave gre0): Error -95 calling set_mac_address [ 170.124294][ T60] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 170.133769][ T60] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 170.924745][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 171.629796][ T9823] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 171.705981][ T9828] netlink: 'syz.1.1138': attribute type 21 has an invalid length. [ 171.771251][ T9828] __nla_validate_parse: 13 callbacks suppressed [ 171.771284][ T9828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1138'. [ 171.859276][ T9838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1141'. [ 171.985868][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 172.541811][ T9885] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 172.614503][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 172.625404][ T9898] netlink: 'syz.3.1151': attribute type 10 has an invalid length. [ 172.664483][ T9888] tipc: Enabled bearer , priority 0 [ 172.729978][ T9898] bridge_slave_1: entered promiscuous mode [ 172.746695][ T9898] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 172.817044][ T9888] tipc: Disabling bearer [ 173.009602][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 173.016267][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 173.049930][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'. [ 173.201823][ T9919] xt_bpf: check failed: parse error [ 173.504375][ T9945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1165'. [ 173.579470][ T9949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1165'. [ 173.730599][ T9961] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1171'. [ 173.775951][ T9965] netlink: 'syz.3.1173': attribute type 13 has an invalid length. [ 173.824035][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 173.867882][ T9965] netlink: 'syz.3.1173': attribute type 13 has an invalid length. [ 174.081559][ T9985] netlink: 'syz.1.1178': attribute type 21 has an invalid length. [ 174.100019][ T9985] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 174.125142][ T9987] smc: net device gre0 applied user defined pnetid SYZ1 [ 174.144257][ T9987] smc: net device gre0 erased user defined pnetid SYZ1 [ 174.160037][ T9985] ieee802154 phy1 wpan1: encryption failed: -22 [ 174.270161][ T9994] netlink: 'syz.4.1183': attribute type 3 has an invalid length. [ 174.408776][T10002] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 174.521359][T10008] team1: entered promiscuous mode [ 174.544592][T10008] team1: entered allmulticast mode [ 175.080550][T10049] syzkaller1: entered promiscuous mode [ 175.090289][T10049] syzkaller1: entered allmulticast mode [ 175.129541][T10053] netlink: 'syz.2.1197': attribute type 12 has an invalid length. [ 175.192125][T10053] bond6: option primary_reselect: invalid value (255) [ 175.229096][T10053] bond6 (unregistering): Released all slaves [ 175.321811][T10065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.346573][T10060] syzkaller1: entered promiscuous mode [ 175.352102][T10060] syzkaller1: entered allmulticast mode [ 175.374474][T10068] netlink: 'syz.3.1200': attribute type 11 has an invalid length. [ 175.393985][T10065] netlink: 'syz.3.1200': attribute type 11 has an invalid length. [ 175.394876][T10061] netlink: 'syz.1.1199': attribute type 3 has an invalid length. [ 175.481647][T10076] Bluetooth: MGMT ver 1.23 [ 176.425108][T10143] tipc: Enabling of bearer rejected, failed to enable media [ 176.515027][T10147] openvswitch: netlink: Actions may not be safe on all matching packets [ 176.589165][T10150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.730271][T10150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.788893][T10164] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 176.802637][T10164] bond5 (unregistering): Released all slaves [ 176.955606][T10150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.122204][T10188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.173156][T10196] __nla_validate_parse: 12 callbacks suppressed [ 177.173176][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1235'. [ 177.193571][T10150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.205246][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 177.215886][T10183] sch_tbf: burst 512 is lower than device ip6gretap0 mtu (1606) ! [ 177.236682][T10199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.385663][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.438797][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.456569][T10214] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1242'. [ 177.500353][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.533005][ T1165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.563933][ T5844] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 177.563952][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 177.581426][T10214] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1242'. [ 177.591725][T10218] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1242'. [ 177.990853][T10249] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1251'. [ 178.162727][T10271] validate_nla: 5 callbacks suppressed [ 178.162746][T10271] netlink: 'syz.0.1256': attribute type 5 has an invalid length. [ 178.265766][T10276] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 178.452826][ T983] IPVS: starting estimator thread 0... [ 178.468061][T10287] netlink: 'syz.2.1262': attribute type 33 has an invalid length. [ 178.481773][T10292] bond0: (slave macvlan0): Error -22 calling dev_set_mtu [ 178.564767][T10294] IPVS: using max 41 ests per chain, 98400 per kthread [ 178.632210][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 178.763145][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'. [ 178.778419][T10311] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1269'. [ 179.345213][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 179.764391][T10369] netlink: 'syz.2.1287': attribute type 2 has an invalid length. [ 180.065259][ T4524] tipc: Subscription rejected, illegal request [ 180.366162][T10368] netlink: 'syz.4.1286': attribute type 1 has an invalid length. [ 180.376917][T10368] NCSI netlink: No device for ifindex 0 [ 180.554543][T10409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.157894][T10444] rdma_op ffff888027fcf1f0 conn xmit_rdma 0000000000000000 [ 181.173950][T10441] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.199413][T10441] netlink: 'syz.4.1305': attribute type 13 has an invalid length. [ 181.215374][T10449] netlink: 'syz.1.1307': attribute type 8 has an invalid length. [ 181.294350][T10441] gretap0: refused to change device tx_queue_len [ 181.339337][T10441] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 181.513499][T10457] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 181.519621][T10457] syzkaller1: Refused to change device type [ 181.615731][T10473] bond5: entered promiscuous mode [ 181.621283][T10473] bond5: entered allmulticast mode [ 181.628734][T10473] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.966987][T10493] netlink: 'syz.0.1321': attribute type 33 has an invalid length. [ 182.346250][T10512] __nla_validate_parse: 9 callbacks suppressed [ 182.346268][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1327'. [ 182.390880][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 182.402020][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1327'. [ 182.403104][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1327'. [ 182.459982][T10517] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 182.471148][T10517] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1329'. [ 182.831884][T10536] netlink: 'syz.1.1332': attribute type 4 has an invalid length. [ 182.983468][T10540] tipc: Enabling of bearer rejected, failed to enable media [ 183.098116][T10547] xt_bpf: check failed: parse error [ 183.121810][T10547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1336'. [ 183.155634][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 183.177923][T10553] netlink: 'syz.2.1339': attribute type 2 has an invalid length. [ 183.188997][T10553] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1339'. [ 183.236672][T10558] netlink: 'syz.2.1339': attribute type 2 has an invalid length. [ 183.244679][T10558] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1339'. [ 183.281960][T10560] geneve2: entered promiscuous mode [ 183.295606][T10560] geneve2: entered allmulticast mode [ 183.345160][ T4524] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 183.354861][ T4524] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 183.363224][ T4524] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 183.411525][T10565] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.502233][T10582] netlink: 'syz.3.1346': attribute type 10 has an invalid length. [ 183.560597][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 183.618827][T10589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.633579][T10589] sctp: [Deprecated]: syz.3.1348 (pid 10589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.633579][T10589] Use struct sctp_sack_info instead [ 183.655781][T10589] netlink: 'syz.3.1348': attribute type 27 has an invalid length. [ 184.497754][T10624] x_tables: ip6_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 64 [ 184.563751][T10627] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 184.611714][T10627] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 184.642629][T10627] veth9: entered promiscuous mode [ 