last executing test programs: 12.901807737s ago: executing program 3 (id=3151): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0xff01, 0x0) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000000)=0x5, &(0x7f0000000080)=0x4) 12.013087992s ago: executing program 3 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1184, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x2b, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @ldst={0x1, 0x1, 0x2, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @printk={@li}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x34, &(0x7f0000000480)=""/52, 0x40f00, 0x25, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x6, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r0, r5, r0, r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x1, 0x4, 0x1, 0x7}, {0x1, 0xd, 0x5, 0xb}, {0x3, 0x1, 0xe, 0x9}, {0x0, 0x1, 0x1, 0xb}, {0x3, 0x4, 0x3, 0xa}], 0x10, 0xffff}, 0x94) listen(r1, 0xfff) r6 = accept(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000200)=0x80) bind$pptp(r6, &(0x7f0000000280)={0x18, 0x2, {0x2, @remote}}, 0x1e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0xfffffffffffffdba, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x24000050) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a178d0bf46d32345653600648d0a000500ebec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f252325012f567fb276a4d98cde2ea79", 0x78, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843507090000008000006c15ae4827ee986a000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x14, 0xfffd, 0x0, 0x0, {[@sack={0x5, 0x12, [0x0, 0xffffffff, 0xfffffffb, 0x2]}]}}}}}}}}, 0x0) 11.139041492s ago: executing program 3 (id=3171): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000040000000400000001000000000000009276125cfd32370ab69d1695e2ee2bfb8aff329e5ba0685865630040f6e0ac6e9f368792b4fc589be727b9327c5afa3810c78a8eaf6f9ec2519fc9ad4f77dae278fb4457932dcf1478157e50958c38eed5e4b77733bc2ee52ef4de2c37cb7494ff041e911cab3674f40da119de6aeb42840021d6bc75656f045829e133aea862c5f9043b03429ebbd886a944ddba3c392889fe08b0a960b32e3b5a27f2f162ee3cd4d091", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="250300000000000000001600000014000180100001006574683a697036745a6e6c30"], 0x28}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0e4b2f68010183995d99c93454c72b00000008100300", @ANYRES32=r7, @ANYBLOB="0a0034000101010101010000"], 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="000127bd7000ffdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x40000) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000003740)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x6, {0x2, 0x4e21, @empty}, 'macvtap0\x00'}) 10.884539058s ago: executing program 3 (id=3175): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000032000000fe"], 0x28}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x80000000}]}}]}, 0x38}}, 0x40) 10.645747931s ago: executing program 3 (id=3177): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}}, 0x0) 3.533091528s ago: executing program 4 (id=3248): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="480004675448dc43bc91250000028cbff10f0003771760a2", @ANYRES32=0x0, @ANYBLOB="08000000000000001c0012800b00010067726574617000000c000280080007007f0000010a0001000cc5035c44df0000"], 0x48}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 3.069623673s ago: executing program 4 (id=3253): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x800, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000380)={r4, 0x5}, &(0x7f0000000180)=0x8) 3.057406703s ago: executing program 1 (id=3255): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x75d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="00b8c9fb648d20aa2f4f14916663fa63d5bada00", @ANYRES16=r2, @ANYBLOB="020028bd7000fcdbdf2517000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00faffffff060016000400000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b0003000000060016000100000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00b6000000060016000600000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000600000006001600020000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000d00000006001600310000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b0003000000060016000700000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b003706000006001600040000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b006e20ffff060016000b00000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00000000000600160082ce00000500120001000000"], 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x10044100) 2.950901913s ago: executing program 4 (id=3256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0x1}, 0xfffffffffffffdda}, 0x1, 0x0, 0x0, 0x50000}, 0x4000) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xfffffff1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000740)=""/83, 0x0, 0x53, 0x1, 0xb0}, 0x20) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@remote, @bcast, @remote, @rose, @null, @remote, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x180800) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x48, 0x3c, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x28, 0x136, 0x0, 0x1, [@typed={0x22, 0x2, 0x0, 0x0, @binary="5856beaabf1f975be744017681644a8c5ad651f467085b2faa4f7b3f8f5b"}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000240)={0x9, [0xff26, 0x5, 0x4, 0x0, 0xfff8, 0x3, 0x1, 0x539, 0xa]}, &(0x7f0000000280)=0x16) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0x1}, 0xfffffffffffffdda}, 0x1, 0x0, 0x0, 0x50000}, 0x4000) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xfffffff1, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000740)=""/83, 0x0, 0x53, 0x1, 0xb0}, 0x20) (async) accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@remote, @bcast, @remote, @rose, @null, @remote, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x180800) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x48, 0x3c, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x28, 0x136, 0x0, 0x1, [@typed={0x22, 0x2, 0x0, 0x0, @binary="5856beaabf1f975be744017681644a8c5ad651f467085b2faa4f7b3f8f5b"}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendto$inet6(r4, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r4, 0x1) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000240)={0x9, [0xff26, 0x5, 0x4, 0x0, 0xfff8, 0x3, 0x1, 0x539, 0xa]}, &(0x7f0000000280)=0x16) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) 2.75311897s ago: executing program 1 (id=3257): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getchain={0x4c, 0x66, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x10, 0xa}, {0x6, 0xfff1}, {0xa, 0xc}}, [{0x8, 0xb, 0xef}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000001c0), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1, @le_remove_cig={{0x2065, 0x1}, {0x3}}}, 0x5) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x13) (async) sendto(0xffffffffffffffff, &(0x7f0000000280)="2f8ec01aea9f5024babe7e55d102cf07187132c5d7584aa5df60af0973f66e3014772f5a902edb9acaa4497f9b6c6fa067b4ac468b509ecb69dc21f40f660906529c2d6f63ece1ddcf087b310fa34dfaa49974ca321a6c6cefe5812b1230ad075317d028cb2075fd1dc390eba3393e1dc38693cc5b72a3e5939841ea412aeb9d263488f3bdab5401b4e437e0788ddfa54ad474e5288eab71cac393b6c8f0536b65e03d4748cd43825036a2e500d94fef5a6a3c94cdbcbf0572ef054b48dd524c11d5766f801f22bacfd24e7e9ae331bf775d426c579c339768801b7af42a70a1b2a288080e", 0xe5, 0xd4, &(0x7f0000000380)=@l2tp={0x2, 0x0, @private=0xa010102}, 0x80) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000400)) (async) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000440)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000480)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)="56cc82708659b7afa1720240d5d1d83ff23c1a0c0557b135310c01d8626faa2b50577618b78dd2925d357fc5cf499123a52268e955209ee3a12ec3844b26f10488c0f036e7e1316901c69a75c019c32a2f84661cc967dc8ba10059aa44ef13b232d59cc493bf1c0a21ec8f44cec46d506da7a2ed50f8312fdc9184032cfe954dc8eb7a1257bc6fd9546dac8f047bd92de5d298a8ac130aca4e22174885e16896d29d6e4a2fa3cccc724f6dfd357e09b1724f2db25ed9151d94aa602cdf451c8f583d34ea2c2371e67f3ed5840e6888b017ff08fb28", 0xd5}, {&(0x7f0000000600)="e2a835d1d7ef7b7f94737668e4ce4a34114a2779e3cf6cd3c52834d78d46d63b09848d530a46c6dbb49ad2b70653250857cad09a25b5012140a62ce31721fdaae874cb1ab6d9363e30b0c26483258c4a31e6f23067228995caa07c31d735e2a3952c3d9737020f697bf0c8484a052a11da105fd8fb7a808232645bbadb3061cdd670", 0x82}, {&(0x7f00000006c0)="6d604f7acd50d0f8eb5bebf1ab06ab47715e779e13b26bcd0ef02cae6fe633de438f9f6ad91392d2d223", 0x2a}, {&(0x7f0000000700)="99d81bfc27616d3ee997d6e8a71213938b7015984734a088b82b40edfd4bf439c03e7c0dd42641269e222f6683445952f5b8d1aa64313f1ec0f875f18fdd0de716c50d1c8d655c9bc08521ce0971c0ce2e30ee4bfd556cd7047beb2d89f55f35f446a64d5efc9eb62d463b334ce51843099fd6263bc370f8c09d58a8c0cb657a2540f5934fd4a294e1", 0x89}], 0x4, &(0x7f0000000800)=[{0xc8, 0x10e, 0x0, "bca572b96bc8ce2ce94ab2acc17a2842ffbbac0d24896a671479e9221ff931c321a5cf021e09ad8decd521f3eedfa0a85469cadfd9cb4557d01b00444dfe4fd74eb4d5e21492e0023fd8b13dd303ac538c95d95628aa208cf8f384681af29daecf152c6af89fa14e622d34b67d6f6735c2d3c369b270b6c572240de4fe0c01b0225e74d0790851a8d9ad094c89d9c276b906a581921c789f4b4ee4042d90c007fbddeb32e24b70a530e996c47d3efbd1d9e2"}, {0x58, 0x29, 0x9, "c3a36a5550d7ae174190a85edf6d5d32abc878e228057fb08ff5f7d818777d79270fe330990d005de907ffbe3586403f1de0d7ae139daa1e766dc65576c5a6058612"}, {0x28, 0x1, 0x8, "1c81eea2864496ebb1c5a19af7194bb1d51f1b899b3cf9bc"}], 0x148}, 0x80) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x9, 0x20, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x0, 0x3, 0x4, 0x9, 0xb, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x6, 0xb, 0x40, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x10, 0x0, 0x5c8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f00000009c0)='fsi_master_gpio_out\x00', r5, 0x0, 0xb1}, 0x18) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000d00)={'syztnl2\x00', r1, 0x7, 0x1, 0x4, 0x31f2, {{0x28, 0x4, 0x3, 0x9, 0xa0, 0x65, 0x0, 0xa, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@generic={0x86, 0x3, "d6"}, @rr={0x7, 0x2b, 0x59, [@rand_addr=0x64010101, @empty, @loopback, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @lsrr={0x83, 0x7, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x10, 0xd0, 0x0, 0x7, [0x3, 0x8, 0x3]}, @rr={0x7, 0xb, 0x59, [@remote, @remote]}, @timestamp_prespec={0x44, 0x2c, 0xbc, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0x101}, {@multicast1, 0x9}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34}]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x4a, [@broadcast]}]}}}}}) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x8, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000ec0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @null, @rose={'rose', 0x0}, 0x3, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000f40), &(0x7f0000000f80)=0x30) (async) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000001000), r4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r9, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = accept$ax25(0xffffffffffffffff, &(0x7f0000001100)={{0x3, @default}, [@rose, @default, @null, @null, @netrom, @null, @netrom, @null]}, &(0x7f0000001180)=0x48) getsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000011c0), 0x10) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000001200)={{0xa, 0x4e21, 0x0, @remote}, {0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x0, {[0x24ab, 0x1000, 0x1, 0x1, 0x8, 0x1, 0x3, 0x101]}}, 0x5c) (async) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000001280), &(0x7f00000012c0)=0x10) 2.514000736s ago: executing program 1 (id=3261): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x2f, 0x2, 0x0, 0xffff, 0x1, @private2, @private0, 0x40, 0x700, 0x5, 0x100}}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@delchain={0x2c, 0x65, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0x10}, {0x4, 0xfff1}, {0xfff3, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x400}]}, 0x2c}}, 0xc090) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) r5 = socket(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="120000007d000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="0000c7559f16ef3a8be061c92ff4c59918d400000000000080000000"], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r7, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r6, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r5}, 0x20) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x42) accept(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r6, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r5}, 0x20) close(0x3) 2.353663825s ago: executing program 2 (id=3262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="03caf95ade2740b9c5c89ba2424150a18723c4037b3fc099200c8d07bbaa9c19789778bb8c717ede4fa73c633d", @ANYRES16=r2, @ANYBLOB="000429bd7000fbdbdf252e0000000c009900ff010000120000000400af00380051801800008011000100b18e835594ff68075160f77ad70000001c00008005000900020000000f000400338994ff2ab142086a903f00"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4010) (async) syz_emit_ethernet(0x66, &(0x7f0000000440)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}, 0x1c) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 1.776595227s ago: executing program 2 (id=3265): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0xe}, {0x0, 0x10}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8906}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept$ax25(r0, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000440)={'veth0_to_hsr\x00', &(0x7f0000000400)=@ethtool_rxfh={0x46, 0xfa8, 0x0, 0xd869, 0x2, "0460ca", 0x7, [0x2b6]}}) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x10, 0x70bd2b, 0x25dfdbfb, {0x80, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xff, 0x4, 0x2400}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4) 1.537407415s ago: executing program 1 (id=3267): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e, 0x2e, 0x61, 0x30]}}, 0x0, 0x39}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0400f60f07000000f4c337fde7fb3cc08156b64980275a5a26b89f33180ae173c87559a0537327520ff1754ecaacb2a741589b3db98b2eaa10ed6be1abebabddec4485b51d07a85a54b80b960eb91a7502086d4495b34349d737f00c1d544fd6f800f32b95c66e2adb6dea46e8fa4b44b483a5ace8dad5f53c4bbea61887149599fe52e47c3d5ac64a9f0d6627f2085a774ccd5868860b1bbb18ac770a749f699f517b40e2"], 0x48}}, 0x0) 1.444114328s ago: executing program 2 (id=3268): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@empty, @multicast1}, &(0x7f0000000100)=0xc) (async) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@empty, @multicast1, 0x0}, &(0x7f0000000100)=0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r8, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}]}, 0x28}}, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r8, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}]}, 0x28}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback}, &(0x7f0000000240)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@initdev, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x288, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x288, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x80}, 0x4000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r16, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r15, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) 1.288036904s ago: executing program 1 (id=3270): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)="1f40d5e334af84988340ea07a2381c6347df4ebcceb94f2b151f6928131ec0c9", 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x29, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000340000000000100000a00000000"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xc}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b", 0x69, 0xc001, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x8}}, 0x1c) sendmsg$inet6(r5, &(0x7f0000000300)={&(0x7f0000000200)={0xa, 0x4e24, 0x1000, @empty, 0x8}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="7cab3e1e28c0fa7e6c3a82c591e63dd4465045a7986af417ff8bd89b072055b163d10ab94610bfb97d79273595d1e45a36831d0274e8b2fdf10027bd60942137f3c4f6a3934498e6bef1536c779fa48a3d78ca7fdb7b972f102a2992333f14a15793b7", 0x63}, {0x0}, {&(0x7f00000005c0)="82aed733676776ac6853ef58db700a46f2db20d5be2c53984b15ae317e0eac216995d51b42651155570d49396a805f3b1448f8b7f036e40583f580104ad2dcb7e432f23074cf49496a4c619b5a", 0x4d}, {&(0x7f0000000640)="3a1e713d08368fe9832f4ab6389e27758003e364fde772a3ccca458afbd48f37bded8e14ffea6b4fcf5c09ec4680025245527a1eb99deef2d26d37a529c6e7447f288c835fcf6dcdf2", 0x49}, {&(0x7f00000006c0)="f20dd6927995d564986f1c5275f70e9eaabd2a4f0e0135898218b57a915d1bd6d098b85d9efa7440da9fb47adbaabd0299c00f45e955e0ed5c155280ac07d1c8f5ea345d2024a4616b036add4c739e55cbb5b849da266af5752c7a1adccae392609a8c7c0326b097b983f33e196a4c5270b6274d0ba518fd31c4bb5f8095f2b5f617710e03df656909de24331b02f79fbbc496406a68", 0x96}, {&(0x7f0000000780)="5d0839abe4096439d911cf53727ca9e1040bbf52bc902d8dc93c8988b5ce617ad84bf58889752195d87bf3cc00b0577bdd7cdf2e2ac7b5aa4f9db24d1b0a04baaf4b44ae8611564ab551095ef28360f85a21ee6cd2d1f19f4371027902b20f3ff190b2e875017c3e1084d998ec9f2c28e90de69772e9dc2e211d01bb0bc9147839c6af0979e5aef7aa76b0ce0e51b162717941499f4d0807deddaec82a485748bcaf1b074744a93c6b5be0a22bb1cb4dfcf9780a37e0260de13fddeea22c5c2f6272a64e508e57d2262c5454d36e3d9b57f0be659a552dacde6ecb2f12f5c100d6690b8d3a084039be", 0xe9}, {&(0x7f0000000240)="4ec2de95dcdc0408c39485bb", 0xc}, {&(0x7f0000000880)="8b5e689e6edaa1e5e2d9e1b58b8e1018b1aa4da140a41e7e32c3a8d57943ca7a81f7647a9631f16f3a3085653ba016bf375fe835c9f185b44877e150929f1e6ecfedd66f83cf75c7f5dc5c46c35770074823364d6acc04a351f8bf7bd6aa", 0x5e}], 0x8, &(0x7f0000000ac0)=[@tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@ra]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x11, 0xa, 0x0, 0xd0, 0x0, [@private0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}}}, @rthdrdstopts={{0x250, 0x29, 0x37, {0x2e, 0x46, '\x00', [@generic={0x5, 0xf4, "36ae81893fed6e7024b0da092eaf119bbbc9eb866aced233e473b873c306c5cc4cb5e89e5dee3914fc753a55895df05551d2821c817125c5653c0cc5a352cf60b45144b64b3ca10148042a6eec3c1ef3e75d880bda8c8970efd153832fc0d3a1d8b7ee59812eac6a43d7eb3f1ba0c2cdbbbefb491656097005c0cea1318e1efe89700ad98682f51b63ee2165505d1af9845005493a2cd86703ae214d3556df4ea80291caec7b180b5997da6f1f0320aa7205b0875b5cf854e77944d7cd008b77a29cb160741a70e40004830b03ccadff2a7ec284746ba63406eb26bfa860a585df9701bcdd96d3701707e4b90fa42b7547308c1a"}, @ra={0x5, 0x2, 0x6}, @generic={0x6, 0xab, "bcbc2d1a6e442ad8fa0caa24b25288f385e997f68bbb2b7ff4fd48c6a95bd7fba9a1605d6f47fcf451e52fc43cd77ffe93fbbf62830be5e38bad4349a73abf62ce921c216a897904a21305360dfb9a8c0fd0598cfaf5780d5d29a65520b7891aed5f67bfec00996bafccbff5b08cef36147f063ee7d800d397982cbead583c1abd7924969e4302e7ded1efe196f28ff56795fe45e2c7bbb45c7cfa70272ff2f6d58959c9ddc0e84c9a6239"}, @generic={0x9, 0x8d, "e56aaba206a61b724885bdc044c4c9f138733031d63c1f62fa3c3c4896bd6912d7e2e5da5510fbc03ce3f338959e84dec73a66c4fd465374ba139518e474fba78ddd18235a2ae11f5008f05c0ef779eb8284da067cf9873ae197d09455f90a60a01afd8a07a5d350411556d931112d80e8e008e64623d9b3f651f051bd8fce3ab7418691c1528befeace3402d3"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10}}], 0x308}, 0xc008080) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000000540)={0xa, &(0x7f0000000d00)=[{0xe, 0x68, &(0x7f00000004c0)="82d2a9b9f9859a677f04c7067fd583488fbf09438f20146dfbc5d18161fb069563fd4bce5cdca117caee6d1427f7a5cb9f02b00a2796d39378b9b2d148c563e924902061c927ec80e6fb5602ed4a64d7f551e66e58922c587237bd838cb25146e18bc39e5cef682b"}, {0xfff, 0x53, &(0x7f00000005c0)="7b8ab13cf7b3b682c60affd7bc799308827ee2b385be2c5a17bf076c06725a2bf577e83785a08f65e1fbb6ae8c758772b7264efe6c7595cbba4668986da4e2e3db6d1c9455da9d51211b9e625a45fd92a53c3e", 0x5bae9f0fca56cebd}, {0x45022256, 