last executing test programs: 8.563010784s ago: executing program 2 (id=1715): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x82}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 8.396904238s ago: executing program 2 (id=1717): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r1, 0x0, 0xa0028000}, 0x86) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) preadv(r4, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x21, 0x0) 7.442788544s ago: executing program 4 (id=1725): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000300)=r1}, 0x20) pipe(&(0x7f0000000480)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='sched_switch\x00', r3, 0x0, 0x40}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ffffffc}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 6.244026689s ago: executing program 4 (id=1731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x5, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) socket(0x2, 0x80000, 0xf0) 5.777654954s ago: executing program 4 (id=1735): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x881) unshare(0x6a040000) listen(0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8c, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) sendfile(r1, r0, 0x0, 0x10000) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.631681722s ago: executing program 4 (id=1752): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff000000], [0xff000000, 0xff, 0xffffffff], 'team_slave_0\x00', 'pimreg\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x10, 0x0, 0x3, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x120, 0x190, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@set3={{0x50}, {{0x4, 0x1, 0x2}, {0x9, 0xfffffffffffff000}, {0xff, 0x7fff}, 0x1ff}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x100, 0xd0e, 0x1, 0x0, "4e4fbc8ad155565bde831f8fed80ddba7bb9dade6bb1c96c794a12b9cdf8bcc79366c042854211124a585a8b42c94f2c0570a6022ad5e9230c8fba7618f9885e"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r7 = accept4(r5, 0x0, 0x0, 0x0) write$ppp(r4, &(0x7f0000000b00)="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", 0x1000) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r11, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa}]]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x440c0) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r8) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000180)=0x7d, 0x4) bind$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x6, @none, 0x1}, 0xe) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r13, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r13, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000400000100c2800008000500", @ANYRES32=r2, @ANYBLOB="e525ad4bb44ea03abcf7fb846351aaf5814084dc6710cbb521ecf7fcd746b06affe29d85af55949521239f57204fa01452352a81ee649b9c3eb5928478c3d4c77c51295f97757f06984cca5e16568f82bfeae93e53af5ffbfd3c0d7e0ace4899b605c1cdd2ba64fb6664078236a26d1c22c3f4606d653281f2ba54823ac89bd61ea5498193403721d536db854daa9d37313b73f0498300"/160], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000500)={0x3, 0xf3e8}) 3.480922394s ago: executing program 4 (id=1754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x12403, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r2) write$cgroup_devices(r2, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffff0f0800"}) socket$inet(0xa, 0x801, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000001700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001600), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bba7bc00001800000000000000840000000000000007000400fefffbff20"], 0x50}, 0x0) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140900001000010000000000000000000000000a20000000050a01010000000000000000020000060900010073797a3000000000140000001100010000000002000000000000000a"], 0x48}}, 0x4) r7 = socket(0x28, 0x5, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r8) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r9, 0x400442c9, &(0x7f0000000040)={0x0, @multicast}) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000380)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000540012800b00010065727370616e000044000280060010004e230000040012000600030000f800000600180091d6000008000100", @ANYBLOB="04001200080005"], 0x7c}}, 0x40010) connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x24050091) connect$vsock_stream(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.247998998s ago: executing program 4 (id=1756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 3.064709631s ago: executing program 0 (id=1758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ')\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x5) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x31c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x1a8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555c}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "31aba96d16271a8fa8a8607d829cbb19a4175d0f80e7652250807a4b69977391"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9270dc8382198bfd74de1ce31d54a1157bdbde0fef788af0714e8f4958fa6cd2"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x90}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5914d89a2b169ab5d9d2d799403eda3d"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xa4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x8c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b4a74d4923463895ffea59391c18ea92"}]}, @NL802154_ATTR_SEC_KEY={0xb4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "076d23b129dfaf7fa8fc4123e212316d"}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x84}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5d839c01e52f1fc9b83d2c5de27999ed12cd87cf06ca9b8046b27a3d9d4411d9"}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x2800}, 0x880) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x4, 0x0, 0x0, {0xa, 0x4e23, 0x5, @private1, 0x4}}}, 0x32) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000640)={0x0, 