184.652398][T10627] bond2: (slave veth9): Enslaving as a backup interface with a down link [ 185.043435][T10649] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 185.056374][T10649] gretap1: entered promiscuous mode [ 185.061608][T10649] gretap1: entered allmulticast mode [ 185.072749][T10565] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.082655][T10565] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 185.147371][T10565] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.160023][T10565] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 185.232034][T10565] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.248250][T10565] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 185.384345][T10659] vlan2: entered allmulticast mode [ 185.397597][T10659] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 185.525678][ T4524] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 185.542353][ T4524] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.551346][ T4524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 185.560485][ T4524] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.606910][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 185.615812][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.662379][ T4524] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 185.679674][ T4524] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.983559][T10691] netlink: 'syz.3.1378': attribute type 5 has an invalid length. [ 186.067716][T10702] netlink: 'syz.1.1382': attribute type 10 has an invalid length. [ 186.093812][T10702] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.110472][T10702] bridge_slave_1: left allmulticast mode [ 186.116359][T10702] bridge_slave_1: left promiscuous mode [ 186.122277][T10702] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.154499][T10704] tipc: Enabled bearer , priority 0 [ 186.172887][T10704] syzkaller0: entered promiscuous mode [ 186.185167][T10704] syzkaller0: entered allmulticast mode [ 186.228917][T10704] tipc: Resetting bearer [ 186.251164][T10703] tipc: Resetting bearer [ 186.288265][T10703] tipc: Disabling bearer [ 186.705360][T10751] netlink: 'syz.2.1394': attribute type 11 has an invalid length. [ 186.735854][T10751] netlink: 'syz.2.1394': attribute type 11 has an invalid length. [ 186.802665][T10755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.812116][T10755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.821949][T10755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.917419][T10761] syzkaller0: entered promiscuous mode [ 186.929752][T10761] syzkaller0: entered allmulticast mode [ 187.013612][T10756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.351770][T10789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.363109][T10784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.666496][T10809] netlink: 'syz.2.1412': attribute type 13 has an invalid length. [ 187.820837][T10821] sctp: [Deprecated]: syz.4.1414 (pid 10821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.820837][T10821] Use struct sctp_sack_info instead [ 187.957155][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.089128][T10803] veth0_to_bond: left allmulticast mode [ 188.126164][T10803] batadv_slave_0: left promiscuous mode [ 188.131997][T10803] batadv_slave_0: left allmulticast mode [ 188.376568][T10803] ip6gre1: left allmulticast mode [ 188.389019][T10803] ip6gre2: left promiscuous mode [ 188.395466][T10803] ip6gre2: left allmulticast mode [ 188.408758][T10803] veth5: left allmulticast mode [ 188.538961][T10803] veth9: left promiscuous mode [ 188.558311][T10808] geneve3: entered promiscuous mode [ 188.725060][ T4524] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.734839][ T4524] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.755270][ T4524] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 188.776667][ T4524] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.791503][ T4524] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.801722][ T4524] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 188.811388][ T4524] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.821179][ T4524] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.863426][ T4524] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 188.895533][ T4524] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.911094][ T4524] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.920632][ T4524] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 188.974296][T10856] netlink: 'syz.2.1418': attribute type 83 has an invalid length. [ 188.989120][T10856] bond0: (slave rose0): Enslaving as an active interface with an up link [ 189.163545][T10864] netlink: 'syz.4.1421': attribute type 11 has an invalid length. [ 189.177050][T10864] __nla_validate_parse: 16 callbacks suppressed [ 189.177069][T10864] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1421'. [ 189.212534][T10864] syzkaller0: entered promiscuous mode [ 189.223187][T10864] syzkaller0: entered allmulticast mode [ 189.244455][T10867] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1423'. [ 189.467972][T10878] tipc: Trying to set illegal importance in message [ 189.478471][T10869] syz.3.1424: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 189.502716][T10869] CPU: 1 UID: 0 PID: 10869 Comm: syz.3.1424 Not tainted syzkaller #0 PREEMPT(full) [ 189.502746][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.502759][T10869] Call Trace: [ 189.502768][T10869] [ 189.502777][T10869] dump_stack_lvl+0x189/0x250 [ 189.502829][T10869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.502859][T10869] ? __pfx__printk+0x10/0x10 [ 189.502880][T10869] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 189.502908][T10869] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 189.502937][T10869] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 189.502970][T10869] warn_alloc+0x214/0x310 [ 189.503011][T10869] ? __pfx_warn_alloc+0x10/0x10 [ 189.503054][T10869] ? __get_vm_area_node+0x28f/0x300 [ 189.503085][T10869] ? hash_netportnet_create+0x354/0xf90 [ 189.503129][T10869] __vmalloc_node_range_noprof+0x690/0x12d0 [ 189.503189][T10869] ? alloc_pages_mpol+0x3cd/0x4a0 [ 189.503225][T10869] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.503262][T10869] ? rcu_is_watching+0x15/0xb0 [ 189.503287][T10869] ? hash_netportnet_create+0x354/0xf90 [ 189.503311][T10869] __kvmalloc_node_noprof+0x674/0x910 [ 189.503363][T10869] ? hash_netportnet_create+0x354/0xf90 [ 189.503385][T10869] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 189.503415][T10869] ? hash_netportnet_create+0x2fa/0xf90 [ 189.503443][T10869] hash_netportnet_create+0x354/0xf90 [ 189.503474][T10869] ? __nla_parse+0x40/0x60 [ 189.503497][T10869] ? __pfx_hash_netportnet_create+0x10/0x10 [ 189.503532][T10869] ip_set_create+0xa97/0x1940 [ 189.503558][T10869] ? ip_set_create+0x4a2/0x1940 [ 189.503594][T10869] ? __pfx_ip_set_create+0x10/0x10 [ 189.503659][T10869] nfnetlink_rcv_msg+0xb4d/0x1130 [ 189.503688][T10869] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 189.503733][T10869] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 189.503757][T10869] ? kasan_save_track+0x4f/0x80 [ 189.503838][T10869] netlink_rcv_skb+0x208/0x470 [ 189.503867][T10869] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.503893][T10869] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 189.503921][T10869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.503963][T10869] ? bpf_lsm_capable+0x9/0x20 [ 189.503987][T10869] ? security_capable+0x7e/0x2e0 [ 189.504021][T10869] nfnetlink_rcv+0x282/0x2590 [ 189.504051][T10869] ? __dev_queue_xmit+0x27b/0x3b50 [ 189.504075][T10869] ? __dev_queue_xmit+0x1d79/0x3b50 [ 189.504102][T10869] ? kasan_save_track+0x3e/0x80 [ 189.504127][T10869] ? __kasan_slab_alloc+0x6c/0x80 [ 189.504171][T10869] ? __dev_queue_xmit+0x27b/0x3b50 [ 189.504206][T10869] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 189.504233][T10869] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.504271][T10869] ? ref_tracker_free+0x63a/0x7d0 [ 189.504290][T10869] ? __asan_memcpy+0x40/0x70 [ 189.504315][T10869] ? __pfx_ref_tracker_free+0x10/0x10 [ 189.504351][T10869] ? skb_clone+0x246/0x3a0 [ 189.504376][T10869] ? __netlink_deliver_tap+0x807/0x850 [ 189.504406][T10869] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.504442][T10869] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.504481][T10869] netlink_unicast+0x82f/0x9e0 [ 189.504518][T10869] ? __pfx_netlink_unicast+0x10/0x10 [ 189.504547][T10869] ? netlink_sendmsg+0x642/0xb30 [ 189.504563][T10869] ? skb_put+0x11b/0x210 [ 189.504584][T10869] netlink_sendmsg+0x805/0xb30 [ 189.504613][T10869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.504647][T10869] ? aa_sock_msg_perm+0xf1/0x1d0 [ 189.504677][T10869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.504695][T10869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.504727][T10869] __sock_sendmsg+0x21c/0x270 [ 189.504756][T10869] ____sys_sendmsg+0x505/0x830 [ 189.504782][T10869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.504812][T10869] ? import_iovec+0x74/0xa0 [ 189.504840][T10869] ___sys_sendmsg+0x21f/0x2a0 [ 189.504863][T10869] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.504923][T10869] ? __fget_files+0x2a/0x420 [ 189.504941][T10869] ? __fget_files+0x3a0/0x420 [ 189.504971][T10869] __x64_sys_sendmsg+0x19b/0x260 [ 189.504999][T10869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.505036][T10869] ? do_syscall_64+0xbe/0xfa0 [ 189.505065][T10869] do_syscall_64+0xfa/0xfa0 [ 189.505087][T10869] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.505118][T10869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.505137][T10869] ? clear_bhb_loop+0x60/0xb0 [ 189.505161][T10869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.505179][T10869] RIP: 0033:0x7f50d4f8efc9 [ 189.505204][T10869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.505218][T10869] RSP: 002b:00007f50d5f12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.505238][T10869] RAX: ffffffffffffffda RBX: 00007f50d51e5fa0 RCX: 00007f50d4f8efc9 [ 189.505252][T10869] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d [ 189.505264][T10869] RBP: 00007f50d5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 189.505275][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.505286][T10869] R13: 00007f50d51e6038 R14: 00007f50d51e5fa0 R15: 00007ffc340a5858 [ 189.505320][T10869] [ 189.994746][T10869] Mem-Info: [ 189.997906][T10869] active_anon:4644 inactive_anon:0 isolated_anon:0 [ 189.997906][T10869] active_file:2629 inactive_file:39910 isolated_file:0 [ 189.997906][T10869] unevictable:768 dirty:113 writeback:0 [ 189.997906][T10869] slab_reclaimable:11582 slab_unreclaimable:98835 [ 189.997906][T10869] mapped:29053 shmem:1364 pagetables:1045 [ 189.997906][T10869] sec_pagetables:0 bounce:0 [ 189.997906][T10869] kernel_misc_reclaimable:0 [ 189.997906][T10869] free:1330759 free_pcp:15306 free_cma:0 [ 190.071707][T10880] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.083334][T10869] Node 0 active_anon:18536kB inactive_anon:0kB active_file:10516kB inactive_file:159440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116212kB dirty:184kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12832kB pagetables:4072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.116983][T10869] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.148535][T10869] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.181961][T10869] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 190.188068][T10869] Node 0 DMA32 free:1415816kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18536kB inactive_anon:0kB active_file:10516kB inactive_file:159440kB unevictable:1536kB writepending:184kB zspages:0kB present:3129332kB managed:2565180kB mlocked:0kB bounce:0kB free_pcp:41644kB local_pcp:20284kB free_cma:0kB [ 190.223186][T10869] lowmem_reserve[]: 0 0 0 0 0 [ 190.228045][T10869] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.257805][T10869] lowmem_reserve[]: 0 0 0 0 0 [ 190.262577][T10869] Node 1 Normal free:3892736kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19144kB local_pcp:8936kB free_cma:0kB [ 190.296643][T10869] lowmem_reserve[]: 0 0 0 0 0 [ 190.301429][T10869] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 190.314535][T10869] Node 0 DMA32: 776*4kB (UM) 541*8kB (UME) 106*16kB (UM) 581*32kB (UM) 111*64kB (UM) 37*128kB (UM) 34*256kB (UME) 25*512kB (UME) 27*1024kB (UME) 8*2048kB (M) 320*4096kB (UM) = 1415816kB [ 190.333492][T10869] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 190.345192][T10869] Node 1 Normal: 210*4kB (UE) 59*8kB (UME) 50*16kB (UME) 86*32kB (UME) 28*64kB (UME) 6*128kB (UME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3892736kB [ 190.355479][T10889] syzkaller0: entered promiscuous mode [ 190.363487][T10869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.379394][T10869] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.387612][T10889] syzkaller0: entered allmulticast mode [ 190.389708][T10869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.405315][T10869] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.415017][T10869] 43893 total pagecache pages [ 190.419807][T10869] 0 pages in swap cache [ 190.424150][T10869] Free swap = 124996kB [ 190.428319][T10869] Total swap = 124996kB [ 190.432576][T10869] 2097051 pages RAM [ 190.436472][T10869] 0 pages HighMem/MovableOnly [ 190.442189][T10869] 424114 pages reserved [ 190.446414][T10869] 0 pages cma reserved [ 190.747898][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 190.760347][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 190.792756][T10911] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 190.822007][T10911] bridge0: port 2(batadv0) entered blocking state [ 190.829905][T10911] bridge0: port 2(batadv0) entered disabled state [ 190.838395][T10911] batadv0: entered allmulticast mode [ 190.846508][T10911] batadv0: entered promiscuous mode [ 190.965320][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 190.976514][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 191.251400][T10936] geneve3: entered promiscuous mode [ 191.256799][T10936] geneve3: entered allmulticast mode [ 191.267159][ T4524] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 191.283576][ T4524] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 191.292902][ T4524] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 191.303516][ T4524] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 191.335086][ T60] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 191.344481][ T60] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 191.469086][T10952] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1446'. [ 191.616753][T10963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1452'. [ 191.712815][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 191.723314][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 191.737613][T10968] netlink: 'syz.0.1455': attribute type 12 has an invalid length. [ 191.746124][T10968] netlink: 'syz.0.1455': attribute type 11 has an invalid length. [ 191.840017][T10975] openvswitch: netlink: IP tunnel dst address not specified [ 192.190959][T10996] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 192.242217][T10996] bond6: entered promiscuous mode [ 192.249902][T10996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.259560][T11000] netlink: 'syz.0.1461': attribute type 10 has an invalid length. [ 192.319186][T10996] bond6: (slave bridge2): making interface the new active one [ 192.348726][T10996] bridge2: entered promiscuous mode [ 192.372393][T10996] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 192.403465][T11018] ipt_REJECT: ECHOREPLY no longer supported. [ 192.708223][T11036] tipc: Enabled bearer , priority 0 [ 192.797169][T11036] syzkaller0: entered promiscuous mode [ 192.802702][T11036] syzkaller0: entered allmulticast mode [ 192.826176][T11036] tipc: Resetting bearer [ 192.844230][T11035] tipc: Resetting bearer [ 193.416498][T11082] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 194.196208][T11035] tipc: Disabling bearer [ 194.209899][T11060] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 194.225108][T11083] __nla_validate_parse: 8 callbacks suppressed [ 194.225128][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 194.283584][T11086] netlink: 'syz.2.1485': attribute type 21 has an invalid length. [ 194.292885][T11086] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1485'. [ 194.635899][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1491'. [ 194.657818][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1491'. [ 195.413418][T11151] netlink: 'syz.4.1501': attribute type 1 has an invalid length. [ 195.459848][T11157] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 195.478447][T11155] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 195.505592][T11155] netlink: 'syz.1.1503': attribute type 7 has an invalid length. [ 195.523442][T11157] netlink: 'syz.1.1503': attribute type 7 has an invalid length. [ 195.556846][T11155] netlink: 'syz.1.1503': attribute type 8 has an invalid length. [ 195.576636][T11157] netlink: 'syz.1.1503': attribute type 8 has an invalid length. [ 195.595224][T11157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1503'. [ 195.603841][T11155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1503'. [ 195.992402][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 196.166580][T11193] netlink: 'syz.1.1513': attribute type 29 has an invalid length. [ 196.175690][T11197] netlink: 'syz.1.1513': attribute type 29 has an invalid length. [ 196.289768][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 196.372603][T11207] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1517'. [ 196.383553][T11207] team0: Caught tx_queue_len zero misconfig [ 196.444273][ T5844] Bluetooth: hci1: command tx timeout [ 196.759098][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1520'. [ 197.066219][T11230] pim6reg1: entered promiscuous mode [ 197.075675][T11230] pim6reg1: entered allmulticast mode [ 197.241133][T11238] syzkaller1: entered promiscuous mode [ 197.248586][T11238] syzkaller1: entered allmulticast mode [ 197.428908][T11245] raw_sendmsg: syz.3.1530 forgot to set AF_INET. Fix it! [ 197.619957][T11254] nbd: must specify an index to disconnect [ 197.626649][T11251] vlan1: entered allmulticast mode [ 197.631929][T11251] veth0_vlan: entered allmulticast mode [ 198.445111][T11298] syzkaller0: entered promiscuous mode [ 198.450651][T11298] syzkaller0: entered allmulticast mode [ 198.528630][T11307] batadv0 (unregistering): left allmulticast mode [ 198.539103][T11307] batadv0 (unregistering): left promiscuous mode [ 198.553548][T11307] bridge0: port 2(batadv0) entered disabled state [ 198.800017][T11314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.816334][T11314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.834622][T11314] bond0 (unregistering): Released all slaves [ 198.961639][T11318] team0 (unregistering): Port device team_slave_0 