0xd8, &(0x7f0000000640)="9917cd6fe5cb5d190cf3d5fed7e4f4649ec846ce958ae7ee92414a1c2b5af261db338669ff52f75ad9804e324ccb920027c9bdfaebbc1e0a1da35f3aee84609ff73f221ac2ed6eed2a8c386f148878741a96e4408ce2e3102222a978287d42c163da8474581112188f60727054c8ccdccb9ef50a1f736646870106831ac5469f4fcdadd4e41eeaf1c8b65b02cdc36070c9de154e27533b8ee50b8ed5fd30e9ce9236f5e15131a57090a5bfe8b5ca838b31fa4ef1a976a11a34159f0f8298a087b02422c2333cc126e85feb368d92fd601376ecc836d3f537", 0x1}, {0x246, 0xb7, &(0x7f0000000740)="51024c83141a732b960477488e7ad575f7582a1f413a1eb4d8ee6b18ce57c31a53da0d3847c329b0808f647ad9bdeb432e3a5ed0084a1d9c4586eaf0262fa6146b3adb2b00fb98c5d86b99ff9907cc1e9742979a1fe967b9d0b5a31e3e15ddedb73f29380b4642d6129131c13642d97cf69afe584ba22d3728c058703da134431b534345ab4ce4b58f5e735115e800848c9cdd88183c454e709ec418f801ae0706ce899a9bcae7df8db618733efe5fc37c2d832fbf6705"}, {0x4, 0x8e, &(0x7f0000000800)="993138a5ec79c77903085f72bafe90e674568a6e53739d8e9b1b11f5126fe2045ea67509318ccfed7f5b97a9ba1a454fa6f401af6793c25d6394843ec09f647e1b48493f4fde30ca00d233dbb3897ac7d1f5f2a0034f05080eddf8753bdda5006678cc98f6d71f40b1ee0fcac344bde8528e927c4512064e445efb54895d3d7ee0e9578cef825ecb128aefd8576f", 0x1, 0x1}, {0xb2, 0xaa, &(0x7f00000008c0)="36a107c2d4e2f68140cf733b7943e811a55d0f46f85d8eda4236af7ace7ef3bde96a7305be4a405fcfe37e6046ae35a6877f6a1e8eb16aabef684fb6d86870883f0602485c5be22215a40e42f452e93992090af94fa48661698a973390b5fca3d9fdea6e6742009452005029217a2ce68b681ea691b7ff9257da7679b33a86db5b856a60a9e1b9b9258fa29e2cbb580f32d20c7b5a271b7d98a4db5d656d1a8b0e2dbb422902a321a868", 0x0, 0x1}, {0x3, 0xc1, &(0x7f0000000980)="70c0bbe9a63714acc21fe79c17a5693a1eaded7b0edb645624893bffd5b7fe08a09d259d5dc0a5d15e3f57c84f3a4a5214be077ec5e92c5016de562d5c97aedd82648c3b5b6b8af4062fee5e3c98762e55fcb7edf3c222c9eb79f52dedb04d445a234e48b28aab3a55de9fab72364cc68664ead99f873ddb86b0faf0ae717005e34eb93b72ae313f4c57d6b88e4b72770d00914d738859eff8d6b8ec7a9af800035c4d6b2d5e2f7b691c9b2b11dbc93ae5813232e8019ed11126abc6d87fa2c896", 0x1, 0x1}, {0xb4, 0xc2, &(0x7f0000000b40)="d9ba682c957027c65622f6115fc293ce651adc5c2008e1942c82903b091c5fad3280c85862ee53a596380827eeb61614386e52cacf3275e7361d88024d8d3a0fb43304552fa3ffebf1e0c3fc9a926c8ca4a47d633846dfb7a2104bc660efbe5b1298ade698fcc71e29684798601da50c8d62afafb53f40c5d6335ceaf9cff1ad41a0850c4e72f3cb98c28942b711ec040cf1ff336aed118d6f72fec9e85ae4be7885912481b87437dc051ec5dd3de9730d3c8390d22710abf389ca29324be0b4e72a", 0x1, 0x1}, {0x5f56, 0x3e, &(0x7f0000000340)="d590543f038d8baf14f8b9eb1dffea604fb125a6ea094416e4f507374f8547f66251a10dacf73560872e838ebb50e1923f7cc7c491c923f2526407e5ef5f", 0x1, 0x1}, {0x0, 0x90, &(0x7f0000000c40)="b0bedd37067f7baa715e60428581188184697f8c22a126cd7f6d16a69048c943836cfcc292a3f363f66ff4c9dac3a6f35b5e57fa23b3cf78f4ba88093d4858c09eb3fa42b13d070989f1617dba019f50196b718c1f1d57c3fb8e9a5b4ed36f6b9ee577d983f57bd195e697167bbf33fac980ce30eee7137db7e6a30214929c59074bd23241d03e20b1aa1f08cb994f2c", 0x1, 0x1}]}) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002080000000000000000000000000a050003002e00000005000300880000000600ff01080001600000000908fcffffffffffffff21407b52489c36c042e36ab400024088e500000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008844) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r7, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000140)={@empty, r6}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x41448000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.23715083s ago: executing program 0 (id=3271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'nicvf0\x00', {}, 0x7}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x5, 0xe8, "ccbe387c3c457e2e1cb812820414bbe1e81507bbc300017a6fe8b395958fb78b57e998b119668c187190d1605e71fe9225432022a6a064359a6470e3178381275f509e46cc4ddc383cd584bff87bfcaf16fa3c0cc988f3791d9410efad51b6114bf471863c545f3f40c147a35b0e1251d7042fdabb3429ded9c9ac703b222000bce160fbcb55bf758beb45c1eccd96c60fb7daa6663139d9b513d19514263765175c75646dce4ff13d9bcc4fe068c6dea5d8aa0b128c4286f2e7b5473e99331963ec2c6e5d4ae8f647a55b6b19ebd32da1200f053bceb0008e64d0bf6d7a2d3c65a8e2c1f7c735db"}}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'nicvf0\x00', {}, 0x7}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x5, 0xe8, "ccbe387c3c457e2e1cb812820414bbe1e81507bbc300017a6fe8b395958fb78b57e998b119668c187190d1605e71fe9225432022a6a064359a6470e3178381275f509e46cc4ddc383cd584bff87bfcaf16fa3c0cc988f3791d9410efad51b6114bf471863c545f3f40c147a35b0e1251d7042fdabb3429ded9c9ac703b222000bce160fbcb55bf758beb45c1eccd96c60fb7daa6663139d9b513d19514263765175c75646dce4ff13d9bcc4fe068c6dea5d8aa0b128c4286f2e7b5473e99331963ec2c6e5d4ae8f647a55b6b19ebd32da1200f053bceb0008e64d0bf6d7a2d3c65a8e2c1f7c735db"}}) (async) 1.021178292s ago: executing program 2 (id=3272): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="040000001000010000000000000000000000000a64000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800024000000000080003400000000108000140000000000900010073797a30000000000900020073797a320000000005000740c9000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540), 0x10) (async) r6 = socket(0x10, 0x803, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000801200000008000300014d1f5e3de59335664b43b3b5b7e910ad000000000000000000000000000000a7d0aecea278c4a9e53884bdb3ca3709d85e6e754d86d53c0bc8bdfdf7c6f9aea56f67075121a4a2f5fae75483182649d64d995dc9267d1017c3a5e3a8f1b682dfa324c64377fe77e3", @ANYRES32=r10, @ANYBLOB="0a000600080211000001000008001400", @ANYRES32=r7, @ANYBLOB, @ANYRESOCT=r6], 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf256500000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x840}, 0xc010) (async, rerun: 32) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xa}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@newtfilter={0x85c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x830, 0x2, [@TCA_BPF_POLICE={0x82c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x55, 0xaf5, 0x9, 0x900000, 0x1559eade, 0x8001, 0x3, 0x6, 0xc, 0xfdfe0e7, 0x81, 0x2, 0x7, 0x400, 0x7, 0x9, 0x9, 0x7d, 0x100, 0xc, 0x4, 0x1, 0x1, 0x2, 0x8, 0x1000, 0x8, 0x81, 0x5, 0xffff1257, 0x800, 0x6, 0x1, 0x3, 0x3, 0x9, 0x10000, 0x3, 0xe, 0x7, 0x5, 0x236, 0x6, 0x5, 0x300, 0x1, 0xc9, 0x1, 0x0, 0x6deb, 0x5df, 0x8, 0xe, 0x0, 0x5, 0xcf, 0x6ef, 0x1, 0x0, 0x8ca, 0x4, 0x6, 0x6, 0x8000, 0x0, 0x3, 0x3, 0x2, 0x100, 0x1, 0x10000, 0x4, 0x2, 0x3, 0xbcc5, 0x7, 0x1, 0x8, 0x3, 0xb, 0x8d, 0x7, 0x8, 0x840, 0x4, 0xffffffff, 0x6, 0x5, 0x4b, 0xe6f8, 0x8, 0x1000, 0x8, 0xa, 0xd0da, 0x2ee4, 0x8, 0x2, 0xfffffff7, 0x6, 0x2, 0xfffffff8, 0xcca, 0x0, 0x8, 0x507, 0x8001, 0x80000001, 0x0, 0x7, 0x708, 0x3, 0x6, 0x3, 0x1, 0xf, 0x4, 0x80000000, 0x5, 0x0, 0x402, 0x3, 0x7, 0xff, 0x7f, 0x8, 0x0, 0x5, 0xba, 0x1, 0x40, 0xffffffff, 0x2e0d, 0x7ff, 0x1000004, 0x6, 0x1, 0x1, 0x9, 0x10, 0x2, 0xffff, 0x6, 0x7, 0x1, 0x8001, 0xc785, 0x3ff, 0x9, 0x0, 0x101, 0x7, 0x8000, 0x4, 0x1, 0xba2, 0xf7d, 0x7, 0x9, 0x8, 0x2b9ae1eb, 0x9, 0x5b13c40, 0x4, 0x6a9, 0x9, 0x3, 0xfffffffe, 0x27ae, 0x866, 0x7, 0x8, 0x300, 0x200, 0x6, 0x8, 0x8, 0x9, 0x2, 0xfffffffa, 0x10000, 0x5, 0x9, 0x24000000, 0x101, 0x66, 0x4, 0x400, 0x7fffffff, 0x5, 0xe3, 0x7a337f37, 0x1d7, 0x5, 0xe, 0x2, 0x3, 0x0, 0x2, 0x7f, 0x2, 0x95, 0x2, 0x570, 0x5, 0xf43, 0x8000, 0xfffffe01, 0x2, 0x1ff, 0x2, 0xb503, 0xfffffffe, 0xe, 0x29, 0x8, 0x0, 0x8000, 0x9, 0x7, 0xfffffffb, 0x9, 0x2, 0x1bf, 0x7, 0x1, 0x2, 0x6, 0x3ff, 0xfffffff7, 0x9, 0x4, 0x1ff, 0x21, 0xffff4309, 0x786f, 0x1, 0x7, 0x2, 0x401, 0x0, 0x24, 0x40, 0x1ff, 0x7, 0x7, 0xd, 0x1000, 0x2, 0x80000001, 0x6, 0x1, 0x1, 0xffff, 0x7, 0x2c]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffb5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x81, 0x1, 0x3ff, 0x204, 0x3, 0x7, 0x9, 0x4, 0x7, 0xfffffff8, 0x6, 0x0, 0x7f, 0xf, 0x2, 0x6, 0x9, 0x8, 0x7, 0x100, 0x0, 0xe, 0x1, 0x2e9, 0x3, 0x80000000, 0x5, 0xd7, 0x10000, 0x1000008, 0x2, 0x3, 0x5, 0xfffffffa, 0x2, 0x6, 0x1, 0x6, 0x1ff, 0x2, 0x8, 0x252, 0x10, 0xfffffffb, 0x8, 0x0, 0x5, 0x9, 0xffff, 0x7fff, 0x6, 0x8, 0xffffffff, 0x2, 0x9, 0x10000, 0x7, 0xfffffffa, 0x4, 0x6aa3, 0x5, 0x9e1, 0x9, 0x2, 0x3, 0x9ba, 0xffffffcc, 0x9, 0x6, 0xa, 0x6, 0x1, 0x8, 0x2, 0x4, 0x200, 0x0, 0x60bd9f9d, 0x8, 0x5, 0xeec, 0xfffff800, 0x0, 0x12, 0x0, 0x9, 0x2, 0x5, 0x52ca, 0x80000000, 0xf426, 0x0, 0x6, 0xaf, 0x5, 0x6, 0xf03, 0x6, 0xf90d, 0x100, 0x1, 0x3, 0x2, 0x2, 0x8, 0x6d1, 0xef, 0x9, 0x7fffffff, 0x8, 0xe0000000, 0x8, 0x9, 0x3, 0x3, 0x1, 0x8, 0x2, 0x8, 0x28, 0xffffffff, 0xd, 0x2, 0x9, 0xd, 0x4, 0x4, 0x10001, 0x722, 0x7, 0x0, 0x3, 0xfffffff8, 0xc32, 0x3, 0xfff, 0x4, 0xd9b, 0x0, 0x2, 0x8, 0xa67, 0xffffffff, 0x6545, 0x7e5a, 0x2, 0x400, 0x8001, 0xe6, 0x7f, 0x63b1, 0xc, 0x8, 0x7, 0x1, 0x7f68c1b3, 0x9, 0xf, 0x7fff, 0x7e, 0x0, 0x5, 0xa605, 0x9, 0xd89, 0x2, 0x2, 0x10, 0x1000, 0x6, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8001, 0x6, 0x8, 0x8, 0x4, 0x4, 0xfffff8ad, 0xaed3, 0x0, 0x1, 0x4, 0x9, 0x7, 0x2ec, 0x0, 0x38, 0x0, 0xffffffff, 0x59, 0x3, 0x9, 0x7f, 0x50, 0x2, 0xb272, 0x3, 0x9, 0x5, 0x81, 0xc84, 0x0, 0x40, 0x14, 0x5, 0xf7, 0x0, 0x3, 0x8, 0x5, 0x2, 0x80000001, 0xfffffffe, 0x1, 0xcfc7, 0x8, 0x10, 0x10, 0x2, 0xee, 0x9, 0x1, 0x9, 0x1, 0x8, 0x8000, 0x1, 0x800, 0x0, 0x36, 0xb04, 0xdbf9, 0x80000001, 0x857, 0x6, 0x3c, 0x8001, 0x4, 0x0, 0x8, 0x9, 0x0, 0x0, 0x4, 0xffe00000, 0x6, 0xff, 0x0, 0x3, 0x7]}]}]}}]}, 0x85c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@empty, @multicast1}, &(0x7f0000000100)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) (async) socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x44, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xfffffffe}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf, 0x9}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x500408c0}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x47, 0x8, 0xffffff7f, {{0x9, 0x4, 0x2, 0x8, 0x24, 0x68, 0x0, 0xe, 0x2f, 0x0, @broadcast, @loopback, {[@generic={0x82, 0xd, "11f0b491f98827c5a8e57d"}]}}}}}) 1.02029791s ago: executing program 0 (id=3273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000001100006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868e6cd1678f74e30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b506971431bb6b1fb46b2aa425833f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa209000000000000003ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 856.598912ms ago: executing program 0 (id=3274): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x5, "e8014b4a24"}, &(0x7f00000000c0)=0xd) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0xf}, &(0x7f0000000140)=0x8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x6, 0x20, 0x31fb, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x14, 0x0, 0x0, 0x0, "b78b89301f4bf59cfef099ee9dbabb80890b9a052ba5d14f21e5c83e1a0c70783d2c40dc3df7feb3fe5b758307641407b17aad9783176bae7f4b99201bb0e88f"}}, 0x80}, 0x1, 0x0, 0x0, 0xc7f6653d711e8abb}, 0x8014) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000300)=0x2) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f0000000340)={0x4, 0x2, 0x81, @empty, 'bridge_slave_1\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @llc={0x1a, 0x4, 0x7, 0x8c, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @sco, @vsock, 0xb9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x7, 0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r7) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000440)=0x401) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @broadcast}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000004c0)={r3, 0x8000, 0x30, 0x888c, 0xd}, &(0x7f0000000500)=0x18) r9 = socket$netlink(0x10, 0x3, 0x12) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000540)={0x5, 0x4, 0x101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x480302, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000005c0)={'macvlan0\x00', @remote}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000680)={r2, 0x58, &(0x7f0000000600)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x977, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f00000006c0)=0x10) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000740)='cgroup.threads\x00', 0x2, 0x0) ioctl$FIGETBSZ(r11, 0x2, &(0x7f0000000780)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000007c0)={r4}) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r9) sendmsg$TIPC_NL_BEARER_ENABLE(r13, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1b0, r14, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6b089c858d7ef1e408ecc3642703d066d87910f5abe486c78ac9d3b13d28"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x896}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x1ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xda57}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20048000}, 0x8800) 716.547173ms ago: executing program 0 (id=3275): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9d3, 0xffffffff}, {0xfffffffffffffffd}, 0xfffffffd, 0x6e6bb5}}, 0xb8}}, 0x0) 593.781973ms ago: executing program 4 (id=3276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004801cc2b92d7d7691c6992800018007000100637400001c0002800500030000000000080002400000000308000440000000000900010073797a1b30000000000900020073797a32000000001400000011000100000000"], 0x80}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) 573.72741ms ago: executing program 2 (id=3277): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt(r2, 0x4, 0xac, &(0x7f0000000280)="0e3a9c78fce0351ff76f7392f61cad41c8ff155eb08aa12682d53401a83844612f0d8d373120de157fdc23f9b8047d10f18d69f161bf6db95c25ce28a2f5792f4d16a77864705209b41208bed09994244cf81880bb8d612705be29bbbc0b4476b1de224973073cd143ec9956566f5722df513da5cfd3b53368b92aedddc419c5ad46b7156f87aff65a71079167abaca8926e97a5915f3a4879a74649d8d57a20ab2682043c4c3c0ba95e72879b", 0xad) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x200, 0x7, 0x0, r3}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3}, &(0x7f0000000040)=0x1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) setsockopt(r2, 0x4, 0xac, &(0x7f0000000280)="0e3a9c78fce0351ff76f7392f61cad41c8ff155eb08aa12682d53401a83844612f0d8d373120de157fdc23f9b8047d10f18d69f161bf6db95c25ce28a2f5792f4d16a77864705209b41208bed09994244cf81880bb8d612705be29bbbc0b4476b1de224973073cd143ec9956566f5722df513da5cfd3b53368b92aedddc419c5ad46b7156f87aff65a71079167abaca8926e97a5915f3a4879a74649d8d57a20ab2682043c4c3c0ba95e72879b", 0xad) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x200, 0x7, 0x0, r3}, 0x10) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3}, &(0x7f0000000040)=0x1) (async) 441.32662ms ago: executing program 0 (id=3278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010000d04040000005c000000", @ANYRES32=0x0, @ANYBLOB="00000000195000001c0012800c0001006d6163766c616e000c0002800600020001000000140035006d6163766c616e30"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xc0000000000000, 0x4, 0x7}) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000003c0)={r3, 0x68}, &(0x7f0000000400)=0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x30000011}) (async) close(r5) socket$nl_audit(0x10, 0x3, 0x9) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYRES16=r0, @ANYBLOB="9a555525f5c598a2427c75cc6f504307b2d1015fe6c5e6a200b82574044d795026c2c36e78ec36aa77032e8da58931dde3c66df77867c0c2d59006a5558f00857cb05192d3eff9e877051237e79d6497675f12e1c22b76fbad605c5333fd4269458fa03ce80bdabd2312a7bd16fabbba52a205107d65918838b868fd360372ad6cf59012b024726cba7ea6e77b06d9a78f6493500413537b2ea48cdeb1779a8e", @ANYBLOB="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"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r7}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f00000001c0), &(0x7f0000000600)=@udp6}, 0x20) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="08000600fa0600000900180601000700"], 0x14) 438.21416ms ago: executing program 4 (id=3279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000100001000000000000918d04aeea6715ab000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a", @ANYRESDEC=r0], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001100)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001140)={0x1d, r4, 0x1, {0x2, 0xf0, 0x3}, 0x2}, 0x18) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={r7, 0x5}, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}}, 0xc090) getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@noop, @lsrr={0x83, 0x3, 0x77}]}}, @address_request={0x11, 0x0, 0x0, 0x576}}}}}, 0x0) 185.576747ms ago: executing program 0 (id=3280): r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x11eac000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xb6, 0x10}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private, @empty}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@getchain={0x44, 0x66, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xd, 0xfff2}, {0x10, 0xb}, {0xfff2, 0x8}}, [{0x8, 0xb, 0xfffffff2}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0xffffffff}, {0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) 184.520728ms ago: executing program 2 (id=3281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r3, 0x8667eeefa0de3cbb, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0xe000, @void}}}}}}}}, 0x32) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x4c20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x4c}}, 0x24048020) close(r7) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r12, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 129.530726ms ago: executing program 4 (id=3282): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x20]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r5, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 8.000725ms ago: executing program 1 (id=3283): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r6 = socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), r6) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x1ab2e04860e0e407) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b7000000000095f1ff0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r8, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r8, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000380)=0x1ff) accept(r10, &(0x7f0000000300)=@qipcrtr, &(0x7f00000000c0)=0x80) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000014002101000000000000000002400000", @ANYRES32=r13, @ANYBLOB="08000200ac14141d08000200e00000021400030067726574617030000000000000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r13}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 3 (id=3179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) shutdown(r1, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) kernel console output (not intermixed with test programs): 213.161717][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 213.239940][T10816] netlink: 'syz.3.1347': attribute type 29 has an invalid length. [ 213.278710][T10816] netlink: 'syz.3.1347': attribute type 29 has an invalid length. [ 213.289552][T10822] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1349'. [ 213.357305][T10822] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1349'. [ 213.638875][T10840] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1352'. [ 214.053079][T10848] syzkaller0: entered promiscuous mode [ 214.076400][T10848] syzkaller0: entered allmulticast mode [ 214.086789][T10862] netlink: 'syz.0.1358': attribute type 23 has an invalid length. [ 216.229546][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1366'. [ 216.246426][T10882] sock: sock_timestamping_bind_phc: sock not bind to device [ 216.319310][T10885] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.388484][T10887] syzkaller0: entered promiscuous mode [ 216.444501][T10887] syzkaller0: entered allmulticast mode [ 216.488913][T10874] tipc: Enabled bearer , priority 0 [ 216.501378][T10905] IPVS: set_ctl: invalid protocol: 98 172.20.20.46:20004 [ 216.507407][T10874] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 216.554066][T10874] IPv6: Can't replace route, no match found [ 216.562496][T10873] tipc: Resetting bearer [ 216.582759][T10873] tipc: Disabling bearer [ 216.605435][T10914] __nla_validate_parse: 2 callbacks suppressed [ 216.605457][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 216.892268][T10928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 217.579951][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1383'. [ 217.599336][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 217.693430][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1386'. [ 217.747301][T10956] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1385'. [ 217.760418][T10956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1385'. [ 217.929032][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1391'. [ 218.115807][T10984] tipc: Enabling of bearer rejected, already enabled [ 218.470620][T11000] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 218.869099][T11025] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1401'. [ 218.881030][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'. [ 219.041680][T11032] netlink: 'syz.4.1407': attribute type 1 has an invalid length. [ 219.206234][T11032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.240007][T11045] netlink: 'syz.0.1410': attribute type 10 has an invalid length. [ 219.281314][T11040] bond3: (slave gretap1): making interface the new active one [ 219.290590][T11040] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 219.300084][T11045] bridge_slave_1: left allmulticast mode [ 219.340580][T11045] bridge_slave_1: left promiscuous mode [ 219.348275][T11045] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.411215][T11045] bridge_slave_1: entered allmulticast mode [ 219.425305][T11045] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 219.494618][T11052] netlink: 'syz.4.1412': attribute type 10 has an invalid length. [ 219.874512][T11081] tipc: Enabled bearer , priority 0 [ 219.909465][T11081] syzkaller0: entered promiscuous mode [ 219.942276][T11081] syzkaller0: entered allmulticast mode [ 219.980009][T11081] tipc: Resetting bearer [ 220.037690][T11079] tipc: Resetting bearer [ 220.096145][T11079] tipc: Disabling bearer [ 220.367090][T11105] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 220.419949][T11105] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.482119][T11116] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.500301][T11116] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 220.519310][T11116] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 220.549634][T11120] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 220.605431][T11119] syzkaller0: entered promiscuous mode [ 220.611196][T11119] syzkaller0: entered allmulticast mode [ 220.929072][T11139] tipc: Resetting bearer [ 220.973928][T11138] tipc: Resetting bearer [ 221.597352][ T8395] tipc: Resetting bearer [ 221.616914][T11181] bridge0: port 1(syz_tun) entered blocking state [ 221.636478][T11181] bridge0: port 1(syz_tun) entered disabled state [ 221.667742][T11181] syz_tun: entered allmulticast mode [ 221.684882][T11181] syz_tun: entered promiscuous mode [ 221.693323][T11181] bridge0: port 1(syz_tun) entered blocking state [ 221.700022][T11181] bridge0: port 1(syz_tun) entered forwarding state [ 221.716137][T11186] __nla_validate_parse: 8 callbacks suppressed [ 221.716157][T11186] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1453'. [ 221.790890][T11200] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.013076][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 222.034295][T11213] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1462'. [ 222.109021][ T8395] tipc: Subscription rejected, illegal request [ 222.126548][T11216] netlink: 'syz.3.1463': attribute type 33 has an invalid length. [ 222.336356][T11233] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1468'. [ 222.352710][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1467'. [ 222.360394][T11235] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 222.387038][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1467'. [ 222.474326][T11242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.490957][T11250] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1473'. [ 222.647388][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 223.488376][T11289] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1481'. [ 223.617617][T11303] netlink: 6196 bytes leftover after parsing attributes in process `syz.3.1485'. [ 224.154818][T11340] IPVS: set_ctl: invalid protocol: 1 172.30.1.4:20000 [ 224.162947][T11340] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 224.187164][T11340] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 224.538313][T11362] vxcan1 speed is unknown, defaulting to 1000 [ 224.572663][T11371] tipc: Failed to remove unknown binding: 66,1,1/0:3240262441/3240262443 [ 225.650162][T11417] pim6reg: entered allmulticast mode [ 225.822936][T11429] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 226.652488][T11474] 0ªî{X¹¦: renamed from gretap0 [ 226.664509][T11474] 0ªî{X¹¦: entered allmulticast mode [ 226.673928][T11474] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 226.957366][T11499] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 227.025711][T11499] tipc: Enabling of bearer rejected, already enabled [ 227.039938][T11495] vxcan1 speed is unknown, defaulting to 1000 [ 227.048906][T11506] veth1_virt_wifi: mtu less than device minimum [ 227.055433][T11508] __nla_validate_parse: 11 callbacks suppressed [ 227.055451][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 227.088426][T11499] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 227.161746][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 227.458814][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1543'. [ 227.495468][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 227.504900][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 227.536551][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 227.572575][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 227.595077][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 227.625800][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 227.725825][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 227.745589][T11532] netlink: 'syz.4.1546': attribute type 10 has an invalid length. [ 228.494168][T11567] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 228.496934][T11569] netlink: 'syz.4.1559': attribute type 10 has an invalid length. [ 228.568668][T11567] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.631679][T11573] bond4: (slave ip6erspan0): making interface the new active one [ 228.641986][T11573] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 228.670205][T11575] tipc: Enabled bearer , priority 0 [ 228.867496][T11585] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 229.006293][T11586] macvtap2: entered promiscuous mode [ 229.489786][T11620] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 229.793086][ T24] tipc: Node number set to 1861757982 [ 230.378676][T11667] tipc: Enabled bearer , priority 0 [ 230.417305][T11667] tipc: Resetting bearer [ 230.503628][T11665] tipc: Disabling bearer [ 230.692508][T11679] netlink: 'syz.4.1592': attribute type 4 has an invalid length. [ 231.029574][T11696] netlink: 'syz.1.1597': attribute type 2 has an invalid length. [ 231.077585][T11696] nbd: must specify at least one socket [ 231.144965][T11700] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 231.148708][T11702] vxcan1 speed is unknown, defaulting to 1000 [ 232.029677][T11741] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 232.149565][T11745] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 232.392567][T11751] __nla_validate_parse: 13 callbacks suppressed [ 232.392591][T11751] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1611'. [ 232.416692][T11757] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 232.451535][T11749] vxcan1 speed is unknown, defaulting to 1000 [ 232.540292][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1614'. [ 232.951098][T11786] netlink: 'syz.0.1621': attribute type 32 has an invalid length. [ 232.992743][T11786] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 233.000662][T11786] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1621'. [ 233.126743][T11797] xt_socket: unknown flags 0x50 [ 233.159901][T11797] tipc: Enabling of bearer rejected, already enabled [ 233.199781][T11797] veth0: entered promiscuous mode [ 233.215949][T11797] veth0: left promiscuous mode [ 233.490187][T11816] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 233.491910][T11817] IPVS: stopping backup sync thread 11816 ... [ 233.668326][T11824] syzkaller1: entered promiscuous mode [ 233.674915][T11824] syzkaller1: entered allmulticast mode [ 233.773951][T11827] netlink: 'syz.4.1631': attribute type 10 has an invalid length. [ 233.855475][T11827] veth0_vlan: entered allmulticast mode [ 234.049832][T11841] tipc: Resetting bearer [ 234.140824][T11839] tipc: Resetting bearer [ 234.467964][ T1102] tipc: Resetting bearer [ 234.800213][T11889] netlink: 'syz.0.1649': attribute type 3 has an invalid length. [ 234.828090][T11887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1651'. [ 234.846510][T11891] tipc: Enabled bearer , priority 0 [ 234.857949][T11891] syzkaller0: entered promiscuous mode [ 234.866297][T11891] syzkaller0: entered allmulticast mode [ 234.880615][T11896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1652'. [ 235.004926][T11891] tipc: Resetting bearer [ 235.023192][T11903] tipc: Enabling of bearer rejected, already enabled [ 235.046033][T11886] tipc: Resetting bearer [ 235.142605][T11886] tipc: Disabling bearer [ 235.318462][T11924] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 235.549190][T11943] syzkaller1: left promiscuous mode [ 235.564278][T11943] syzkaller1: left allmulticast mode [ 235.732506][T11951] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 235.837672][T11968] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 235.859268][T11968] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 235.862671][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 235.932196][ T24] IPVS: starting estimator thread 0... [ 235.996348][T11983] tipc: Resetting bearer [ 236.024186][T11978] IPVS: using max 25 ests per chain, 60000 per kthread [ 236.078927][T11988] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1677'. [ 236.114785][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1676'. [ 236.126730][T11985] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1676'. [ 236.136394][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 236.191105][T11980] tipc: Resetting bearer [ 236.361685][T12004] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 236.428009][T12004] team0: Port device geneve0 added [ 236.444449][ T1115] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.470223][ T1115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.496592][ T1115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.558755][ T1102] tipc: Resetting bearer [ 236.582768][ T1115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.649065][T12008] vxcan1 speed is unknown, defaulting to 1000 [ 236.678430][T12015] ip6gre1: entered allmulticast mode [ 236.958472][T12032] can: request_module (can-proto-0) failed. [ 237.289839][T12051] netlink: 'syz.1.1697': attribute type 1 has an invalid length. [ 237.752547][T12084] __nla_validate_parse: 4 callbacks suppressed [ 237.752567][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 238.111963][ T25] block nbd0: Possible stuck request ffff888025275080: control (read@0,1024B). Runtime 30 seconds [ 238.124411][ T25] block nbd0: Possible stuck request ffff888025275240: control (read@1024,1024B). Runtime 30 seconds [ 238.135522][ T25] block nbd0: Possible stuck request ffff888025275400: control (read@2048,1024B). Runtime 30 seconds [ 238.146727][ T25] block nbd0: Possible stuck request ffff8880252755c0: control (read@3072,1024B). Runtime 30 seconds [ 238.441422][T12112] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 238.470955][T12112] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1710'. [ 238.494578][T12112] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 238.508226][T12112] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 238.516977][T12112] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1710'. [ 238.562205][T12112] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 238.567057][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'. [ 238.590356][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1710'. [ 238.613057][T12112] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 238.650521][T12112] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1710'. [ 238.670371][T12111] netlink: 'syz.1.1710': attribute type 7 has an invalid length. [ 238.687581][T12112] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 238.699335][T12112] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 238.719483][T12112] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1710'. [ 238.730366][T12112] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 238.745919][T12112] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 238.756785][T12112] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1710'. [ 238.768110][T12112] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1710'. [ 238.780340][T12112] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1710'. [ 240.817054][T12213] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 240.829572][T12213] bond5: (slave vcan0): Error -95 calling set_mac_address [ 240.903048][T12213] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 240.915943][T12213] bond5: (slave vcan0): Error -95 calling set_mac_address [ 240.998895][T12213] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 241.015411][T12213] bond5: (slave vcan0): Error -95 calling set_mac_address [ 241.041056][T12228] 8021q: VLANs not supported on gre0 [ 241.047636][T12229] ip6tnl0: entered promiscuous mode [ 241.095047][T12213] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 241.128815][T12213] bond5: (slave vcan0): Error -95 calling set_mac_address [ 241.153591][T12234] 8021q: VLANs not supported on caif0 [ 241.159660][T12237] tipc: Enabling of bearer rejected, already enabled [ 241.169636][T12233] 8021q: VLANs not supported on caif0 [ 241.198500][T12213] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 241.220418][T12213] bond5: (slave vcan0): Error -95 calling set_mac_address [ 241.259590][T12239] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 241.295218][T12239] tipc: Resetting bearer [ 241.328672][T12213] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 241.350794][T12213] bond5: (slave vcan0): Error -95 calling set_mac_address [ 241.415612][T12213] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 241.429543][T12213] bond5: (slave vcan0): Error -95 calling set_mac_address [ 241.491756][T12213] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 241.507333][T12213] bond5: (slave vcan0): Error -95 calling set_mac_address [ 241.668117][T12254] syzkaller1: entered promiscuous mode [ 241.675025][T12254] syzkaller1: entered allmulticast mode [ 242.275024][T12283] bond0: entered promiscuous mode [ 242.284428][T12283] bond_slave_0: entered promiscuous mode [ 242.290689][T12283] bond_slave_1: entered promiscuous mode [ 242.302994][T12283] bridge_slave_1: entered promiscuous mode [ 242.346165][T12283] ip6gretap0: entered promiscuous mode [ 242.364698][T12283] ip6gretap0: left promiscuous mode [ 242.387609][T12283] bond0: left promiscuous mode [ 242.402308][T12283] bond_slave_0: left promiscuous mode [ 242.415950][T12283] bond_slave_1: left promiscuous mode [ 242.435741][T12283] bridge_slave_1: left promiscuous mode [ 242.458114][T12285] bond0: entered promiscuous mode [ 242.471492][T12285] bond_slave_0: entered promiscuous mode [ 242.478917][T12285] bond_slave_1: entered promiscuous mode [ 242.490624][T12285] bridge_slave_1: entered promiscuous mode [ 242.500193][T12285] ip6gretap0: entered promiscuous mode [ 242.507783][T12285] ip6gretap0: left promiscuous mode [ 242.515130][T12285] bond0: left promiscuous mode [ 242.520069][T12285] bond_slave_0: left promiscuous mode [ 242.525962][T12285] bond_slave_1: left promiscuous mode [ 242.531838][T12285] bridge_slave_1: left promiscuous mode [ 242.545420][T12284] tipc: New replicast peer: 255.255.255.255 [ 242.554549][T12284] tipc: Enabled bearer , priority 10 [ 242.773030][T12311] __nla_validate_parse: 108 callbacks suppressed [ 242.773053][T12311] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1781'. [ 242.830845][T12311] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1781'. [ 242.926980][T12311] `: renamed from bond0 (while UP) [ 243.077891][T12326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1786'. [ 243.106796][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 243.121595][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 243.151517][T12331] openvswitch: netlink: Unknown key attributes 2 [ 243.272908][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 243.298394][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 243.315249][T12331] tipc: Enabled bearer , priority 0 [ 243.330212][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 243.342682][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 243.353862][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 243.413289][T12331] syzkaller0: entered promiscuous mode [ 243.418838][T12331] syzkaller0: entered allmulticast mode [ 243.426528][T12331] tipc: Resetting bearer [ 243.440294][T12341] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 243.449074][T12341] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 243.507603][T12344] tipc: Resetting bearer [ 243.555614][T12330] tipc: Resetting bearer [ 244.210949][T12374] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 245.622889][T12330] tipc: Disabling bearer [ 245.721457][T12397] tipc: Resetting bearer [ 245.925527][T12397] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.933112][ T8874] IPVS: starting estimator thread 0... [ 245.975284][T12396] tipc: Resetting bearer [ 246.024886][T12413] IPVS: using max 23 ests per chain, 55200 per kthread [ 246.149413][T12424] lo: entered allmulticast mode [ 246.195778][T12427] vxcan1 speed is unknown, defaulting to 1000 [ 246.683131][ T1115] tipc: Resetting bearer [ 246.883977][T12464] tipc: Enabling of bearer rejected, failed to enable media [ 246.920904][T12464] bridge_slave_0: left allmulticast mode [ 246.932620][T12464] bridge_slave_0: left promiscuous mode [ 246.938507][T12464] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.992426][T12464] bond0: (slave bridge_slave_1): Releasing backup interface [ 247.001401][T12464] bridge_slave_1: left allmulticast mode [ 247.039561][T12464] bond0: (slave bond_slave_0): Releasing backup interface [ 247.051877][T12464] bond_slave_0: left allmulticast mode [ 247.088344][T12464] bond0: (slave bond_slave_1): Releasing backup interface [ 247.109880][T12464] bond_slave_1: left allmulticast mode [ 247.125092][T12464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.139080][T12464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.168550][T12464] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 247.375368][T12480] validate_nla: 126 callbacks suppressed [ 247.375391][T12480] netlink: 'syz.2.1829': attribute type 4 has an invalid length. [ 247.457401][T12479] syz.2.1829: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 247.516304][T12479] CPU: 0 UID: 0 PID: 12479 Comm: syz.2.1829 Not tainted syzkaller #0 PREEMPT(full) [ 247.516335][T12479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.516346][T12479] Call Trace: [ 247.516354][T12479] [ 247.516363][T12479] dump_stack_lvl+0x189/0x250 [ 247.516397][T12479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.516421][T12479] ? __pfx__printk+0x10/0x10 [ 247.516448][T12479] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 247.516472][T12479] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 247.516496][T12479] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 247.516522][T12479] warn_alloc+0x214/0x310 [ 247.516556][T12479] ? __pfx_warn_alloc+0x10/0x10 [ 247.516594][T12479] ? __get_vm_area_node+0x28f/0x300 [ 247.516621][T12479] ? packet_set_ring+0x6f4/0x2350 [ 247.516651][T12479] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 247.516715][T12479] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 247.516745][T12479] ? alloc_pages_mpol+0x3cd/0x4a0 [ 247.516783][T12479] ? packet_set_ring+0x6f4/0x2350 [ 247.516805][T12479] vzalloc_noprof+0xb2/0xf0 [ 247.516830][T12479] ? packet_set_ring+0x6f4/0x2350 [ 247.516854][T12479] packet_set_ring+0x6f4/0x2350 [ 247.516901][T12479] ? __pfx_packet_set_ring+0x10/0x10 [ 247.516946][T12479] ? _copy_from_user+0x94/0xb0 [ 247.516973][T12479] packet_setsockopt+0xc5a/0x12c0 [ 247.517000][T12479] ? __pfx_packet_setsockopt+0x10/0x10 [ 247.517029][T12479] ? __lock_acquire+0xab9/0xd20 [ 247.517064][T12479] ? aa_sk_perm+0x81e/0x950 [ 247.517097][T12479] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.517126][T12479] ? __fget_files+0x2a/0x420 [ 247.517140][T12479] ? aa_sock_opt_perm+0xff/0x1b0 [ 247.517163][T12479] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 247.517183][T12479] ? __pfx_packet_setsockopt+0x10/0x10 [ 247.517208][T12479] do_sock_setsockopt+0x17c/0x1b0 [ 247.517236][T12479] __x64_sys_setsockopt+0x13f/0x1b0 [ 247.517263][T12479] do_syscall_64+0xfa/0x3b0 [ 247.517281][T12479] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.517308][T12479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.517326][T12479] ? clear_bhb_loop+0x60/0xb0 [ 247.517350][T12479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.517369][T12479] RIP: 0033:0x7f58ffb8ebe9 [ 247.517388][T12479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.517404][T12479] RSP: 002b:00007f5900969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 247.517427][T12479] RAX: ffffffffffffffda RBX: 00007f58ffdc5fa0 RCX: 00007f58ffb8ebe9 [ 247.517441][T12479] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000005 [ 247.517452][T12479] RBP: 00007f58ffc11e19 R08: 000000000000001c R09: 0000000000000000 [ 247.517463][T12479] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.517473][T12479] R13: 00007f58ffdc6038 R14: 00007f58ffdc5fa0 R15: 00007fffc72dbe98 [ 247.517506][T12479] [ 247.517514][T12479] Mem-Info: [ 247.958077][T12479] active_anon:5315 inactive_anon:0 isolated_anon:0 [ 247.958077][T12479] active_file:3088 inactive_file:39909 isolated_file:0 [ 247.958077][T12479] unevictable:768 dirty:37 writeback:0 [ 247.958077][T12479] slab_reclaimable:12232 slab_unreclaimable:105525 [ 247.958077][T12479] mapped:29220 shmem:2051 pagetables:950 [ 247.958077][T12479] sec_pagetables:0 bounce:0 [ 247.958077][T12479] kernel_misc_reclaimable:0 [ 247.958077][T12479] free:1317750 free_pcp:17712 free_cma:0 [ 248.076775][T12479] Node 0 active_anon:18460kB inactive_anon:0kB active_file:12352kB inactive_file:159428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116880kB dirty:148kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12964kB pagetables:3556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 248.156662][T12479] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 248.215052][T12479] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.322097][T12479] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 248.327946][T12479] Node 0 DMA32 free:1370612kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18352kB inactive_anon:0kB active_file:12352kB inactive_file:157848kB unevictable:1536kB writepending:148kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:51144kB local_pcp:25972kB free_cma:0kB [ 248.421470][T12510] __nla_validate_parse: 66 callbacks suppressed [ 248.421495][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 248.459160][T12479] lowmem_reserve[]: 0 0 1 1 1 [ 248.465410][T12479] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 248.552444][T12479] lowmem_reserve[]: 0 0 0 0 0 [ 248.562079][T12479] Node 1 Normal free:3885140kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23008kB local_pcp:9760kB free_cma:0kB [ 248.616217][T12479] lowmem_reserve[]: 0 0 0 0 0 [ 248.621022][T12479] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 248.654725][T12515] tipc: Enabling of bearer rejected, failed to enable media [ 248.659528][T12479] Node 0 DMA32: 25*4kB (ME) 5*8kB (UM) 2*16kB (M) 456*32kB (UME) 90*64kB (UME) 5*128kB (U) 8*256kB (UM) 2*512kB (UM) 6*1024kB (M) 4*2048kB (ME) 325*4096kB (UM) = 1369772kB [ 248.680523][T12515] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.721628][T12479] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 248.743861][T12479] Node 1 Normal: 237*4kB (UE) 60*8kB (UME) 52*16kB (UME) 118*32kB (UME) 21*64kB (UME) 11*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3885140kB [ 248.821543][T12479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.864140][T12479] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.903479][T12479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.937337][ T1038] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.941638][T12479] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.949838][ T1038] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.979072][T12479] 45230 total pagecache pages [ 248.989203][T12479] 0 pages in swap cache [ 248.993597][T12479] Free swap = 124996kB [ 248.997772][T12479] Total swap = 124996kB [ 249.007932][ T1038] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.014114][T12479] 2097051 pages RAM [ 249.024243][T12479] 0 pages HighMem/MovableOnly [ 249.032087][T12479] 425667 pages reserved [ 249.041378][T12479] 0 pages cma reserved [ 249.096064][ T1038] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.136021][T12530] syzkaller1: entered promiscuous mode [ 249.141672][T12530] syzkaller1: entered allmulticast mode [ 249.299794][T12542] ip6gre0: Master is either lo or non-ether device [ 249.387916][T12551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1854'. [ 249.471567][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 249.656591][T12569] vxcan1 speed is unknown, defaulting to 1000 [ 249.676683][T12570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.773805][T12573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1858'. [ 250.403305][T12589] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 250.536001][T12588] bond0: (slave gretap2): making interface the new active one [ 250.546421][T12588] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 250.561799][T12595] syzkaller1: left promiscuous mode [ 250.592418][T12595] syzkaller1: left allmulticast mode [ 250.749602][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1867'. [ 250.877876][T12609] dvmrp8: entered allmulticast mode [ 251.298349][T12616] bridge0: port 1(syz_tun) entered disabled state [ 251.613241][T12618] geneve2: entered promiscuous mode [ 251.618686][T12618] geneve2: entered allmulticast mode [ 251.653685][ T3521] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.668590][ T3521] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 251.787318][ T3521] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.806169][T12644] netlink: 'syz.1.1877': attribute type 2 has an invalid length. [ 251.808180][ T3521] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 251.854929][ T3521] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.868895][ T3521] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 251.879264][T12647] netlink: 'syz.2.1875': attribute type 2 has an invalid length. [ 251.888525][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'. [ 251.889058][ T3521] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.908066][T12647] netlink: 'syz.2.1875': attribute type 1 has an invalid length. [ 251.920777][ T3521] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 252.125143][T12660] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 252.169958][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1880'. [ 252.197929][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1880'. [ 252.607423][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 252.827242][T12710] netlink: 'syz.4.1894': attribute type 1 has an invalid length. [ 252.869159][T12710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.246049][T12742] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1900'. [ 254.061650][T12789] __nla_validate_parse: 2 callbacks suppressed [ 254.061672][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 254.065309][T12792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1910'. [ 254.106873][T12793] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 254.118199][T12794] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1911'. [ 254.288946][T12787] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 254.349497][T12787] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 254.380771][T12787] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 254.568500][T12818] tipc: Resetting bearer [ 254.679834][T12818] tipc: Resetting bearer [ 254.704944][ T59] tipc: Resetting bearer [ 254.773313][T12833] erspan0: entered promiscuous mode [ 255.579106][T12886] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 255.587056][T12886] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1942'. [ 255.740324][T12898] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1947'. [ 255.987252][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 256.032264][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 256.042717][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.049141][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.257388][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1955'. [ 256.700790][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 256.730065][T12969] vlan2: entered allmulticast mode [ 256.735561][T12969] hsr0: entered allmulticast mode [ 256.739642][T12972] sock: sock_timestamping_bind_phc: sock not bind to device [ 256.740687][T12969] hsr_slave_0: entered allmulticast mode [ 256.758005][T12969] hsr_slave_1: entered allmulticast mode [ 256.788810][T12964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1962'. [ 256.831975][T12972] netlink: 'syz.1.1965': attribute type 1 has an invalid length. [ 257.276201][T13002] netlink: 'syz.3.1976': attribute type 3 has an invalid length. [ 257.836210][T13040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.066283][T13053] x_tables: ip_tables: udp match: only valid for protocol 17 [ 258.117841][T13050] clip:clip_setentry: non-CLIP VCC [ 258.202545][T13055] vxcan1 speed is unknown, defaulting to 1000 [ 258.481646][T13068] `: (slave bond_slave_1): Releasing backup interface [ 258.952444][T13101] sctp: [Deprecated]: syz.3.2002 (pid 13101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.952444][T13101] Use struct sctp_sack_info instead [ 259.103980][T13111] netlink: 'syz.0.2005': attribute type 10 has an invalid length. [ 259.217429][T13117] __nla_validate_parse: 8 callbacks suppressed [ 259.217469][T13117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2007'. [ 259.252518][T13123] netlink: 'syz.3.2008': attribute type 2 has an invalid length. [ 259.283066][T13123] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2008'. [ 259.301218][T13123] nbd: must specify at least one socket [ 259.359988][T13127] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.2006'. [ 259.406046][T13126] tipc: Enabled bearer , priority 10 [ 259.599703][T13144] netlink: 'syz.0.2012': attribute type 8 has an invalid length. [ 259.661404][T13148] tipc: Enabling of bearer rejected, failed to enable media [ 259.762966][T13141] ip6erspan0: entered promiscuous mode [ 259.835841][T13141] ip6erspan0: entered allmulticast mode [ 259.886695][T13148] syzkaller0: entered promiscuous mode [ 259.912175][T13148] syzkaller0: entered allmulticast mode [ 259.975259][T13161] tipc: Enabling of bearer rejected, already enabled [ 259.998015][T13161] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 260.014734][T13161] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 260.062252][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2016'. [ 260.111878][T13161] tipc: Resetting bearer [ 260.155267][T13167] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 260.588732][T13196] netlink: 'syz.3.2026': attribute type 11 has an invalid length. [ 260.677704][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'. [ 260.879725][T13211] lo: entered promiscuous mode [ 260.898048][T13211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.993459][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2029'. [ 261.697788][T13259] tipc: Resetting bearer [ 261.730724][T13259] netlink: 'syz.4.2045': attribute type 4 has an invalid length. [ 261.812454][T13269] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2048'. [ 261.820529][T13272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2048'. [ 261.912318][T13259] tipc: Resetting bearer [ 262.017895][T13281] syzkaller0: left promiscuous mode [ 262.028958][T13281] syzkaller0: left allmulticast mode [ 262.042820][T13281] tipc: Resetting bearer [ 262.158381][T13286] netlink: 'syz.2.2054': attribute type 2 has an invalid length. [ 262.166745][T13286] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2054'. [ 262.192379][T13286] nbd: must specify at least one socket [ 262.540178][ T3521] tipc: Resetting bearer [ 262.556694][T13292] tipc: Resetting bearer [ 262.567134][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 262.598391][T13290] tipc: Resetting bearer [ 262.615309][ T1038] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.646207][ T1038] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.676777][T13313] openvswitch: netlink: Message has 2 unknown bytes. [ 262.686025][T13313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.767162][ T1038] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.788476][ T1038] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.547035][ T1102] tipc: Resetting bearer [ 263.890259][T13375] netlink: 'syz.3.2078': attribute type 4 has an invalid length. [ 263.960432][T13387] IPVS: set_ctl: invalid protocol: 58 172.30.0.3:20000 [ 264.126729][T13397] syzkaller0: entered promiscuous mode [ 264.156282][T13397] syzkaller0: entered allmulticast mode [ 264.178298][T13397] tipc: Resetting bearer [ 264.256133][T13408] netlink: 'syz.0.2089': attribute type 1 has an invalid length. [ 264.271121][T13406] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20002 [ 264.583475][T13426] vlan5: entered promiscuous mode [ 264.588585][T13426] bridge0: entered promiscuous mode [ 264.600956][T13429] __nla_validate_parse: 10 callbacks suppressed [ 264.600979][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 264.641926][T13426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2095'. [ 264.925187][T13444] lo: entered promiscuous mode [ 264.942745][T13444] netlink: 'syz.0.2101': attribute type 2 has an invalid length. [ 264.963300][T13444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.316474][T13463] vxcan1: tx address claim with dlc 0 [ 265.334102][T13469] netlink: 'syz.0.2109': attribute type 8 has an invalid length. [ 265.343536][T13470] netlink: 'syz.0.2109': attribute type 8 has an invalid length. [ 265.355288][T13466] syzkaller1: entered promiscuous mode [ 265.361751][T13466] syzkaller1: entered allmulticast mode [ 265.736307][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 265.770600][T13480] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2110'. [ 265.800139][T13480] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2110'. [ 266.286887][T13515] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2122'. [ 266.404210][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 266.605601][T13534] netlink: 'syz.0.2128': attribute type 10 has an invalid length. [ 266.819323][T13546] netlink: 'syz.2.2133': attribute type 10 has an invalid length. [ 267.054640][T13559] netlink: 'syz.1.2138': attribute type 10 has an invalid length. [ 267.180629][T13560] netlink: 'syz.3.2139': attribute type 21 has an invalid length. [ 267.212413][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2139'. [ 267.822505][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2156'. [ 268.022043][T13608] can: request_module (can-proto-0) failed. [ 268.190227][ T25] block nbd0: Possible stuck request ffff888025275080: control (read@0,1024B). Runtime 60 seconds [ 268.201101][ T25] block nbd0: Possible stuck request ffff888025275240: control (read@1024,1024B). Runtime 60 seconds [ 268.209693][T13631] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2164'. [ 268.212473][ T25] block nbd0: Possible stuck request ffff888025275400: control (read@2048,1024B). Runtime 60 seconds [ 268.232493][ T25] block nbd0: Possible stuck request ffff8880252755c0: control (read@3072,1024B). Runtime 60 seconds [ 268.246242][T13629] block nbd2: not configured, cannot reconfigure [ 268.260136][T13632] netlink: 'syz.2.2163': attribute type 4 has an invalid length. [ 268.309552][T13621] dvmrp0: entered allmulticast mode [ 268.351230][T13636] tc_dump_action: action bad kind [ 268.556530][T13648] netlink: 'syz.3.2167': attribute type 23 has an invalid length. [ 269.323906][T13688] validate_nla: 2 callbacks suppressed [ 269.323928][T13688] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 269.540410][T13697] netlink: 'syz.3.2181': attribute type 1 has an invalid length. [ 269.551793][T13697] netlink: 'syz.3.2181': attribute type 2 has an invalid length. [ 269.731491][T13713] __nla_validate_parse: 4 callbacks suppressed [ 269.731514][T13713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2185'. [ 269.970092][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2190'. [ 269.993289][T13726] syz_tun: left allmulticast mode [ 269.998389][T13726] syz_tun: left promiscuous mode [ 270.011037][T13726] bridge0: port 1(syz_tun) entered disabled state [ 270.068107][T13726] bond0: (slave bridge0): Releasing backup interface [ 270.082147][T13726] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 270.168998][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2195'. [ 270.441969][T13750] vlan2: entered promiscuous mode [ 270.578588][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 270.789681][T13772] netlink: 'syz.0.2206': attribute type 13 has an invalid length. [ 270.815936][T13772] netlink: 'syz.0.2206': attribute type 58 has an invalid length. [ 270.842147][T13772] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2206'. [ 270.883523][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2209'. [ 271.402154][T13799] netlink: 'syz.0.2213': attribute type 21 has an invalid length. [ 271.420811][T13799] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2213'. [ 271.438836][T13804] netlink: 'syz.4.2214': attribute type 21 has an invalid length. [ 271.447174][T13804] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.455129][T13804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.462520][T13804] IPv6: NLM_F_CREATE should be set when creating new route [ 271.469795][T13804] IPv6: NLM_F_CREATE should be set when creating new route [ 271.477108][T13804] IPv6: NLM_F_CREATE should be set when creating new route [ 271.514088][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2215'. [ 271.526262][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2215'. [ 271.697901][T13816] netlink: 'syz.0.2217': attribute type 39 has an invalid length. [ 271.765029][T13818] netlink: 'syz.1.2218': attribute type 11 has an invalid length. [ 271.794431][T13818] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2218'. [ 272.192296][T13835] C: renamed from team_slave_0 [ 272.221037][T13835] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 272.242106][T13835] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 