removed [ 198.990478][T11318] team0 (unregistering): Port device team_slave_1 removed [ 199.035104][T11324] pim6reg1: entered promiscuous mode [ 199.040625][T11324] pim6reg1: entered allmulticast mode [ 199.172278][T11333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.305122][T11333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.418879][T11351] __nla_validate_parse: 9 callbacks suppressed [ 199.418897][T11351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1565'. [ 199.560217][T11357] validate_nla: 1 callbacks suppressed [ 199.560235][T11357] netlink: 'syz.2.1566': attribute type 1 has an invalid length. [ 199.602471][T11357] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 199.876269][T11385] pimreg3: entered allmulticast mode [ 199.892776][T11385] tipc: Enabled bearer , priority 0 [ 199.908830][T11385] syzkaller0: entered promiscuous mode [ 199.922577][T11385] syzkaller0: entered allmulticast mode [ 199.991554][T11385] tipc: Resetting bearer [ 200.006257][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'. [ 200.012926][T11394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.037224][T11380] tipc: Resetting bearer [ 200.066113][T11380] tipc: Disabling bearer [ 200.155417][T11402] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1581'. [ 200.447503][T11418] xt_hashlimit: max too large, truncated to 1048576 [ 200.875531][T11444] netlink: 'syz.3.1593': attribute type 3 has an invalid length. [ 200.896328][T11444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1593'. [ 200.911007][T11434] netlink: 'syz.2.1591': attribute type 13 has an invalid length. [ 200.938535][T11444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1593'. [ 200.977232][T11444] netlink: 'syz.3.1593': attribute type 7 has an invalid length. [ 201.015180][T11444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1593'. [ 201.676485][T11492] veth0_vlan: mtu less than device minimum [ 201.978837][T11510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1606'. [ 202.009939][T11513] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1607'. [ 202.100130][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'. [ 202.186715][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 202.349689][T11534] netlink: 'syz.4.1613': attribute type 1 has an invalid length. [ 202.401510][T11540] netlink: 'syz.2.1614': attribute type 39 has an invalid length. [ 202.417004][T11534] bond6: (slave gretap1): making interface the new active one [ 202.426028][T11534] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 202.440505][T11534] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.515351][T11545] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 202.587644][T11542] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 203.221194][T11591] bond2: ARP target 1.0.0.0 is already present [ 203.231808][T11591] bond2: option arp_ip_target: invalid value (1) [ 203.241205][T11591] bond2 (unregistering): Released all slaves [ 203.337539][T11598] tipc: New replicast peer: 255.255.255.255 [ 203.344726][T11598] tipc: Enabled bearer , priority 10 [ 203.380883][T11610] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 203.435579][T11604] syzkaller1: entered promiscuous mode [ 203.441253][T11604] syzkaller1: entered allmulticast mode [ 203.843570][T11631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.911855][T11638] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 204.264540][T11659] syzkaller1: entered promiscuous mode [ 204.277042][T11659] syzkaller1: entered allmulticast mode [ 204.303884][T11661] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 204.527453][T11661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.556389][T11662] veth9: entered promiscuous mode [ 204.566347][T11662] bond0: (slave veth9): Enslaving as an active interface with a down link [ 204.967392][T11680] __nla_validate_parse: 11 callbacks suppressed [ 204.967413][T11680] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1654'. [ 205.461270][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 205.493243][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 205.515591][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 205.560401][T11705] 8021q: VLANs not supported on ipvlan1 [ 206.030523][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.041356][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.051965][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.060471][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.069629][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.136924][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.150070][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.161840][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.180229][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.195176][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.415108][T11723] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1672'. [ 206.749672][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 206.774610][T11741] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 206.787842][T11741] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 206.799738][T11741] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 206.821187][T11713] chnl_net:caif_netlink_parms(): no params data found [ 206.970310][T11752] IPVS: set_ctl: invalid protocol: 105 224.0.0.2:20001 [ 207.039495][T11758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1681'. [ 207.113058][T11715] chnl_net:caif_netlink_parms(): no params data found [ 207.144983][T11713] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.155934][T11713] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.167973][T11713] bridge_slave_0: entered allmulticast mode [ 207.179713][T11713] bridge_slave_0: entered promiscuous mode [ 207.211072][T11713] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.226953][T11713] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.240078][T11713] bridge_slave_1: entered allmulticast mode [ 207.252235][T11713] bridge_slave_1: entered promiscuous mode [ 207.298852][T11774] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1685'. [ 207.456171][T11713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.470889][T11713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.523627][T11715] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.531218][T11715] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.539614][T11715] bridge_slave_0: entered allmulticast mode [ 207.547838][T11715] bridge_slave_0: entered promiscuous mode [ 207.575573][T11715] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.582886][T11715] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.590385][T11715] bridge_slave_1: entered allmulticast mode [ 207.598891][T11715] bridge_slave_1: entered promiscuous mode [ 207.630227][T11713] team0: Port device team_slave_0 added [ 207.643048][T11713] team0: Port device team_slave_1 added [ 207.727297][T11715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.739887][T11715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.756509][T11713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.764581][T11713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.795753][T11713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.810528][T11713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.818403][T11713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.846526][T11713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.955546][T11715] team0: Port device team_slave_0 added [ 208.052165][T11715] team0: Port device team_slave_1 added [ 208.126402][ T5839] Bluetooth: hci1: command tx timeout [ 208.177765][T11713] hsr_slave_0: entered promiscuous mode [ 208.185460][T11713] hsr_slave_1: entered promiscuous mode [ 208.191874][T11713] debugfs: 'hsr0' already exists in 'hsr' [ 208.197768][T11713] Cannot create hsr debugfs directory [ 208.245916][T11715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.252911][T11715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.279345][T11715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.290893][ T5839] Bluetooth: hci4: command tx timeout [ 208.299663][T11777] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 208.300394][T11715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.313110][T11715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.340718][T11715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.483692][T11807] netlink: 'syz.2.1695': attribute type 7 has an invalid length. [ 208.539030][T11807] wg1: entered promiscuous mode [ 208.545485][T11807] wg1: entered allmulticast mode [ 208.568783][T11715] hsr_slave_0: entered promiscuous mode [ 208.576623][T11715] hsr_slave_1: entered promiscuous mode [ 208.583325][T11715] debugfs: 'hsr0' already exists in 'hsr' [ 208.590257][T11715] Cannot create hsr debugfs directory [ 209.094324][T11715] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.139595][T11713] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.172715][T11713] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.205425][T11715] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.227360][T11715] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.252217][T11715] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.279433][T11713] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.363736][T11713] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.635443][T11857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1708'. [ 209.661734][T11857] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1708'. [ 