272.259578][T13840] netlink: 'syz.4.2223': attribute type 1 has an invalid length. [ 272.498150][T13843] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 272.510529][T13843] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 272.579538][T13853] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 272.648922][T13846] gretap2: entered promiscuous mode [ 272.679823][T13846] bond5: (slave gretap2): making interface the new active one [ 272.705122][T13846] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 272.728885][T13840] macvlan2: entered promiscuous mode [ 272.734502][T13840] macvlan2: entered allmulticast mode [ 272.748543][T13840] bond5: entered promiscuous mode [ 272.757571][T13840] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.784557][T13840] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 272.798675][T13840] bond5: left promiscuous mode [ 273.414089][T13885] tipc: Resetting bearer [ 273.466600][T13884] tipc: Resetting bearer [ 273.491154][ T49] tipc: Resetting bearer [ 274.033033][T13919] tipc: Resetting bearer [ 274.828631][T13956] __nla_validate_parse: 11 callbacks suppressed [ 274.828652][T13956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2259'. [ 274.870624][T13918] tipc: Resetting bearer [ 275.261172][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'. [ 275.294995][T13977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.454757][T13985] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2270'. [ 275.634552][ T59] tipc: Resetting bearer [ 276.225127][T14018] team0: Port device geneve0 removed [ 276.251616][T14018] bond2: (slave veth3): Releasing backup interface [ 276.297362][T14018] bond0: (slave gretap2): Releasing active interface [ 276.326863][ T49] netdevsim netdevsim2 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.357472][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.411570][T14021] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 276.432796][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.457040][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.797205][T14047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2288'. [ 276.802769][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 276.816256][T14047] validate_nla: 2 callbacks suppressed [ 276.816277][T14047] netlink: 'syz.3.2288': attribute type 7 has an invalid length. [ 276.835208][T14047] netlink: 'syz.3.2288': attribute type 8 has an invalid length. [ 276.845004][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'. [ 276.852535][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 277.026711][T14059] dvmrp0: left allmulticast mode [ 277.117157][T14072] dvmrp0: entered allmulticast mode [ 277.138395][T14068] unknown channel width for channel at 909000KHz? [ 277.152231][T14068] unknown channel width for channel at 909000KHz? [ 277.539978][T14096] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 277.571172][T14094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.590383][T14096] bridge_slave_1: entered allmulticast mode [ 277.615371][T14103] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 277.667620][T14103] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2303'. [ 277.690879][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'. [ 277.729069][T14110] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2306'. [ 277.998790][T14131] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 278.042368][T14131] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 278.470072][T14163] vxcan1 speed is unknown, defaulting to 1000 [ 279.149370][T14195] sit0: entered promiscuous mode [ 279.156344][T14195] netlink: 'syz.2.2333': attribute type 1 has an invalid length. [ 279.272663][T14186] vxcan1 speed is unknown, defaulting to 1000 [ 279.560777][T14216] netlink: 'syz.3.2339': attribute type 22 has an invalid length. [ 279.629277][ T59] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.639839][T14216] netlink: 'syz.3.2339': attribute type 22 has an invalid length. [ 279.673219][ T59] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.684695][ T59] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.705032][ T59] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.957824][T14231] __nla_validate_parse: 14 callbacks suppressed [ 279.957845][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2345'. [ 279.978541][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2343'. [ 280.038060][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2345'. [ 280.055427][T14231] nftables ruleset with unbound set [ 280.065714][T14202] vxcan1 speed is unknown, defaulting to 1000 [ 280.158595][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 280.224003][T14242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2347'. [ 280.288787][T14246] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2348'. [ 280.611163][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 281.253732][T14286] netlink: 'syz.4.2359': attribute type 1 has an invalid length. [ 281.375416][T14294] veth0_to_bridge: entered promiscuous mode [ 281.408392][T14294] veth0_to_bridge: left promiscuous mode [ 281.475470][T14298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2362'. [ 282.501599][T14327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2370'. [ 282.510342][T14331] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2371'. [ 282.512701][T14329] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 283.038864][T14358] vxcan1 speed is unknown, defaulting to 1000 [ 283.987117][T14398] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20004 [ 284.136127][T14404] netlink: 'syz.1.2396': attribute type 21 has an invalid length. [ 284.216999][T14407] syzkaller1: entered promiscuous mode [ 284.222689][T14407] syzkaller1: entered allmulticast mode [ 284.294142][T14409] vxcan1: entered allmulticast mode [ 284.885134][T14437] netlink: 'syz.2.2407': attribute type 21 has an invalid length. [ 285.879673][T14485] tunl0: entered promiscuous mode [ 285.896896][T14485] netlink: 'syz.2.2419': attribute type 3 has an invalid length. [ 285.924608][T14485] __nla_validate_parse: 14 callbacks suppressed [ 285.924629][T14485] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2419'. [ 286.179614][T14502] gre0: entered promiscuous mode [ 286.880401][T14531] macvtap1: entered promiscuous mode [ 286.885853][T14531] vlan0: entered promiscuous mode [ 286.909892][T14531] macvtap1: entered allmulticast mode [ 286.936702][T14531] vlan0: entered allmulticast mode [ 286.941884][T14531] veth0_vlan: entered allmulticast mode [ 286.965552][T14538] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2432'. [ 286.994654][T14540] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2434'. [ 287.026453][T14531] netlink: 'syz.1.2430': attribute type 1 has an invalid length. [ 287.034901][T14541] macvtap2: entered promiscuous mode [ 287.060641][T14541] macvtap2: entered allmulticast mode [ 287.111680][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2435'. [ 287.190103][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 287.211347][T14551] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2436'. [ 287.215498][T14542] vxcan5: entered promiscuous mode [ 287.224768][T14547] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2435'. [ 287.229460][T14542] vxcan5: entered allmulticast mode [ 287.242728][T14547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2435'. [ 287.278742][T14547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2435'. [ 287.481023][T14557] vxcan1 speed is unknown, defaulting to 1000 [ 287.531757][T14564] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2438'. [ 288.103549][T14586] netlink: 'syz.1.2447': attribute type 1 has an invalid length. [ 288.200345][T14586] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.283810][T14586] bond6: (slave gretap2): making interface the new active one [ 288.303923][T14586] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 288.409702][T14600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.496430][T14600] netlink: 'syz.0.2448': attribute type 1 has an invalid length. [ 289.153089][T14627] nbd: must specify an index to disconnect [ 289.171482][T14629] tipc: Resetting bearer [ 289.308993][T14628] tipc: Resetting bearer [ 289.627091][T14650] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.634452][T14650] Unsupported ieee802154 address type: 0 [ 289.945321][T14658] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 290.192986][T14664] tipc: Resetting bearer [ 290.699227][T14663] tipc: Resetting bearer [ 291.215284][T14701] tipc: Resetting bearer [ 291.293674][T14701] __nla_validate_parse: 6 callbacks suppressed [ 291.293696][T14701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2480'. [ 291.328929][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2482'. [ 291.372234][T14697] tipc: Resetting bearer [ 291.629693][T14720] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2486'. [ 291.654516][T14720] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2486'. [ 291.674322][T14720] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2486'. [ 291.719370][ T8395] tipc: Resetting bearer [ 291.789871][T14725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2488'. [ 291.806895][T14725] IPVS: Error connecting to the multicast addr [ 292.006526][T14736] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2491'. [ 292.136359][T14730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2489'. [ 292.167714][T14730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2489'. [ 292.405059][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2496'. [ 292.644266][T14767] dvmrp0: entered allmulticast mode [ 292.874592][T14772] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 293.492949][T14797] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 293.958862][T14814] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 294.221940][T14831] netlink: 'syz.1.2519': attribute type 3 has an invalid length. [ 294.258327][T14831] netlink: 'syz.1.2519': attribute type 2 has an invalid length. [ 294.273492][T14835] netlink: 'syz.1.2519': attribute type 11 has an invalid length. [ 295.243056][T14872] ip6gre2: entered allmulticast mode [ 295.261350][T14872] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 295.297286][T14872] bond0: (slave ip6gre2): Error -95 calling set_mac_address [ 295.406706][T14878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.522697][T14887] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 295.686207][T14897] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 295.774527][ T5932] IPVS: starting estimator thread 0... [ 295.850360][T14908] netlink: 'syz.1.2546': attribute type 11 has an invalid length. [ 295.873918][T14906] IPVS: using max 23 ests per chain, 55200 per kthread [ 295.914684][T14911] netlink: 'syz.2.2549': attribute type 11 has an invalid length. [ 295.947181][T14911] netlink: 'syz.2.2549': attribute type 4 has an invalid length. [ 296.473273][T14936] __nla_validate_parse: 55 callbacks suppressed [ 296.473296][T14936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2557'. [ 296.534095][T14936] netlink: 'syz.2.2557': attribute type 21 has an invalid length. [ 296.547586][T14936] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.577982][T14936] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 298.266317][ T25] block nbd0: Possible stuck request ffff888025275080: control (read@0,1024B). Runtime 90 seconds [ 298.277158][ T25] block nbd0: Possible stuck request ffff888025275240: control (read@1024,1024B). Runtime 90 seconds [ 298.288380][ T25] block nbd0: Possible stuck request ffff888025275400: control (read@2048,1024B). Runtime 90 seconds [ 298.299440][ T25] block nbd0: Possible stuck request ffff8880252755c0: control (read@3072,1024B). Runtime 90 seconds [ 317.466997][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.473546][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.353038][ T25] block nbd0: Possible stuck request ffff888025275080: control (read@0,1024B). Runtime 120 seconds [ 328.364103][ T25] block nbd0: Possible stuck request ffff888025275240: control (read@1024,1024B). Runtime 120 seconds [ 328.375178][ T25] block nbd0: Possible stuck request ffff888025275400: control (read@2048,1024B). Runtime 120 seconds [ 328.386308][ T25] block nbd0: Possible stuck request ffff8880252755c0: control (read@3072,1024B). Runtime 120 seconds [ 358.432551][ T25] block nbd0: Possible stuck request ffff888025275080: control (read@0,1024B). Runtime 150 seconds [ 358.443518][ T25] block nbd0: Possible stuck request ffff888025275240: control (read@1024,1024B). Runtime 150 seconds [ 358.454905][ T25] block nbd0: Possible stuck request ffff888025275400: control (read@2048,1024B). Runtime 150 seconds [ 358.466018][ T25] block nbd0: Possible stuck request ffff8880252755c0: control (read@3072,1024B). Runtime 150 seconds [ 362.037429][T14962] openvswitch: netlink: EtherType 0 is less than min 600 [ 362.167948][T14969] netlink: 'syz.2.2566': attribute type 1 has an invalid length. [ 362.181139][T14971] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 362.357445][T14982] veth0_to_bridge: entered promiscuous mode [ 362.411010][T14984] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 [ 362.503915][T14988] : entered promiscuous mode [ 362.624719][T14995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2577'. [ 362.685636][T14998] lo: entered promiscuous mode [ 362.691798][T14998] tunl0: entered promiscuous mode [ 362.707716][T14998] gre0: entered promiscuous mode [ 362.725175][T14998] gretap0: entered promiscuous mode [ 362.743999][T14998] erspan0: left allmulticast mode [ 362.757128][T14998] ip_vti0: entered promiscuous mode [ 362.795416][T15002] tipc: Enabled bearer , priority 0 [ 362.804474][T15002] syzkaller0: entered promiscuous mode [ 362.810624][T15005] netlink: 'syz.2.2581': attribute type 1 has an invalid length. [ 362.811298][T15002] syzkaller0: entered allmulticast mode [ 362.837904][T15005] netlink: 'syz.2.2581': attribute type 11 has an invalid length. [ 362.848306][T15005] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2581'. [ 362.859228][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'. [ 362.875067][T15002] tipc: Resetting bearer [ 362.889334][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2582'. [ 362.949327][T15000] tipc: Resetting bearer [ 362.975620][T15000] tipc: Disabling bearer [ 363.016578][T15012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2584'. [ 363.096684][T14972] veth0_to_bridge: left promiscuous mode [ 363.168232][T15015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2585'. [ 363.193473][T15015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2585'. [ 363.976143][T15069] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 364.014201][T15073] netlink: 'syz.3.2599': attribute type 1 has an invalid length. [ 364.176103][T15077] netlink: 'syz.3.2600': attribute type 21 has an invalid length. [ 364.188212][T15077] netlink: 'syz.3.2600': attribute type 22 has an invalid length. [ 364.197369][T15077] netlink: 'syz.3.2600': attribute type 23 has an invalid length. [ 364.231694][T15077] netlink: 'syz.3.2600': attribute type 25 has an invalid length. [ 364.260182][T15077] netlink: 'syz.3.2600': attribute type 26 has an invalid length. [ 364.282873][T15077] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2600'. [ 364.360796][T15084] netlink: 'syz.1.2602': attribute type 11 has an invalid length. [ 364.391572][T15085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2602'. [ 364.685651][T15101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2605'. [ 364.951539][T15117] netlink: 'syz.1.2611': attribute type 8 has an invalid length. [ 365.581529][T15163] tipc: Resetting bearer [ 366.121047][T15197] tipc: Enabling of bearer rejected, failed to enable media [ 366.311331][T15209] veth1_to_bond: entered allmulticast mode [ 366.433298][T15208] veth1_to_bond: left allmulticast mode [ 367.058084][T15257] vlan2: entered allmulticast mode [ 367.077413][T15257] ip6gretap0: entered allmulticast mode [ 367.319820][T15269] tipc: Resetting bearer [ 367.414371][T15272] validate_nla: 4 callbacks suppressed [ 367.414395][T15272] netlink: 'syz.3.2655': attribute type 1 has an invalid length. [ 367.446042][T15268] tipc: Resetting bearer [ 367.540834][T15278] syzkaller1: left promiscuous mode [ 367.581042][T15278] syzkaller1: left allmulticast mode [ 367.643974][T15285] netlink: 'syz.4.2660': attribute type 1 has an invalid length. [ 367.653432][T15287] __nla_validate_parse: 14 callbacks suppressed [ 367.653458][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2659'. [ 367.669193][T15285] netlink: 'syz.4.2660': attribute type 4 has an invalid length. [ 367.677156][T15285] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2660'. [ 367.710414][T15285] bond0: entered promiscuous mode [ 367.734057][T15285] batadv0: entered promiscuous mode [ 367.746960][T15285] debugfs: 'hsr1' already exists in 'hsr' [ 367.768898][T15285] Cannot create hsr debugfs directory [ 367.779604][T15285] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 367.790129][T15285] hsr1: entered allmulticast mode [ 367.795462][T15285] bond0: entered allmulticast mode [ 367.800874][T15285] batadv0: entered allmulticast mode [ 367.837834][T15285] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 367.866990][T15285] bond0: left promiscuous mode [ 367.881042][T15285] batadv0: left promiscuous mode [ 367.957678][T15302] can: request_module (can-proto-0) failed. [ 368.176622][ T49] tipc: Resetting bearer [ 368.235433][T15317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2668'. [ 368.294981][T15317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2668'. [ 368.789381][T15343] netlink: 'syz.2.2678': attribute type 2 has an invalid length. [ 368.826621][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'. [ 369.060345][T15354] netlink: 'syz.0.2680': attribute type 16 has an invalid length. [ 369.069595][T15351] netlink: 'syz.2.2682': attribute type 1 has an invalid length. [ 369.074076][T15354] netlink: 'syz.0.2680': attribute type 17 has an invalid length. [ 369.090274][T15354] lo: left promiscuous mode [ 369.091646][T15352] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2681'. [ 369.099308][T15354] gre0: left promiscuous mode [ 369.115759][T15351] netlink: 'syz.2.2682': attribute type 2 has an invalid length. [ 369.122372][T15354] 0ªî{X¹¦: left allmulticast mode [ 369.130615][T15351] netlink: 'syz.2.2682': attribute type 1 has an invalid length. [ 369.177669][T15354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.197445][T15354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.216039][T15356] lo speed is unknown, defaulting to 1000 [ 369.247065][T15356] lo speed is unknown, defaulting to 1000 [ 369.254423][T15356] lo speed is unknown, defaulting to 1000 [ 369.470298][T15368] : renamed from veth0_vlan [ 369.523797][T15372] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2687'. [ 369.536001][T15370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2688'. [ 369.635393][T15373] netlink: 'syz.4.2688': attribute type 1 has an invalid length. [ 369.653956][T15373] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2688'. [ 369.717720][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2689'. [ 369.891915][T15356] infiniband syz0: set active [ 369.897822][ T8874] lo speed is unknown, defaulting to 1000 [ 369.932504][T15356] infiniband syz0: added lo [ 369.952272][T15356] syz0: rxe_create_cq: returned err = -12 [ 369.958401][T15356] infiniband syz0: Couldn't create ib_mad CQ [ 369.995819][T15356] infiniband syz0: Couldn't open port 1 [ 370.108655][T15356] RDS/IB: syz0: added [ 370.176079][T15356] smc: adding ib device syz0 with port count 1 [ 370.213116][T15356] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 370.228356][ T24] lo speed is unknown, defaulting to 1000 [ 370.237968][T15356] lo speed is unknown, defaulting to 1000 [ 370.695003][T15417] syzkaller1: entered promiscuous mode [ 370.721797][T15417] syzkaller1: entered allmulticast mode [ 371.014341][T15356] lo speed is unknown, defaulting to 1000 [ 371.209969][T15439] tipc: Resetting bearer [ 371.311694][T15442] tipc: Enabled bearer , priority 0 [ 371.330212][T15443] syzkaller0: entered promiscuous mode [ 371.337812][T15443] syzkaller0: entered allmulticast mode [ 371.528582][T15447] tipc: Resetting bearer [ 371.579284][T15447] tipc: Disabling bearer [ 371.602189][T15356] lo speed is unknown, defaulting to 1000 [ 371.609919][T15451] bridge_slave_0: entered promiscuous mode [ 371.850744][T15461] nbd: must specify a device to reconfigure [ 372.125493][T15356] lo speed is unknown, defaulting to 1000 [ 372.673558][T15503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.697736][T15356] lo speed is unknown, defaulting to 1000 [ 372.707566][T15507] __nla_validate_parse: 9 callbacks suppressed [ 372.707586][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2727'. [ 372.762694][T15508] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2727'. [ 373.254587][T15531] veth0: entered promiscuous mode [ 373.268857][T15531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2736'. [ 373.327805][T15531] veth0 (unregistering): left promiscuous mode [ 373.642689][T15558] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 373.993878][T15577] IPVS: Error connecting to the multicast addr [ 374.077052][T15579] validate_nla: 1 callbacks suppressed [ 374.077076][T15579] netlink: 'syz.2.2749': attribute type 12 has an invalid length. [ 374.093370][T15579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2749'. [ 374.169479][T15582] openvswitch: netlink: Flow key attr not present in new flow. [ 374.243969][T15586] netlink: 1220 bytes leftover after parsing attributes in process `syz.2.2749'. [ 374.272259][T15586] openvswitch: netlink: Flow key attr not present in new flow. [ 375.139029][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2755'. [ 375.148695][T15601] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 375.148726][T15601] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 375.251666][T15606] openvswitch: netlink: Flow key attr not present in new flow. [ 375.264669][T15610] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 375.298586][T15606] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 375.312687][ T8873] IPVS: starting estimator thread 0... [ 375.462413][T15612] IPVS: using max 28 ests per chain, 67200 per kthread [ 375.491765][T15626] netlink: 'syz.4.2762': attribute type 3 has an invalid length. [ 375.543648][T15626] netlink: 'syz.4.2762': attribute type 11 has an invalid length. [ 375.689501][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'. [ 375.737095][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'. [ 375.752622][T15640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2767'. [ 375.806586][T15634] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.952071][T15652] TCP: TCP_TX_DELAY enabled [ 376.039102][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2771'. [ 376.043455][T15657] netlink: 'syz.2.2769': attribute type 12 has an invalid length. [ 376.056717][T15656] dummy0: entered promiscuous mode [ 376.088608][T15656] dummy0: left promiscuous mode [ 376.188116][T15666] ip6_vti0: entered allmulticast mode [ 376.207010][T15664] netlink: 'syz.1.2774': attribute type 10 has an invalid length. [ 376.328779][T15672] netem: invalid attributes len -24 [ 376.334797][T15672] netem: change failed [ 376.810290][T15692] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 376.819820][T15690] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 376.820329][T15692] openvswitch: netlink: Message has 6332 unknown bytes. [ 376.828417][T15690] openvswitch: netlink: Message has 6332 unknown bytes. [ 376.923452][T15700] netlink: 'syz.0.2784': attribute type 1 has an invalid length. [ 376.949212][T15700] bond7: entered promiscuous mode [ 376.954714][T15700] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.992270][T15700] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.999438][T15700] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 377.010563][T15700] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 377.035453][T15700] bond7: (slave wireguard0): making interface the new active one [ 377.044576][T15700] wireguard0: entered promiscuous mode [ 377.051308][T15700] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 377.075226][T15708] netlink: 'syz.4.2786': attribute type 23 has an invalid length. [ 377.328108][T15721] netlink: 'syz.0.2790': attribute type 11 has an invalid length. [ 377.607491][T15730] tipc: Enabled bearer , priority 0 [ 377.737304][T15730] syzkaller0: entered promiscuous mode [ 377.747117][T15730] syzkaller0: entered allmulticast mode [ 377.785103][T15730] tipc: Resetting bearer [ 377.810235][T15729] tipc: Resetting bearer [ 378.905848][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.919232][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.636106][T15729] tipc: Disabling bearer [ 380.181415][T15787] siw: device registration error -23 [ 380.226287][T15788] siw: device registration error -23 [ 380.378327][T15795] __nla_validate_parse: 12 callbacks suppressed [ 380.378349][T15795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2813'. [ 380.886048][T15824] netlink: 'syz.2.2824': attribute type 10 has an invalid length. [ 380.897913][T15824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2824'. [ 380.957829][T15824] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 381.015404][T15832] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2826'. [ 381.080666][T15836] netlink: 'syz.2.2828': attribute type 1 has an invalid length. [ 381.281665][T15851] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2831'. [ 381.305429][T15851] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2831'. [ 381.489003][T15861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2835'. [ 381.639475][T15870] netlink: 'syz.1.2838': attribute type 1 has an invalid length. [ 381.655606][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2838'. [ 381.687141][T15875] vcan1: entered allmulticast mode [ 382.289534][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2847'. [ 382.502601][T15916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2853'. [ 382.566476][T15916] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2853'. [ 382.735844][T15934] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.768722][T15934] netlink: 'syz.0.2858': attribute type 10 has an invalid length. [ 383.070569][ T24] lo speed is unknown, defaulting to 1000 [ 383.097763][ T24] syz0: Port: 1 Link DOWN [ 383.125989][ T5932] lo speed is unknown, defaulting to 1000 [ 383.190592][T15956] tipc: Resetting bearer [ 383.210996][T15954] tipc: Resetting bearer [ 383.698594][ T59] tipc: Resetting bearer [ 383.760176][ T59] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.769771][ T59] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.782436][ T5932] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 384.198040][T16010] netlink: 'syz.1.2883': attribute type 1 has an invalid length. [ 384.393512][ T5932] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 384.528468][T16024] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.586323][T16026] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 384.822724][ T5932] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 384.920842][T16039] openvswitch: netlink: Missing key (keys=40, expected=100) [ 384.955131][T16043] netlink: 'syz.2.2897': attribute type 2 has an invalid length. [ 384.966248][T16043] netlink: 'syz.2.2897': attribute type 2 has an invalid length. [ 385.507606][T16068] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 385.523618][T16068] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 385.901516][T16096] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 386.395937][T16127] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 386.441243][T16128] netlink: 'syz.4.2928': attribute type 1 has an invalid length. [ 386.487985][T16128] __nla_validate_parse: 7 callbacks suppressed [ 386.488007][T16128] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2928'. [ 386.506951][T16134] bridge0: failed insert local address into bridge forwarding table [ 386.761234][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 386.795370][T16147] netlink: 'syz.1.2933': attribute type 5 has an invalid length. [ 386.812725][T16147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2933'. [ 386.830334][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'. [ 386.920116][T16147] geneve4: entered promiscuous mode [ 386.925502][T16147] geneve4: entered allmulticast mode [ 386.938914][ T3521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 386.999705][ T3521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 386.999994][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2936'. [ 387.022313][ T3521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 387.054436][ T3521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 387.242848][T16150] vxcan1 speed is unknown, defaulting to 1000 [ 387.555315][T16150] lo speed is unknown, defaulting to 1000 [ 387.622172][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 387.795269][T16167] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2940'. [ 388.502530][ T25] block nbd0: Possible stuck request ffff888025275080: control (read@0,1024B). Runtime 180 seconds [ 388.513473][ T25] block nbd0: Possible stuck request ffff888025275240: control (read@1024,1024B). Runtime 180 seconds [ 388.528260][ T25] block nbd0: Possible stuck request ffff888025275400: control (read@2048,1024B). Runtime 180 seconds [ 388.539463][ T25] block nbd0: Possible stuck request ffff8880252755c0: control (read@3072,1024B). Runtime 180 seconds [ 388.606132][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.621274][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.633472][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.643057][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.669794][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.683680][T16197] tipc: Resetting bearer [ 388.695114][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.696562][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2949'. [ 388.714029][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.721578][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.730951][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.739085][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.777775][T16203] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 388.897281][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2949'. [ 388.920015][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2949'. [ 389.027750][T16192] tipc: Resetting bearer [ 389.053487][T16198] vxcan1 speed is unknown, defaulting to 1000 [ 389.330627][T16212] bond6: entered promiscuous mode [ 389.343731][T16212] bond6: entered allmulticast mode [ 389.361701][T16212] 8021q: adding VLAN 0 to HW filter on device bond6 [ 389.424974][ T49] tipc: Resetting bearer [ 389.911601][ T8395] erspan0 (unregistering): left promiscuous mode [ 390.138320][ T8395] dvmrp0 (unregistering): left allmulticast mode [ 390.720146][T16251] netlink: 'syz.0.2962': attribute type 11 has an invalid length. [ 390.761722][ T8395] bond1 (unregistering): Released all slaves [ 390.799843][ T8395] bond2 (unregistering): Released all slaves [ 390.825515][ T5871] Bluetooth: hci0: command tx timeout [ 390.838044][ T8395] bond0 (unregistering): Released all slaves [ 390.902594][T16198] lo speed is unknown, defaulting to 1000 [ 390.903515][T16252] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 391.021213][ T8395] : left promiscuous mode [ 391.048655][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2962'. [ 391.304506][ T8395] tipc: Disabling bearer [ 391.325916][ T8395] tipc: Left network mode [ 391.362901][T16263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.597537][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'. [ 391.610991][T16275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2968'. [ 391.962553][T16291] sctp: [Deprecated]: syz.0.2973 (pid 16291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.962553][T16291] Use struct sctp_sack_info instead [ 392.673891][T16296] syzkaller0: refused to change device tx_queue_len [ 392.876121][T16309] netlink: 'syz.0.2974': attribute type 12 has an invalid length. [ 392.902172][ T5871] Bluetooth: hci0: command tx timeout [ 393.715910][T16331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2981'. [ 393.804282][T16198] chnl_net:caif_netlink_parms(): no params data found [ 393.872553][T16341] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 393.897356][T16341] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2984'. [ 393.996173][ T8395] batadv_slave_1: left promiscuous mode [ 394.039024][ T8395] hsr_slave_0: left promiscuous mode [ 394.072565][T16351] netlink: 'syz.4.2986': attribute type 2 has an invalid length. [ 394.089884][ T8395] hsr_slave_1: left promiscuous mode [ 394.525896][T16364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2991'. [ 394.726700][T16369] rdma_rxe: rxe_newlink: failed to add lo [ 394.902145][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.982316][ T5871] Bluetooth: hci0: command tx timeout [ 395.536825][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 395.838338][T16380] veth7: entered promiscuous mode [ 395.844717][T16380] veth7: entered allmulticast mode [ 396.015503][T16198] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.035670][T16198] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.051656][T16396] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3000'. [ 396.052310][T16198] bridge_slave_0: entered allmulticast mode [ 396.094380][T16198] bridge_slave_0: entered promiscuous mode [ 396.124492][T16401] netlink: 'syz.0.2999': attribute type 4 has an invalid length. [ 396.136741][T16198] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.147528][T16403] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3001'. [ 396.162458][T16399] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3001'. [ 396.169544][T16198] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.195171][T16198] bridge_slave_1: entered allmulticast mode [ 396.218384][T16198] bridge_slave_1: entered promiscuous mode [ 396.251326][T16394] netlink: 'syz.4.2998': attribute type 10 has an invalid length. [ 396.364047][T16411] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3003'. [ 396.380920][T16394] `: (slave geneve1): Enslaving as an active interface with an up link [ 396.574908][T16198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.618761][ T8395] IPVS: stop unused estimator thread 0... [ 396.637410][T16198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.743912][T16424] tipc: Enabling of bearer rejected, already enabled [ 396.763592][T16198] team0: Port device team_slave_0 added [ 396.769566][T16426] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3008'. [ 396.784023][T16198] team0: Port device team_slave_1 added [ 396.806433][T16424] sctp: [Deprecated]: syz.0.3007 (pid 16424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.806433][T16424] Use struct sctp_sack_info instead [ 396.905552][T16198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.913295][T16198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.939822][T16198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.956236][T16428] netlink: 'syz.4.3009': attribute type 1 has an invalid length. [ 396.956945][T16430] openvswitch: netlink: Missing key (keys=40, expected=80) [ 396.964291][T16198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.980157][T16198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.008711][T16198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.036064][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3010'. [ 397.042425][T16428] bond7: entered promiscuous mode [ 397.050442][T16428] 8021q: adding VLAN 0 to HW filter on device bond7 [ 397.062441][ T5871] Bluetooth: hci0: command tx timeout [ 397.094123][T16431] 8021q: adding VLAN 0 to HW filter on device bond8 [ 397.103828][T16431] bond7: (slave bond8): making interface the new active one [ 397.109758][T16430] netlink: 'syz.0.3010': attribute type 1 has an invalid length. [ 397.111352][T16431] bond8: entered promiscuous mode [ 397.126185][T16431] bond7: (slave bond8): Enslaving as an active interface with an up link [ 397.127941][T16430] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3010'. [ 397.270163][T16198] hsr_slave_0: entered promiscuous mode [ 397.277939][T16198] hsr_slave_1: entered promiscuous mode [ 397.354533][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 397.366691][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3012'. [ 397.504219][T16447] netlink: 'syz.4.3016': attribute type 1 has an invalid length. [ 397.531426][T16447] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3016'. [ 397.544679][T16448] netlink: 'syz.3.3015': attribute type 1 has an invalid length. [ 397.557768][T16448] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3015'. [ 397.574332][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3015'. [ 397.605761][T16450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3015'. [ 397.617768][T16450] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3015'. [ 397.629047][T16450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.629470][T16440] tipc: Enabling of bearer rejected, already enabled [ 397.663688][ T8395] tipc: Resetting bearer [ 397.693578][T16443] tipc: Enabling of bearer rejected, failed to enable media [ 398.061059][T16473] openvswitch: netlink: Key type 85 is out of range max 32 [ 398.078287][T16471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.519813][T16488] tipc: Enabling of bearer rejected, failed to enable media [ 398.548834][T16488] netlink: 'syz.0.3031': attribute type 10 has an invalid length. [ 398.604366][T16488] bond0: (slave wlan1): Opening slave failed [ 398.808271][T16504] syz.4.3036: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 398.837351][T16198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 398.846624][T16504] CPU: 1 UID: 0 PID: 16504 Comm: syz.4.3036 Not tainted syzkaller #0 PREEMPT(full) [ 398.846656][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.846669][T16504] Call Trace: [ 398.846677][T16504] [ 398.846686][T16504] dump_stack_lvl+0x189/0x250 [ 398.846723][T16504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.846748][T16504] ? __pfx__printk+0x10/0x10 [ 398.846778][T16504] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 398.846803][T16504] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 398.846829][T16504] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 398.846853][T16504] warn_alloc+0x214/0x310 [ 398.846885][T16504] ? stack_depot_save_flags+0x40/0x860 [ 398.846916][T16504] ? __pfx_warn_alloc+0x10/0x10 [ 398.846947][T16504] ? kasan_save_track+0x4f/0x80 [ 398.846973][T16504] ? xskq_create+0x56/0x170 [ 398.846998][T16504] ? xsk_init_queue+0xb0/0x110 [ 398.847027][T16504] ? xsk_setsockopt+0x4dc/0x8d0 [ 398.847047][T16504] ? do_sock_setsockopt+0x17c/0x1b0 [ 398.847065][T16504] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 398.847083][T16504] ? do_syscall_64+0xfa/0x3b0 [ 398.847098][T16504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.847130][T16504] __vmalloc_node_range_noprof+0x125/0x12f0 [ 398.847215][T16504] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 398.847254][T16504] ? __kasan_kmalloc+0x93/0xb0 [ 398.847285][T16504] vmalloc_user_noprof+0xad/0xf0 [ 398.847315][T16504] ? xskq_create+0xbf/0x170 [ 398.847344][T16504] xskq_create+0xbf/0x170 [ 398.847377][T16504] xsk_init_queue+0xb0/0x110 [ 398.847408][T16504] xsk_setsockopt+0x4dc/0x8d0 [ 398.847433][T16504] ? __pfx_xsk_setsockopt+0x10/0x10 [ 398.847458][T16504] ? __pfx_aa_sk_perm+0x10/0x10 [ 398.847491][T16504] ? aa_sock_opt_perm+0xff/0x1b0 [ 398.847514][T16504] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 398.847533][T16504] ? __pfx_xsk_setsockopt+0x10/0x10 [ 398.847562][T16504] do_sock_setsockopt+0x17c/0x1b0 [ 398.847591][T16504] __x64_sys_setsockopt+0x13f/0x1b0 [ 398.847619][T16504] do_syscall_64+0xfa/0x3b0 [ 398.847636][T16504] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.847665][T16504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.847683][T16504] ? clear_bhb_loop+0x60/0xb0 [ 398.847706][T16504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.847724][T16504] RIP: 0033:0x7f0af6b8ebe9 [ 398.847742][T16504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.847758][T16504] RSP: 002b:00007f0af7a99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 398.847781][T16504] RAX: ffffffffffffffda RBX: 00007f0af6dc5fa0 RCX: 00007f0af6b8ebe9 [ 398.847796][T16504] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 398.847808][T16504] RBP: 00007f0af6c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 398.847820][T16504] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.847833][T16504] R13: 00007f0af6dc6038 R14: 00007f0af6dc5fa0 R15: 00007fff687fef38 [ 398.847869][T16504] [ 398.847992][T16504] Mem-Info: [ 398.908711][T16508] netlink: 'syz.0.3038': attribute type 21 has an invalid length. [ 398.915682][T16504] active_anon:6093 inactive_anon:0 isolated_anon:0 [ 398.915682][T16504] active_file:3088 inactive_file:39951 isolated_file:0 [ 398.915682][T16504] unevictable:768 dirty:67 writeback:0 [ 398.915682][T16504] slab_reclaimable:12857 slab_unreclaimable:108238 [ 398.915682][T16504] mapped:29246 shmem:1361 pagetables:1200 [ 398.915682][T16504] sec_pagetables:0 bounce:0 [ 398.915682][T16504] kernel_misc_reclaimable:0 [ 398.915682][T16504] free:1315685 free_pcp:17027 free_cma:0 [ 398.999267][T16508] netlink: 'syz.0.3038': attribute type 6 has an invalid length. [ 399.002201][T16504] Node 0 active_anon:24372kB inactive_anon:0kB active_file:12352kB inactive_file:159596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116984kB dirty:268kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13448kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 399.121350][T16198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 399.259776][T16504] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 399.291069][T16504] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 399.331255][T16504] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 399.338816][T16504] Node 0 DMA32 free:1363952kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24176kB inactive_anon:0kB active_file:12352kB inactive_file:158016kB unevictable:1536kB writepending:276kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:43100kB local_pcp:22056kB free_cma:0kB [ 399.359476][T16198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 399.402363][T16504] lowmem_reserve[]: 0 0 1 1 1 [ 399.412036][T16504] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 399.442983][T16504] lowmem_reserve[]: 0 0 0 0 0 [ 399.447764][T16504] Node 1 Normal free:3885140kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23008kB local_pcp:9728kB free_cma:0kB [ 399.483711][T16504] lowmem_reserve[]: 0 0 0 0 0 [ 399.488503][T16504] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 399.495803][T16198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 399.510262][T16504] Node 0 DMA32: 1324*4kB (UME) 1213*8kB (UME) 450*16kB (UME) 165*32kB (UM) 284*64kB (UM) 462*128kB (UM) 344*256kB (UM) 287*512kB (UME) 182*1024kB (UME) 11*2048kB (UME) 199*4096kB (UM) = 1363800kB [ 399.541460][T16504] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 399.554515][T16504] Node 1 Normal: 237*4kB (UE) 60*8kB (UME) 52*16kB (UME) 118*32kB (UME) 21*64kB (UME) 11*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3885140kB [ 399.573196][T16504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 399.583279][T16504] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 399.593239][T16504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 399.603217][T16504] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 399.612730][T16504] 44397 total pagecache pages [ 399.617426][T16504] 0 pages in swap cache [ 399.621601][T16504] Free swap = 124996kB [ 399.626284][T16504] Total swap = 124996kB [ 399.630461][T16504] 2097051 pages RAM [ 399.651220][T16504] 0 pages HighMem/MovableOnly [ 399.666881][T16504] 425667 pages reserved [ 399.675454][T16504] 0 pages cma reserved [ 399.938763][T16198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.008855][T16198] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.076560][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.083792][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.091042][T16561] nbd: must specify a size in bytes for the device [ 400.129309][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.136582][ T8395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.158771][T16565] netlink: 'syz.3.3049': attribute type 1 has an invalid length. [ 400.174040][T16563] netlink: 'syz.3.3049': attribute type 1 has an invalid length. [ 400.284944][T16561] vxcan1 speed is unknown, defaulting to 1000 [ 400.491227][T16574] netlink: 'syz.3.3052': attribute type 13 has an invalid length. [ 400.576970][T16574] lo: entered allmulticast mode [ 400.587537][T16574] tunl0: entered promiscuous mode [ 400.617721][T16574] tunl0: entered allmulticast mode [ 400.645623][T16574] gre0: entered promiscuous mode [ 400.660674][T16574] gre0: entered allmulticast mode [ 400.681768][T16574] gretap0: entered promiscuous mode [ 400.699678][T16574] gretap0: entered allmulticast mode [ 400.710924][T16574] gretap0: refused to change device tx_queue_len [ 400.717536][T16574] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 400.856312][T16561] lo speed is unknown, defaulting to 1000 [ 401.057516][T16590] tipc: Enabled bearer , priority 0 [ 401.079618][T16590] tipc: Resetting bearer [ 401.171866][T16198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.310465][T16198] veth0_vlan: entered promiscuous mode [ 401.347780][T16198] veth1_vlan: entered promiscuous mode [ 401.474055][T16198] veth0_macvtap: entered promiscuous mode [ 401.516837][T16198] veth1_macvtap: entered promiscuous mode [ 401.690340][T16198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.698018][T16610] netlink: 'syz.4.3060': attribute type 7 has an invalid length. [ 401.790977][T16610] : entered promiscuous mode [ 401.811619][T16198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.830128][T16615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.860544][ T8395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.887798][ T8395] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.940421][ T8395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.991908][ T8395] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.337721][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.349585][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.470166][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.497775][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.541137][T16637] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 402.541915][T16636] Bluetooth: MGMT ver 1.23 [ 402.884562][T16651] tipc: Resetting bearer [ 402.983019][T16651] tipc: Resetting bearer [ 403.036080][ T3502] tipc: Resetting bearer [ 403.186334][T16663] __nla_validate_parse: 14 callbacks suppressed [ 403.186355][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 403.228732][T16663] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 403.293537][T16663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.429469][T16674] openvswitch: netlink: Message has 16 unknown bytes. [ 403.796867][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 403.811255][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3078'. [ 403.823953][T16688] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.846532][T16688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.859204][T16688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.883984][T16688] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.900419][T16688] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 404.027186][T16684] vxcan1 speed is unknown, defaulting to 1000 [ 404.098538][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 404.244977][T16708] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3085'. [ 404.297605][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 404.361276][T16708] tipc: Resetting bearer [ 404.405166][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 404.556229][T16707] tipc: Resetting bearer [ 404.639807][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3089'. [ 404.709880][T16684] lo speed is unknown, defaulting to 1000 [ 405.361480][ T1102] bond6 (unregistering): (slave gretap2): Releasing active interface [ 405.847487][ T1102] ` (unregistering): Released all slaves [ 405.947332][ T5871] Bluetooth: hci4: command tx timeout [ 405.970421][ T1102] bond1 (unregistering): Released all slaves [ 405.984932][ T1102] bond2 (unregistering): Released all slaves [ 406.105124][ T1102] bond3 (unregistering): Released all slaves [ 406.119865][ T1102] bond4 (unregistering): Released all slaves [ 406.134505][ T1102] bond5 (unregistering): Released all slaves [ 406.148491][ T1102] bond0 (unregistering): Released all slaves [ 406.285006][ T1102] bond6 (unregistering): Released all slaves [ 406.461770][T16745] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 406.561447][T16730] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.569428][T16730] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.726386][T16730] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 406.746198][ T1038] tipc: Resetting bearer [ 406.768952][ T1102] tipc: Disabling bearer [ 406.785861][ T1102] tipc: Left network mode [ 406.891911][ T1102] IPVS: stopping master sync thread 6855 ... [ 406.914620][T16762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3101'. [ 406.924817][ T1102] IPVS: stopping backup sync thread 15069 ... [ 406.944802][T16764] netlink: 'syz.0.3102': attribute type 1 has an invalid length. [ 406.965854][T16764] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3102'. [ 406.975363][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3101'. [ 407.118359][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 407.138088][T16773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3103'. [ 407.186172][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3104'. [ 407.474509][T16793] netlink: 'syz.0.3108': attribute type 4 has an invalid length. [ 407.628042][T16684] chnl_net:caif_netlink_parms(): no params data found [ 408.022889][ T5871] Bluetooth: hci4: command tx timeout [ 408.130579][T16801] pim6reg1: entered promiscuous mode [ 408.148965][T16801] pim6reg1: entered allmulticast mode [ 408.227159][T16811] netlink: 'syz.4.3112': attribute type 2 has an invalid length. [ 408.270823][T16817] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3114'. [ 408.438961][ T1102] hsr_slave_0: left promiscuous mode [ 408.457521][ T1102] hsr_slave_1: left promiscuous mode [ 408.483404][ T1102] vlan0: left allmulticast mode [ 408.488430][ T1102] : left allmulticast mode [ 408.508664][ T1102] vlan0: left promiscuous mode [ 408.604061][T16828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3116'. [ 408.613136][T16829] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3117'. [ 408.655784][T16831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3118'. [ 408.677617][T16834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3117'. [ 408.710855][T16835] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3118'. [ 409.690004][T16837] netlink: 'syz.4.3117': attribute type 1 has an invalid length. [ 409.747754][T16684] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.764387][T16684] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.771697][T16684] bridge_slave_0: entered allmulticast mode [ 409.780350][T16684] bridge_slave_0: entered promiscuous mode [ 409.790067][T16684] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.800094][T16684] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.817571][T16684] bridge_slave_1: entered allmulticast mode [ 409.840437][T16684] bridge_slave_1: entered promiscuous mode [ 410.061899][T16684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.111903][ T5871] Bluetooth: hci4: command tx timeout [ 410.129596][T16684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.262188][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 410.331649][T16684] team0: Port device team_slave_0 added [ 410.367325][T16684] team0: Port device team_slave_1 added [ 410.461255][T16684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.479844][T16684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.541804][T16866] netlink: 'syz.0.3125': attribute type 1 has an invalid length. [ 410.556191][T16684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.576477][T16684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.597811][T16684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.636274][T16684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.684221][ T1102] IPVS: stop unused estimator thread 0... [ 411.204815][T16684] hsr_slave_0: entered promiscuous mode [ 411.211777][T16684] hsr_slave_1: entered promiscuous mode [ 411.225404][T16684] debugfs: 'hsr0' already exists in 'hsr' [ 411.231590][T16684] Cannot create hsr debugfs directory [ 411.277006][T16885] tipc: Started in network mode [ 411.282513][T16885] tipc: Node identity c29c51d5aa, cluster identity 4711 [ 411.289668][T16885] tipc: Enabled bearer , priority 0 [ 411.369583][T16889] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3133'. [ 411.438088][T16886] syzkaller0: entered promiscuous mode [ 411.460997][T16886] syzkaller0: entered allmulticast mode [ 411.511678][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3136'. [ 411.707220][T16885] tipc: Resetting bearer [ 411.741701][T16885] tipc: Disabling bearer [ 411.898410][T16914] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3138'. [ 412.014473][T16914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3138'. [ 412.183296][ T5871] Bluetooth: hci4: command tx timeout [ 412.189537][T16927] netlink: 'syz.2.3143': attribute type 10 has an invalid length. [ 412.239456][T16927] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.278939][T16927] bond0: (slave team0): Enslaving as an active interface with an up link [ 412.402846][T16938] netlink: 'syz.4.3144': attribute type 9 has an invalid length. [ 412.542358][ T1102] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.583572][ T1102] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.688934][ T1102] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.722237][ T1102] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.939617][T16684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 412.975778][T16684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.031397][T16684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.067986][T16684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.312633][T16684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.365192][T16993] __nla_validate_parse: 10 callbacks suppressed [ 413.365214][T16993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3161'. [ 413.365542][T16684] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.379449][T16993] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3161'. [ 413.417639][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.424885][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.438417][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3161'. [ 413.480259][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.487513][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.609951][T17002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3164'. [ 413.909339][T17024] sctp: [Deprecated]: syz.0.3168 (pid 17024) Use of int in maxseg socket option. [ 413.909339][T17024] Use struct sctp_assoc_value instead [ 413.994187][T17030] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 414.070123][T16684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.127152][T16684] veth0_vlan: entered promiscuous mode [ 414.140189][T16684] veth1_vlan: entered promiscuous mode [ 414.173790][T17034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3170'. [ 414.186510][T16684] veth0_macvtap: entered promiscuous mode [ 414.201067][T16684] veth1_macvtap: entered promiscuous mode [ 414.224749][T16684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.241051][T16684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.260165][ T1115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.270085][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.283681][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.294261][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.485378][T17007] tipc: New replicast peer: 255.255.255.255 [ 414.507539][T17007] tipc: Enabled bearer , priority 10 [ 414.638942][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.662861][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.711542][T17044] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3174'. [ 414.762792][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.772466][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.784004][T17045] netlink: 'syz.4.3173': attribute type 1 has an invalid length. [ 414.807969][T17045] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3173'. [ 414.852215][T17045] netlink: 'syz.4.3173': attribute type 1 has an invalid length. [ 414.882059][T17045] netlink: 'syz.4.3173': attribute type 2 has an invalid length. [ 415.061766][T17058] netlink: 'syz.1.3068': attribute type 1 has an invalid length. [ 415.100223][T17058] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3068'. [ 415.404695][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'. [ 415.501718][T17067] syz_tun: entered promiscuous mode [ 415.541455][T17067] batadv_slave_0: entered promiscuous mode [ 415.582879][T17067] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 415.612250][T17067] hsr1: entered allmulticast mode [ 415.617610][T17067] syz_tun: entered allmulticast mode [ 415.637946][T17067] batadv_slave_0: entered allmulticast mode [ 415.813091][T17075] vxcan1 speed is unknown, defaulting to 1000 [ 416.192781][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.205718][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.215258][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.225656][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.236884][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.481772][T17097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.489151][T17097] IPv6: NLM_F_CREATE should be set when creating new route [ 416.496455][T17097] IPv6: NLM_F_CREATE should be set when creating new route [ 416.542406][T17097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.550005][T17098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.576839][T17075] lo speed is unknown, defaulting to 1000 [ 416.589797][T17093] vxcan1 speed is unknown, defaulting to 1000 [ 416.607634][T17098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.338250][T17093] lo speed is unknown, defaulting to 1000 [ 417.819189][T17140] sctp: [Deprecated]: syz.0.3201 (pid 17140) Use of int in max_burst socket option. [ 417.819189][T17140] Use struct sctp_assoc_value instead [ 417.852290][T17141] netlink: 'syz.1.3200': attribute type 11 has an invalid length. [ 417.890916][T17141] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3200'. [ 418.269128][T16688] Bluetooth: hci2: command tx timeout [ 418.579766][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'. [ 418.595730][ T25] block