209.668504][T11715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.695561][T11853] netlink: 'syz.2.1706': attribute type 2 has an invalid length. [ 209.731878][T11713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.793153][T11713] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.838548][T11715] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.886935][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.894163][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.941888][T11868] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 209.962441][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.969654][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.020130][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.027481][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.037798][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.045005][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.204774][ T52] Bluetooth: hci1: command tx timeout [ 210.311559][T11872] __nla_validate_parse: 1 callbacks suppressed [ 210.311581][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 210.374733][ T52] Bluetooth: hci4: command tx timeout [ 210.773222][T11898] x_tables: duplicate underflow at hook 1 [ 210.954745][T11715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.997252][T11713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.391270][T11924] netlink: 'syz.0.1719': attribute type 7 has an invalid length. [ 211.428404][T11925] netlink: 'syz.0.1719': attribute type 7 has an invalid length. [ 211.494257][T11929] netlink: 'syz.2.1720': attribute type 21 has an invalid length. [ 211.507027][T11929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1720'. [ 211.781518][T11715] veth0_vlan: entered promiscuous mode [ 211.797370][T11713] veth0_vlan: entered promiscuous mode [ 211.826331][T11715] veth1_vlan: entered promiscuous mode [ 211.851074][T11713] veth1_vlan: entered promiscuous mode [ 211.893920][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 211.894825][ T5148] Bluetooth: hci2: command 0x0401 tx timeout [ 211.977592][T11946] bridge0: entered promiscuous mode [ 211.982871][T11946] bridge0: entered allmulticast mode [ 212.051181][T11715] veth0_macvtap: entered promiscuous mode [ 212.109658][T11715] veth1_macvtap: entered promiscuous mode [ 212.142257][T11713] veth0_macvtap: entered promiscuous mode [ 212.159241][T11713] veth1_macvtap: entered promiscuous mode [ 212.185671][T11957] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1728'. [ 212.209094][T11713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.247563][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 212.257073][T11715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.285500][ T5844] Bluetooth: hci1: command tx timeout [ 212.296959][T11962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.330513][T11713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.372577][T11715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.411547][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.426241][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.444453][ T5844] Bluetooth: hci4: command tx timeout [ 212.480072][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.511085][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.543424][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.590238][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.643195][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.683416][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.702718][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'. [ 212.753527][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.765687][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.811832][T11984] IPv6: sit2: Disabled Multicast RS [ 212.820415][T11984] sit2: entered allmulticast mode [ 212.868803][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.877120][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.899339][T11988] tipc: MTU too low for tipc bearer [ 212.917446][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.942333][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.966726][T11988] tipc: MTU too low for tipc bearer [ 212.983858][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.991749][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.177326][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1743'. [ 213.286612][T12010] netlink: 'syz.5.1744': attribute type 1 has an invalid length. [ 213.315831][T12014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1745'. [ 213.667632][T12026] bond6: option resend_igmp: invalid value (32767) [ 213.675553][T12026] bond6: option resend_igmp: allowed values 0 - 255 [ 213.708924][ T30] audit: type=1107 audit(1761338043.450:4): pid=12029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 213.729394][T12026] bond6 (unregistering): Released all slaves [ 214.079849][T12037] syzkaller1: entered promiscuous mode [ 214.155350][T12037] syzkaller1: entered allmulticast mode [ 214.308161][T12042] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1751'. [ 214.367462][ T5844] Bluetooth: hci1: command tx timeout [ 214.534485][ T5844] Bluetooth: hci4: command tx timeout [ 214.891591][T12053] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1752'. [ 214.908629][T12053] vlan2: entered allmulticast mode [ 214.914390][T12053] erspan0: entered allmulticast mode [ 215.105692][T12057] 0: reclassify loop, rule prio 0, protocol 800 [ 215.506940][T12064] tipc: Started in network mode [ 215.517392][T12064] tipc: Node identity 3642b6028d32, cluster identity 4711 [ 215.544107][T12064] tipc: Enabled bearer , priority 0 [ 215.555201][T12064] syzkaller0: entered promiscuous mode [ 215.560706][T12064] syzkaller0: entered allmulticast mode [ 215.598162][T12064] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 215.715184][T12068] tipc: Resetting bearer [ 215.754482][T12062] tipc: Resetting bearer [ 215.820726][T12062] tipc: Disabling bearer [ 216.182783][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1763'. [ 216.241415][T12079] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1764'. [ 216.607085][T12092] netlink: 'syz.5.1767': attribute type 1 has an invalid length. [ 217.033347][T12110] Bluetooth: MGMT ver 1.23 [ 217.125762][T12114] netlink: 'syz.6.1776': attribute type 178 has an invalid length. [ 217.208319][T12120] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 217.297785][T12127] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1778'. [ 217.533959][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 217.591465][T12132] netlink: 'syz.6.1780': attribute type 10 has an invalid length. [ 217.601132][T12132] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1780'. [ 217.614065][T12132] dummy0: entered promiscuous mode [ 217.621562][T12132] bridge0: port 3(dummy0) entered blocking state [ 217.633702][T12132] bridge0: port 3(dummy0) entered disabled state [ 217.644571][T12132] dummy0: entered allmulticast mode [ 217.651164][T12140] netlink: 'syz.6.1780': attribute type 11 has an invalid length. [ 217.663507][T12132] bridge0: port 3(dummy0) entered blocking state [ 217.670022][T12132] bridge0: port 3(dummy0) entered forwarding state [ 217.716945][T12139] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 217.755468][T12139] bond6 (unregistering): Released all slaves [ 218.369248][T12153] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1787'. [ 218.723525][T12006] Set syz1 is full, maxelem 65536 reached [ 218.730046][T12118] Cannot find add_set index 0 as target [ 219.052078][T12173] tipc: Enabled bearer , priority 0 [ 219.103502][T12180] netlink: 'syz.6.1797': attribute type 10 has an invalid length. [ 219.115123][T12176] bond1 (unregistering): Released all slaves [ 219.144700][T12173] syzkaller0: entered promiscuous mode [ 219.150225][T12173] syzkaller0: entered allmulticast mode [ 219.173098][T12180] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.187406][T12180] bond0: (slave team0): Enslaving as an active interface with an up link [ 219.239590][T12186] bond2: entered promiscuous mode [ 219.257773][T12186] bond2: entered allmulticast mode [ 219.263492][T12186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.337847][T12173] tipc: Resetting bearer [ 219.371548][T12171] tipc: Resetting bearer [ 219.433159][T12171] tipc: Disabling bearer [ 219.689262][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1809'. [ 219.698884][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1809'. [ 219.836666][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1812'. [ 219.941338][T12230] bond6: entered promiscuous mode [ 219.980843][T12226] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 219.992075][ T8197] IPVS: starting estimator thread 0... [ 220.102617][T12241] IPVS: using max 26 ests per chain, 62400 per kthread [ 220.153696][T12254] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1818'. [ 220.256136][T12260] netlink: 'syz.5.1820': attribute type 1 has an invalid length. [ 220.412725][T12268] vlan2: entered allmulticast mode [ 220.419246][T12268] veth1_to_hsr: entered allmulticast mode [ 220.663498][T12288] netlink: 'syz.5.1827': attribute type 11 has an invalid length. [ 220.844047][T12305] netlink: 'syz.2.1831': attribute type 2 has an invalid length. [ 221.028275][T12310] netdevsim netdevsim6: Direct firmware load for failed with error -2 [ 221.051173][T12317] delete_channel: no stack [ 221.067462][T12310] netdevsim netdevsim6: Falling back to