nbd0: Possible stuck request ffff888025275080: control (read@0,1024B). Runtime 210 seconds [ 418.606708][ T25] block nbd0: Possible stuck request ffff888025275240: control (read@1024,1024B). Runtime 210 seconds [ 418.618023][ T25] block nbd0: Possible stuck request ffff888025275400: control (read@2048,1024B). Runtime 210 seconds [ 418.629183][ T25] block nbd0: Possible stuck request ffff8880252755c0: control (read@3072,1024B). Runtime 210 seconds [ 418.707517][T17093] chnl_net:caif_netlink_parms(): no params data found [ 419.162333][T17093] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.172702][T17093] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.180597][T17093] bridge_slave_0: entered allmulticast mode [ 419.189982][T17093] bridge_slave_0: entered promiscuous mode [ 419.224750][T17093] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.247056][T17093] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.264761][T17093] bridge_slave_1: entered allmulticast mode [ 419.274742][T17093] bridge_slave_1: entered promiscuous mode [ 419.422899][T17093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.461813][T17093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.533868][T17200] netlink: 'syz.0.3218': attribute type 30 has an invalid length. [ 419.708529][T17093] team0: Port device team_slave_0 added [ 419.739310][T17093] team0: Port device team_slave_1 added [ 419.966415][T17093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.981593][T17093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.039089][T17093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.090770][T17093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.116386][T17093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.156431][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 420.175390][T17093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.197885][T17233] : renamed from hsr0 (while UP) [ 420.236282][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3226'. [ 420.269729][T17235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3226'. [ 420.343603][T16688] Bluetooth: hci2: command tx timeout [ 420.378753][T17093] hsr_slave_0: entered promiscuous mode [ 420.418493][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 420.427922][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3230'. [ 420.443441][T17093] hsr_slave_1: entered promiscuous mode [ 420.465467][T17245] netlink: 'syz.1.3230': attribute type 11 has an invalid length. [ 420.605666][T17260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3230'. [ 420.788933][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.796954][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.945467][T17254] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 421.054983][T17265] syzkaller1: entered promiscuous mode [ 421.060731][T17265] syzkaller1: entered allmulticast mode [ 421.068396][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.095035][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.125430][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.167887][ T3502] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.487769][T17093] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.500654][T17093] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 421.530369][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3241'. [ 421.597176][T17093] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.622563][T17093] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 421.716705][T17299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3242'. [ 421.754236][T17093] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.777862][T17093] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 421.788669][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3244'. [ 421.886336][T17307] bridge7: entered promiscuous mode [ 421.899876][T17307] bridge7: entered allmulticast mode [ 421.919287][T17309] netlink: 'syz.4.3246': attribute type 7 has an invalid length. [ 421.929703][T17093] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.941016][T17093] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 422.423722][T16688] Bluetooth: hci2: command tx timeout [ 422.545667][T17093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 422.601252][T17093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.697688][T17093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.755361][T17093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.220316][T17093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.351554][T17093] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.417354][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.424792][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.479866][T17340] netlink: 'syz.4.3256': attribute type 2 has an invalid length. [ 423.493595][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.500792][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.743831][T17384] __nla_validate_parse: 2 callbacks suppressed [ 423.743855][T17384] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3264'. [ 423.874150][T17387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3265'. [ 424.194692][T17401] tipc: Resetting bearer [ 424.207142][T17401] tipc: Enabling of bearer rejected, already enabled [ 424.233155][T17398] team0: No ports can be present during mode change [ 424.258187][T17400] team0: No ports can be present during mode change [ 424.396543][T17093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.488341][T17410] netlink: 'syz.1.3270': attribute type 1 has an invalid length. [ 424.502366][T16688] Bluetooth: hci2: command tx timeout [ 424.559924][T17093] veth0_vlan: entered promiscuous mode [ 424.583381][T17093] veth1_vlan: entered promiscuous mode [ 424.774294][T17093] veth0_macvtap: entered promiscuous mode [ 424.812513][T17093] veth1_macvtap: entered promiscuous mode [ 424.873893][T17093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.905740][T17093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.948129][ T3521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.962907][T17422] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3275'. [ 424.964208][T17424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3276'. [ 424.981367][ T3521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.004157][ T3521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.018634][ T3521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.050454][T17426] sctp: [Deprecated]: syz.2.3277 (pid 17426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.050454][T17426] Use struct sctp_sack_info instead [ 425.081039][T17427] sctp: [Deprecated]: syz.2.3277 (pid 17427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.081039][T17427] Use struct sctp_sack_info instead [ 425.179169][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3278'. [ 425.268158][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.288257][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.403929][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.424085][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.469102][T17439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3281'. [ 425.488957][T17441] smc: net device erspan0 applied user defined pnetid SYZ0 [ 425.560376][T17442] [ 425.562771][T17442] ====================================================== [ 425.569809][T17442] WARNING: possible circular locking dependency detected [ 425.576878][T17442] syzkaller #0 Not tainted [ 425.581298][T17442] ------------------------------------------------------ [ 425.588310][T17442] syz.2.3281/17442 is trying to acquire lock: [ 425.594427][T17442] ffffffff8f68e918 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 425.603954][T17442] [ 425.603954][T17442] but task is already holding lock: [ 425.611316][T17442] ffff888032136a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 425.620716][T17442] [ 425.620716][T17442] which lock already depends on the new lock. [ 425.620716][T17442] [ 425.631114][T17442] [ 425.631114][T17442] the existing dependency chain (in reverse order) is: [ 425.640131][T17442] [ 425.640131][T17442] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 425.648133][T17442] lock_acquire+0x120/0x360 [ 425.653190][T17442] _raw_spin_lock_bh+0x36/0x50 [ 425.658755][T17442] nr_rt_device_down+0x12a/0x720 [ 425.664219][T17442] nr_device_event+0x137/0x150 [ 425.669507][T17442] notifier_call_chain+0x1b3/0x3e0 [ 425.675139][T17442] __dev_notify_flags+0x18d/0x2e0 [ 425.680685][T17442] netif_change_flags+0xe8/0x1a0 [ 425.686140][T17442] dev_change_flags+0x130/0x260 [ 425.691510][T17442] dev_ioctl+0x7b4/0x1150 [ 425.696362][T17442] sock_do_ioctl+0x22c/0x300 [ 425.701527][T17442] sock_ioctl+0x576/0x790 [ 425.706472][T17442] __se_sys_ioctl+0xfc/0x170 [ 425.711587][T17442] do_syscall_64+0xfa/0x3b0 [ 425.716618][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.723035][T17442] [ 425.723035][T17442] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 425.730862][T17442] lock_acquire+0x120/0x360 [ 425.735894][T17442] _raw_spin_lock_bh+0x36/0x50 [ 425.741190][T17442] nr_rt_device_down+0xa9/0x720 [ 425.746578][T17442] nr_device_event+0x137/0x150 [ 425.751864][T17442] notifier_call_chain+0x1b3/0x3e0 [ 425.757500][T17442] __dev_notify_flags+0x18d/0x2e0 [ 425.763043][T17442] netif_change_flags+0xe8/0x1a0 [ 425.768503][T17442] dev_change_flags+0x130/0x260 [ 425.773872][T17442] dev_ioctl+0x7b4/0x1150 [ 425.778731][T17442] sock_do_ioctl+0x22c/0x300 [ 425.783857][T17442] sock_ioctl+0x576/0x790 [ 425.788711][T17442] __se_sys_ioctl+0xfc/0x170 [ 425.793827][T17442] do_syscall_64+0xfa/0x3b0 [ 425.798851][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.805441][T17442] [ 425.805441][T17442] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 425.813355][T17442] validate_chain+0xb9b/0x2140 [ 425.818659][T17442] __lock_acquire+0xab9/0xd20 [ 425.823860][T17442] lock_acquire+0x120/0x360 [ 425.828887][T17442] _raw_spin_lock_bh+0x36/0x50 [ 425.834175][T17442] nr_remove_neigh+0x25/0xe0 [ 425.839296][T17442] nr_add_node+0x1d9f/0x2570 [ 425.844407][T17442] nr_rt_ioctl+0xc12/0xd50 [ 425.849454][T17442] sock_do_ioctl+0xd9/0x300 [ 425.854479][T17442] sock_ioctl+0x576/0x790 [ 425.859765][T17442] __se_sys_ioctl+0xfc/0x170 [ 425.864896][T17442] do_syscall_64+0xfa/0x3b0 [ 425.869921][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.876344][T17442] [ 425.876344][T17442] other info that might help us debug this: [ 425.876344][T17442] [ 425.886568][T17442] Chain exists of: [ 425.886568][T17442] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 425.886568][T17442] [ 425.900393][T17442] Possible unsafe locking scenario: [ 425.900393][T17442] [ 425.907844][T17442] CPU0 CPU1 [ 425.913238][T17442] ---- ---- [ 425.918624][T17442] lock(&nr_node->node_lock); [ 425.923391][T17442] lock(nr_node_list_lock); [ 425.930500][T17442] lock(&nr_node->node_lock); [ 425.937781][T17442] lock(nr_neigh_list_lock); [ 425.942459][T17442] [ 425.942459][T17442] *** DEADLOCK *** [ 425.942459][T17442] [ 425.950597][T17442] 1 lock held by syz.2.3281/17442: [ 425.955786][T17442] #0: ffff888032136a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 425.965543][T17442] [ 425.965543][T17442] stack backtrace: [ 425.971432][T17442] CPU: 0 UID: 0 PID: 17442 Comm: syz.2.3281 Not tainted syzkaller #0 PREEMPT(full) [ 425.971452][T17442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.971462][T17442] Call Trace: [ 425.971469][T17442] [ 425.971475][T17442] dump_stack_lvl+0x189/0x250 [ 425.971498][T17442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.971515][T17442] ? __pfx__printk+0x10/0x10 [ 425.971534][T17442] ? stack_trace_save+0x9c/0xe0 [ 425.971557][T17442] print_circular_bug+0x2ee/0x310 [ 425.971576][T17442] check_noncircular+0x134/0x160 [ 425.971594][T17442] validate_chain+0xb9b/0x2140 [ 425.971620][T17442] __lock_acquire+0xab9/0xd20 [ 425.971643][T17442] ? nr_remove_neigh+0x25/0xe0 [ 425.971664][T17442] lock_acquire+0x120/0x360 [ 425.971684][T17442] ? nr_remove_neigh+0x25/0xe0 [ 425.971705][T17442] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 425.971723][T17442] ? nr_remove_neigh+0x25/0xe0 [ 425.971741][T17442] _raw_spin_lock_bh+0x36/0x50 [ 425.971761][T17442] ? nr_remove_neigh+0x25/0xe0 [ 425.971779][T17442] nr_remove_neigh+0x25/0xe0 [ 425.971798][T17442] nr_add_node+0x1d9f/0x2570 [ 425.971818][T17442] ? __asan_memcpy+0x40/0x70 [ 425.971834][T17442] ? nr_call_to_digi+0x126/0x1b0 [ 425.971853][T17442] nr_rt_ioctl+0xc12/0xd50 [ 425.971874][T17442] ? kasan_quarantine_put+0xdd/0x220 [ 425.971891][T17442] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 425.971912][T17442] ? apparmor_capable+0x137/0x1b0 [ 425.971936][T17442] ? capable+0x89/0xe0 [ 425.971950][T17442] ? nr_ioctl+0x1b1/0x3b0 [ 425.971966][T17442] sock_do_ioctl+0xd9/0x300 [ 425.971987][T17442] ? __pfx_sock_do_ioctl+0x10/0x10 [ 425.972005][T17442] ? __lock_acquire+0xab9/0xd20 [ 425.972031][T17442] sock_ioctl+0x576/0x790 [ 425.972050][T17442] ? __pfx_sock_ioctl+0x10/0x10 [ 425.972070][T17442] ? __fget_files+0x2a/0x420 [ 425.972083][T17442] ? __fget_files+0x3a0/0x420 [ 425.972094][T17442] ? __fget_files+0x2a/0x420 [ 425.972107][T17442] ? bpf_lsm_file_ioctl+0x9/0x20 [ 425.972126][T17442] ? __pfx_sock_ioctl+0x10/0x10 [ 425.972142][T17442] __se_sys_ioctl+0xfc/0x170 [ 425.972161][T17442] do_syscall_64+0xfa/0x3b0 [ 425.972174][T17442] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.972201][T17442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.972215][T17442] ? clear_bhb_loop+0x60/0xb0 [ 425.972230][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.972244][T17442] RIP: 0033:0x7f21a738ebe9 [ 425.972258][T17442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.972272][T17442] RSP: 002b:00007f21a825a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.972289][T17442] RAX: ffffffffffffffda RBX: 00007f21a75c6090 RCX: 00007f21a738ebe9 [ 425.972300][T17442] RDX: 0000200000000440 RSI: 000000000000890b RDI: 000000000000000b [ 425.972311][T17442] RBP: 00007f21a7411e19 R08: 0000000000000000 R09: 0000000000000000 [ 425.972320][T17442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 425.972329][T17442] R13: 00007f21a75c6128 R14: 00007f21a75c6090 R15: 00007ffdf6de4f58 [ 425.972346][T17442] [ 426.390551][T17448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3283'. [ 427.014606][ T5878] bridge0: port 1(syz_tun) entered disabled state [ 427.027536][ T5878] syz_tun (unregistering): left allmulticast mode [ 427.049858][ T5878] syz_tun (unregistering): left promiscuous mode [ 427.062128][ T5878] bridge0: port 1(syz_tun) entered disabled state [ 427.078830][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.092761][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.142186][T17437] syz_tun (unregistering): left promiscuous mode [ 427.167135][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.177545][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.237764][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.248293][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.326359][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.337024][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.404331][ T49] bridge_slave_1: left allmulticast mode [ 427.410015][ T49] bridge_slave_1: left promiscuous mode [ 427.415893][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.424754][ T49] bridge_slave_0: left allmulticast mode [ 427.430404][ T49] bridge_slave_0: left promiscuous mode [ 427.436215][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.710941][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.721342][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.733566][ T49] bond0 (unregistering): Released all slaves [ 428.001578][ T49] hsr_slave_0: left promiscuous mode [ 428.007830][ T49] hsr_slave_1: left promiscuous mode [ 428.014257][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.021662][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.029555][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.037244][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.049046][ T49] veth1_macvtap: left promiscuous mode [ 428.055246][ T49] veth0_macvtap: left promiscuous mode [ 428.060789][ T49] veth1_vlan: left promiscuous mode [ 428.066246][ T49] veth0_vlan: left promiscuous mode [ 428.184577][ T49] team0 (unregistering): Port device team_slave_1 removed [ 428.215121][ T49] team0 (unregistering): Port device team_slave_0 removed [ 428.798546][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.846627][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.886387][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.927290][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.982060][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.992770][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.036167][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.046671][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.076759][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.087502][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.136126][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.147230][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.207952][ T49] bridge_slave_1: left allmulticast mode [ 429.213710][ T49] bridge_slave_1: left promiscuous mode [ 429.219355][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.228303][ T49] bridge_slave_0: left allmulticast mode [ 429.234449][ T49] bridge_slave_0: left promiscuous mode [ 429.240127][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.249124][ T49] bridge_slave_1: left allmulticast mode [ 429.255256][ T49] bridge_slave_1: left promiscuous mode [ 429.260991][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.269599][ T49] bridge_slave_0: left allmulticast mode [ 429.275359][ T49] bridge_slave_0: left promiscuous mode [ 429.280990][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.366901][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.377439][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.387790][ T49] bond0 (unregistering): Released all slaves [ 429.709541][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.720101][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.730150][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 429.740084][ T49] bond0 (unregistering): Released all slaves [ 429.794968][ T49] tipc: Left network mode [ 430.225115][ T49] hsr_slave_0: left promiscuous mode [ 430.230944][ T49] hsr_slave_1: left promiscuous mode [ 430.242069][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.250128][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.258287][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.268709][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.277048][ T49] batadv_slave_0: left promiscuous mode [ 430.286861][ T49] hsr_slave_0: left promiscuous mode [ 430.292582][ T49] hsr_slave_1: left promiscuous mode [ 430.298200][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.305994][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.313684][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.321081][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.331871][ T49] veth1_macvtap: left promiscuous mode [ 430.337921][ T49] veth0_macvtap: left promiscuous mode [ 430.343901][ T49] veth1_vlan: left promiscuous mode [ 430.349183][ T49] veth0_vlan: left promiscuous mode [ 430.355238][ T49] veth1_macvtap: left promiscuous mode [ 430.360764][ T49] veth0_macvtap: left promiscuous mode [ 430.366668][ T49] veth1_vlan: left promiscuous mode [ 430.372170][ T49] veth0_vlan: left promiscuous mode [ 430.537527][ T49] team0 (unregistering): Port device team_slave_1 removed [ 430.548532][ T49] team0 (unregistering): Port device team_slave_0 removed [ 430.733706][ T49] team0 (unregistering): Port device team_slave_1 removed [ 430.758373][ T49] team0 (unregistering): Port device team_slave_0 removed