sysfs fallback for: [ 221.360490][T12342] __nla_validate_parse: 3 callbacks suppressed [ 221.360508][T12342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1844'. [ 221.394937][T12340] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1842'. [ 221.404307][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1842'. [ 221.416303][T12344] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 221.649540][T12354] netlink: 'syz.2.1848': attribute type 9 has an invalid length. [ 221.813457][T12364] netlink: 'syz.0.1854': attribute type 27 has an invalid length. [ 221.991879][T12374] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1855'. [ 222.056835][T12380] netlink: 'syz.5.1858': attribute type 7 has an invalid length. [ 222.150436][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1861'. [ 222.306379][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'. [ 222.322769][T12403] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 222.431217][T12398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.439934][T12398] batadv_slave_0: entered promiscuous mode [ 222.447255][T12398] batadv_slave_0: entered allmulticast mode [ 222.465014][T12401] batadv0: left allmulticast mode [ 222.470267][T12401] batadv0: left promiscuous mode [ 222.479382][T12401] bridge0: port 3(batadv0) entered disabled state [ 222.635679][T12401] team0: left allmulticast mode [ 222.640656][T12401] team_slave_0: left allmulticast mode [ 222.656568][T12401] team_slave_1: left allmulticast mode [ 222.662786][T12401] geneve0: left allmulticast mode [ 222.668244][T12401] team0: left promiscuous mode [ 222.673237][T12401] team_slave_0: left promiscuous mode [ 222.680409][T12401] team_slave_1: left promiscuous mode [ 222.686657][T12401] geneve0: left promiscuous mode [ 222.692177][T12401] bridge0: port 2(team0) entered disabled state [ 222.701692][T12401] bridge_slave_0: left allmulticast mode [ 222.708984][T12401] bridge_slave_0: left promiscuous mode [ 222.715173][T12401] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.831035][T12407] veth1_to_bridge: entered promiscuous mode [ 222.837599][T12407] veth1_to_bridge: entered allmulticast mode [ 223.038463][T12428] netlink: 'syz.0.1871': attribute type 1 has an invalid length. [ 223.071651][T12428] netlink: 'syz.0.1871': attribute type 2 has an invalid length. [ 223.127970][T12435] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 223.164293][T12435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.286146][T12427] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.381564][T12446] vlan1: entered allmulticast mode [ 223.404305][T12446] veth0_vlan: entered allmulticast mode [ 223.447892][T12446] vlan1: left allmulticast mode [ 223.453034][T12446] veth0_vlan: left allmulticast mode [ 224.070873][T12458] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1881'. [ 224.093010][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1881'. [ 224.111450][T12458] netlink: 'syz.6.1881': attribute type 2 has an invalid length. [ 224.148221][T12458] : entered promiscuous mode [ 224.316571][T12471] syzkaller0: entered allmulticast mode [ 224.557625][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1891'. [ 224.600343][T12493] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1891'. [ 224.860790][ T8198] IPVS: starting estimator thread 0... [ 224.958289][T12465] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.966633][T12465] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 224.975132][T12515] IPVS: using max 27 ests per chain, 64800 per kthread [ 225.004353][T12465] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.048564][T12465] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 225.127901][T12465] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.153834][T12465] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 225.532456][T12539] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 225.554406][T12546] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20001 [ 225.667055][T12465] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.673024][T12465] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 225.878349][T12465] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 225.891896][T12465] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 226.440862][T12591] __nla_validate_parse: 2 callbacks suppressed [ 226.440900][T12591] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1917'. [ 226.719331][T12601] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1919'. [ 226.770257][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 226.910555][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 227.033837][T12618] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1925'. [ 227.073373][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1927'. [ 227.257876][T12636] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 292.710650][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.740241][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.758093][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.781658][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.795924][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.803290][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.820739][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.834135][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.840597][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.869064][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.878903][T12739] netlink: 'syz.5.1947': attribute type 11 has an invalid length. [ 292.888394][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.908544][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.934304][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.944925][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.951310][T12726] bond0: Error: Cannot enslave bond to itself. [ 292.983241][T12746] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 292.992316][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.001454][T12746] netlink: 'syz.5.1949': attribute type 1 has an invalid length. [ 293.012546][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.019037][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.027551][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.038749][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.046571][T12746] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1949'. [ 293.056529][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.068447][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.094026][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.108445][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.124451][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.138167][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.151037][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.174219][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.189206][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.204189][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.219698][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.236714][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.249920][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.266750][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.280283][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 293.289971][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.297040][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.320257][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.334084][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.350675][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.352346][T12761] netlink: 'syz.5.1953': attribute type 1 has an invalid length. [ 293.365481][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.365569][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.365651][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.365730][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.365819][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.365897][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.365975][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.366054][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.366132][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.366210][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.366290][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.367626][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.445256][T12761] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1953'. [ 293.455345][T12761] NCSI netlink: No device for ifindex 0 [ 293.461146][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.468077][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.474744][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.503452][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.511223][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.525078][T12726] bond0: Error: Cannot enslave bond to itself. [ 293.777166][T12779] xt_hashlimit: overflow, try lower: 3/0 [ 293.828123][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'. [ 293.840597][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'. [ 293.961025][T12789] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1961'. [ 293.971264][T12790] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 294.030798][T12792] tipc: Enabled bearer , priority 10 [ 294.073363][T12795] bridge5: entered promiscuous mode [ 294.095467][T12795] bridge5: entered allmulticast mode [ 294.316817][T12805] gre1: entered promiscuous mode [ 294.321821][T12805] gre1: entered allmulticast mode [ 294.438659][T12773] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1955'. [ 294.453842][T12813] tipc: Enabled bearer , priority 0 [ 294.492415][T12773] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 294.692326][T12830] netlink: 6616 bytes leftover after parsing attributes in process `syz.1.1968'. [ 294.785253][T12829] syz.2.1972 uses old SIOCAX25GETINFO [ 294.811718][T12829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1972'. [ 294.845118][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1972'. [ 295.038691][T12812] tipc: Disabling bearer [ 295.144388][ T5836] tipc: Node number set to 3144726018 [ 296.195817][T12905] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.334776][T12897] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 296.599886][T12926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.736524][T12931] vlan2: entered promiscuous mode [ 296.741700][T12931] bridge0: entered promiscuous mode [ 296.914797][T12941] netlink: 'syz.0.2001': attribute type 1 has an invalid length. [ 296.944587][T12937] netlink: 'syz.6.1999': attribute type 1 has an invalid length. [ 296.963057][T12941] netlink: 'syz.0.2001': attribute type 3 has an invalid length. [ 297.039576][T12948] bond4: option xmit_hash_policy: invalid value (64) [ 297.064923][T12948] bond4 (unregistering): Released all slaves [ 297.226015][T12937] bond1: entered promiscuous mode [ 297.231626][T12937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.412779][T12946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.439034][T12946] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 297.462350][T12946] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 297.518947][T12946] bond1: (slave gre1): making interface the new active one [ 297.529279][T12946] gre1: entered promiscuous mode [ 297.550414][T12946] bond1: (slave gre1): Enslaving as an active interface with an up link [ 298.073996][T13006] sctp: [Deprecated]: syz.5.2013 (pid 13006) Use of int in maxseg socket option. [ 298.073996][T13006] Use struct sctp_assoc_value instead [ 298.156169][T13011] __nla_validate_parse: 8 callbacks suppressed [ 298.156188][T13011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2014'. [ 298.176727][T13011] tc_dump_action: action bad kind [ 298.457758][T13033] syzkaller0: entered promiscuous mode [ 298.475479][T13033] syzkaller0: entered allmulticast mode [ 298.487626][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2022'. [ 298.502331][T13037] block nbd0: Unsupported socket: should be TCP or UNIX. [ 298.849820][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'. [ 299.027431][T13073] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2029'. [ 299.203068][T13087] syzkaller1: entered promiscuous mode [ 299.212085][T13087] syzkaller1: entered allmulticast mode [ 299.229235][T13088] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2037'. [ 299.376325][T13095] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2041'. [ 299.632310][T13108] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2045'. [ 299.670856][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2046'. [ 299.686693][T13114] tipc: Enabling of bearer rejected, failed to enable media [ 299.702323][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2046'. [ 299.895591][T13119] ipvlan2: entered promiscuous mode [ 299.973926][T13130] lo: Caught tx_queue_len zero misconfig [ 300.261863][T13144] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2057'. [ 300.297099][T13148] netlink: 'syz.2.2059': attribute type 15 has an invalid length. [ 300.355507][T13149] netlink: 'syz.2.2059': attribute type 15 has an invalid length. [ 300.813496][T13191] netlink: 'syz.6.2071': attribute type 39 has an invalid length. [ 300.897677][T13192] can: request_module (can-proto-4) failed. [ 300.918245][T13199] sctp: [Deprecated]: syz.0.2073 (pid 13199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.918245][T13199] Use struct sctp_sack_info instead [ 300.940842][T13199] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 301.265799][T13210] syzkaller1: entered promiscuous mode [ 301.271331][T13210] syzkaller1: entered allmulticast mode [ 361.077914][T13255] __nla_validate_parse: 2 callbacks suppressed [ 361.077935][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2091'. [ 361.147788][T13255] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2091'. [ 361.174511][T13263] netlink: 'syz.2.2092': attribute type 1 has an invalid length. [ 361.187796][T13263] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2092'. [ 361.262867][T13269] netlink: 'syz.5.2093': attribute type 2 has an invalid length. [ 361.371645][T13275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.407079][T13275] syzkaller0: entered promiscuous mode [ 361.432929][T13275] syzkaller0: entered allmulticast mode [ 361.505083][T13285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.702045][T13295] xt_TCPMSS: Only works on TCP SYN packets [ 361.887201][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 361.942202][T13311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 361.972330][T13311] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 361.992651][T13311] gretap2: entered promiscuous mode [ 362.006694][T13311] gretap2: entered allmulticast mode [ 362.088323][T13320] netlink: 'syz.6.2105': attribute type 9 has an invalid length. [ 362.096555][T13321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2104'. [ 362.127640][T13320] netlink: 'syz.6.2105': attribute type 25 has an invalid length. [ 362.635109][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2115'. [ 362.652617][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2116'. [ 362.664887][T13356] tipc: Enabled bearer , priority 0 [ 362.700765][T13351] geneve2: entered promiscuous mode [ 362.731323][T13353] syzkaller0: entered promiscuous mode [ 362.738309][T13353] syzkaller0: entered allmulticast mode [ 362.758029][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2116'. [ 362.767466][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2116'. [ 362.880282][T13356] tipc: Resetting bearer [ 362.889848][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2120'. [ 362.913240][T13356] tipc: Disabling bearer [ 363.171770][T13389] xt_socket: unknown flags 0xe4 [ 363.365551][T13410] sctp: [Deprecated]: syz.1.2130 (pid 13410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.365551][T13410] Use struct sctp_sack_info instead [ 363.510686][T13424] netlink: 'syz.6.2133': attribute type 1 has an invalid length. [ 363.558112][T13427] netlink: 'syz.0.2132': attribute type 3 has an invalid length. [ 364.447465][T13494] bridge6: entered promiscuous mode [ 364.471427][T13494] bridge6: entered allmulticast mode [ 364.531189][T13497] netlink: 'syz.1.2154': attribute type 11 has an invalid length. [ 364.660941][T13506] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 365.038965][T13528] xt_hashlimit: size too large, truncated to 1048576 [ 365.405747][T13549] netlink: 'syz.1.2170': attribute type 4 has an invalid length. [ 366.192706][T13590] __nla_validate_parse: 16 callbacks suppressed [ 366.192727][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2184'. [ 366.216032][T13596] netlink: 'syz.6.2182': attribute type 1 has an invalid length. [ 366.239899][T13596] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 366.258969][T13602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2185'. [ 366.312658][T13603] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 366.452894][T13611] netlink: 'syz.5.2188': attribute type 1 has an invalid length. [ 366.940009][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 366.993848][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 367.002816][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 367.099974][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 367.114293][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 367.456969][T13655] netlink: 'syz.6.2203': attribute type 29 has an invalid length. [ 367.487334][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2203'. [ 367.601545][T13671] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2208'. [ 367.625126][T13660] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2205'. [ 367.752956][T13682] sctp: [Deprecated]: syz.1.2210 (pid 13682) Use of int in maxseg socket option. [ 367.752956][T13682] Use struct sctp_assoc_value instead [ 367.776811][T13683] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001 [ 367.784226][T13673] netem: change failed [ 368.552545][T13723] netlink: 'syz.5.2222': attribute type 1 has an invalid length. [ 368.610251][T13728] xt_l2tp: v2 sid > 0xffff: 1114112 [ 368.626490][T13723] bond2: entered promiscuous mode [ 368.632187][T13723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.299131][T13766] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.796045][T13795] netlink: 'syz.0.2245': attribute type 2 has an invalid length. [ 369.868880][T13797] syzkaller1: entered promiscuous mode [ 369.884447][T13797] syzkaller1: entered allmulticast mode [ 369.980633][T13805] [ 369.983031][T13805] ====================================================== [ 369.990063][T13805] WARNING: possible circular locking dependency detected [ 369.997102][T13805] syzkaller #0 Not tainted [ 370.001535][T13805] ------------------------------------------------------ [ 370.008573][T13805] syz.5.2248/13805 is trying to acquire lock: [ 370.014660][T13805] ffffffff8f425a98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 370.024038][T13805] [ 370.024038][T13805] but task is already holding lock: [ 370.031417][T13805] ffff888066291070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 370.040763][T13805] [ 370.040763][T13805] which lock already depends on the new lock. [ 370.040763][T13805] [ 370.051157][T13805] [ 370.051157][T13805] the existing dependency chain (in reverse order) is: [ 370.060438][T13805] [ 370.060438][T13805] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 370.068441][T13805] lock_acquire+0x120/0x360 [ 370.073472][T13805] _raw_spin_lock_bh+0x36/0x50 [ 370.078765][T13805] nr_rt_device_down+0x12a/0x720 [ 370.084240][T13805] nr_device_event+0x137/0x150 [ 370.089534][T13805] notifier_call_chain+0x1b6/0x3e0 [ 370.095180][T13805] netif_close_many+0x29c/0x410 [ 370.100565][T13805] netif_close+0x158/0x210 [ 370.105520][T13805] dev_close+0x10a/0x220 [ 370.110303][T13805] bpq_device_event+0x377/0x6a0 [ 370.115696][T13805] notifier_call_chain+0x1b6/0x3e0 [ 370.121340][T13805] netif_close_many+0x29c/0x410 [ 370.126725][T13805] netif_close+0x158/0x210 [ 370.131676][T13805] dev_close+0x10a/0x220 [ 370.136477][T13805] bond_setup_by_slave+0x5f/0x3f0 [ 370.142035][T13805] bond_enslave+0x6ca/0x3850 [ 370.147196][T13805] bond_do_ioctl+0x635/0x9b0 [ 370.152316][T13805] dev_ifsioc+0x90b/0xf00 [ 370.157177][T13805] dev_ioctl+0x7b4/0x1150 [ 370.162037][T13805] sock_do_ioctl+0x22c/0x300 [ 370.167154][T13805] sock_ioctl+0x576/0x790 [ 370.172010][T13805] __se_sys_ioctl+0xfc/0x170 [ 370.177130][T13805] do_syscall_64+0xfa/0xfa0 [ 370.182166][T13805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.188607][T13805] [ 370.188607][T13805] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 370.196439][T13805] lock_acquire+0x120/0x360 [ 370.201493][T13805] _raw_spin_lock_bh+0x36/0x50 [ 370.206783][T13805] nr_rt_device_down+0xa9/0x720 [ 370.212171][T13805] nr_device_event+0x137/0x150 [ 370.217499][T13805] notifier_call_chain+0x1b6/0x3e0 [ 370.223137][T13805] netif_close_many+0x29c/0x410 [ 370.228521][T13805] netif_close+0x158/0x210 [ 370.233471][T13805] dev_close+0x10a/0x220 [ 370.238262][T13805] bpq_device_event+0x377/0x6a0 [ 370.243639][T13805] notifier_call_chain+0x1b6/0x3e0 [ 370.249269][T13805] netif_close_many+0x29c/0x410 [ 370.254651][T13805] netif_close+0x158/0x210 [ 370.259598][T13805] dev_close+0x10a/0x220 [ 370.264363][T13805] bond_setup_by_slave+0x5f/0x3f0 [ 370.269914][T13805] bond_enslave+0x6ca/0x3850 [ 370.275042][T13805] bond_do_ioctl+0x635/0x9b0 [ 370.280160][T13805] dev_ifsioc+0x90b/0xf00 [ 370.285023][T13805] dev_ioctl+0x7b4/0x1150 [ 370.289884][T13805] sock_do_ioctl+0x22c/0x300 [ 370.295006][T13805] sock_ioctl+0x576/0x790 [ 370.299869][T13805] __se_sys_ioctl+0xfc/0x170 [ 370.304998][T13805] do_syscall_64+0xfa/0xfa0 [ 370.310030][T13805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.316444][T13805] [ 370.316444][T13805] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 370.324355][T13805] validate_chain+0xb9b/0x2140 [ 370.329652][T13805] __lock_acquire+0xab9/0xd20 [ 370.334866][T13805] lock_acquire+0x120/0x360 [ 370.339892][T13805] _raw_spin_lock_bh+0x36/0x50 [ 370.345179][T13805] nr_remove_neigh+0x25/0xe0 [ 370.350307][T13805] nr_add_node+0x1d9f/0x2570 [ 370.355429][T13805] nr_rt_ioctl+0xc12/0xd50 [ 370.360375][T13805] sock_do_ioctl+0xdc/0x300 [ 370.365397][T13805] sock_ioctl+0x576/0x790 [ 370.370265][T13805] __se_sys_ioctl+0xfc/0x170 [ 370.375378][T13805] do_syscall_64+0xfa/0xfa0 [ 370.380407][T13805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.386843][T13805] [ 370.386843][T13805] other info that might help us debug this: [ 370.386843][T13805] [ 370.397065][T13805] Chain exists of: [ 370.397065][T13805] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 370.397065][T13805] [ 370.410935][T13805] Possible unsafe locking scenario: [ 370.410935][T13805] [ 370.418384][T13805] CPU0 CPU1 [ 370.423743][T13805] ---- ---- [ 370.429124][T13805] lock(&nr_node->node_lock); [ 370.433892][T13805] lock(nr_node_list_lock); [ 370.441008][T13805] lock(&nr_node->node_lock); [ 370.448292][T13805] lock(nr_neigh_list_lock); [ 370.452977][T13805] [ 370.452977][T13805] *** DEADLOCK *** [ 370.452977][T13805] [ 370.461121][T13805] 1 lock held by syz.5.2248/13805: [ 370.466241][T13805] #0: ffff888066291070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 370.476006][T13805] [ 370.476006][T13805] stack backtrace: [ 370.481925][T13805] CPU: 1 UID: 0 PID: 13805 Comm: syz.5.2248 Not tainted syzkaller #0 PREEMPT(full) [ 370.481948][T13805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.481974][T13805] Call Trace: [ 370.481982][T13805] [ 370.481990][T13805] dump_stack_lvl+0x189/0x250 [ 370.482022][T13805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.482047][T13805] ? __pfx__printk+0x10/0x10 [ 370.482063][T13805] ? stack_trace_save+0x9c/0xe0 [ 370.482092][T13805] print_circular_bug+0x2ee/0x310 [ 370.482116][T13805] check_noncircular+0x134/0x160 [ 370.482141][T13805] validate_chain+0xb9b/0x2140 [ 370.482163][T13805] ? rcu_is_watching+0x15/0xb0 [ 370.482184][T13805] ? trace_irq_disable+0x37/0x110 [ 370.482201][T13805] ? preempt_schedule_irq+0xde/0x150 [ 370.482224][T13805] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 370.482249][T13805] __lock_acquire+0xab9/0xd20 [ 370.482269][T13805] ? nr_remove_neigh+0x25/0xe0 [ 370.482290][T13805] lock_acquire+0x120/0x360 [ 370.482305][T13805] ? nr_remove_neigh+0x25/0xe0 [ 370.482329][T13805] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 370.482355][T13805] ? nr_remove_neigh+0x25/0xe0 [ 370.482375][T13805] _raw_spin_lock_bh+0x36/0x50 [ 370.482395][T13805] ? nr_remove_neigh+0x25/0xe0 [ 370.482416][T13805] nr_remove_neigh+0x25/0xe0 [ 370.482438][T13805] nr_add_node+0x1d9f/0x2570 [ 370.482459][T13805] ? dev_get_by_name+0x21/0x200 [ 370.482479][T13805] ? dev_get_by_name+0x21/0x200 [ 370.482498][T13805] ? dev_get_by_name+0x21/0x200 [ 370.482517][T13805] ? nr_call_to_digi+0x136/0x1b0 [ 370.482538][T13805] nr_rt_ioctl+0xc12/0xd50 [ 370.482562][T13805] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 370.482580][T13805] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.482607][T13805] ? apparmor_capable+0x137/0x1b0 [ 370.482629][T13805] ? capable+0x89/0xe0 [ 370.482647][T13805] ? nr_ioctl+0x1b1/0x3b0 [ 370.482663][T13805] sock_do_ioctl+0xdc/0x300 [ 370.482686][T13805] ? __pfx_sock_do_ioctl+0x10/0x10 [ 370.482714][T13805] sock_ioctl+0x576/0x790 [ 370.482736][T13805] ? __pfx_sock_ioctl+0x10/0x10 [ 370.482757][T13805] ? __fget_files+0x3a0/0x420 [ 370.482773][T13805] ? __fget_files+0x2a/0x420 [ 370.482790][T13805] ? bpf_lsm_file_ioctl+0x9/0x20 [ 370.482809][T13805] ? __pfx_sock_ioctl+0x10/0x10 [ 370.482829][T13805] __se_sys_ioctl+0xfc/0x170 [ 370.482853][T13805] do_syscall_64+0xfa/0xfa0 [ 370.482876][T13805] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.482898][T13805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.482915][T13805] ? clear_bhb_loop+0x60/0xb0 [ 370.482934][T13805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.482952][T13805] RIP: 0033:0x7f1480f8efc9 [ 370.482976][T13805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.482993][T13805] RSP: 002b:00007f1481f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.483011][T13805] RAX: ffffffffffffffda RBX: 00007f14811e5fa0 RCX: 00007f1480f8efc9 [ 370.483025][T13805] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 370.483037][T13805] RBP: 00007f1481011f91 R08: 0000000000000000 R09: 0000000000000000 [ 370.483048][T13805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.483058][T13805] R13: 00007f14811e6038 R14: 00007f14811e5fa0 R15: 00007fff79209298 [ 370.483079][T13805] [ 378.785431][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.796118][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 378.807540][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 378.868348][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.878675][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 378.888907][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 378.948513][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.959442][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 378.969653][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 379.022751][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.033216][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 379.043652][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 379.305623][ T60] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 379.314356][ T60] bridge2 (unregistering): left promiscuous mode [ 379.417585][ T60] bond0 (unregistering): left promiscuous mode [ 379.423891][ T60] bridge_slave_1: left promiscuous mode [ 379.430348][ T60] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 379.441400][ T60] bond0 (unregistering): Released all slaves [ 379.513348][ T60] bond1 (unregistering): Released all slaves [ 379.523193][ T60] bond2 (unregistering): Released all slaves [ 379.533104][ T60] bond3 (unregistering): Released all slaves [ 379.607814][ T60] bond4 (unregistering): Released all slaves [ 379.681000][ T60] bond5 (unregistering): Released all slaves [ 379.692359][ T60] bond6 (unregistering): Released all slaves [ 379.749636][ T60] tipc: Disabling bearer [ 379.755518][ T60] tipc: Left network mode [ 379.912811][ T60] batadv0: left promiscuous mode [ 379.922705][ T60] veth1_macvtap: left promiscuous mode [ 379.928982][ T60] veth0_macvtap: left promiscuous mode