0x8, 0x1aac, 0xffffffff, 0x6, 0xd}, &(0x7f0000000680)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000006c0)={r7, 0xef25, 0x10001, 0x3b6b}, 0x10) sendto$inet6(r4, &(0x7f0000000700)="fe48eea5520dcb1c246098f85ba5cfb2bc2de6c145449b44f396e174ea239f493202d872c5641e070325454491d3c7de3525e1f1b7a178eef3364a5af6ce8ce695612b4e952a8abb30d46fc97462b9fdfddee53778b918694f38b6aa707997f6aa033161fce2c3e4d5537cfdd75c82ece3a53684de9ea42dde939075cdedb6be3c2a97509a4b71584dd5ab70d7a7b9d0a348675c085d075ce751464f729a9c8f44aa4b4bc67b", 0xa6, 0x4040040, &(0x7f00000007c0)={0xa, 0x4e21, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000840)={r6, 0x6, 0x200, 0x83}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r9, 0x19, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000a00)={r5, 0x3, 0x4, 0x6b400000}) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r12, &(0x7f0000000a40)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xc9, 0xfff, 0x10000, 0x5, 0x9, 0x6, 0x7}}}, 0x15) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r13, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000c00)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000cc0)=0x84) (async) getpeername$inet6(r8, &(0x7f0000000d00)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000d40)=0x1c) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb4, 0x0, 0x402, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:v4l_device_t:s0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) (async) ioctl$SIOCGETVIFCNT(r11, 0x89e0, &(0x7f0000000f00)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r11, 0x0, 0x3, &(0x7f0000000f40)=0x5, 0x4) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/215, 0xd7, 0x1, &(0x7f0000001080)=""/77, 0x4d}, &(0x7f0000001140)=0x40) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001180)={0x101, 0x5, 0x1, 0x400, r14}, 0x10) 2.811485751s ago: executing program 0 (id=1759): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x33, 0x301, 0x70bd26, 0xfdfffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c8c3}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x8905, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x108, 0xa, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x80}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x34}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x80c}]}}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0x81, 0xd, 0x1, 0x0, "c225e14cb012c69ba44711221e4d4de952eb89ec8d1df064b32c8beef687338b387a33e564342ac4400ad643f4b7862dcd4c906924b15520910e47104533db483d75b837318075eda00cf8a55161b23e0aafa3d511dda08d4aac44bebe085cec678c2929828aaeb2b1bbc6e9261b488c068b5c4089a9830c2b16657b38"}]}, 0x108}, 0x1, 0x0, 0x0, 0xc180}, 0x800) 2.600219595s ago: executing program 0 (id=1761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000002bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x1002, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) 2.411436511s ago: executing program 0 (id=1762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x1, 0x8, 0x600, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x4}}, 0xfffffffffffffebb}, 0x1, 0x0, 0x0, 0xc0c0}, 0x8004) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x46) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc004000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8004) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x6180, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a4fdd99a98e6dfb2d0000020000000900020073797a32000000000900010073797a30000000000c000340000000000000000214000000110001"], 0x60}}, 0x0) 1.899016921s ago: executing program 3 (id=1765): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000002500020000000000050002007004a98047a443620000000025000000000000000500feff0000000090fcf0808d5ab4233fdf5df75179d2cb3ce458c148c37065e43db0cec6c452a74db768d12d52f63771d7e43cc9e973573f6b460f388e3613b4c6ddcdc5f59a10b82e36c46830b5a3a3546a273c9f8bcc410112988e1b718c9cbd74726c38dff14dbbe7efb141a33eab8d2576ad494ac07bf60b65551ca74eb3ea16239aa6ffdc37bb7fe9fe966c57426a8efabad81913c6dfb75b32cf7876e242da450a1df2657b1c7412150710c3a2a30f5fffb790dcaa34fdd06a8668998138bd97fe0277c5b665f882104f32db80fcff80b7727eec45ba0492fd6e24e65f3425"], &(0x7f0000000100)='GPL\x00'}, 0x80) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 1.732767682s ago: executing program 3 (id=1766): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = epoll_create1(0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSDEBUG(r3, 0x40047440, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000004}) close(0x3) 1.4907125s ago: executing program 0 (id=1767): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x91) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r5, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4000800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000200)={'wlan0\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8954, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000000)=0x800000, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r10, 0x8}, 0x8) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) 1.395338669s ago: executing program 1 (id=1768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x2c, 0x68, 0x309, 0x4, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=@getqdisc={0x28, 0x26, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x3, 0xa}, {0x6, 0x4}, {0xd, 0x7}}, [{0x4}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000001ae37d93328bd0047e3d6d04000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socket(0x26, 0x80000, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r11}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r13, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) 1.355444757s ago: executing program 2 (id=1769): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @private=0xa010100, 0xffffffffffffffff, "0fe49bd086811199e2808a3befb52b708a06704f39bd7eb54eaad26b25e42ebc", 0x6, 0x26, 0x1000, 0x6}, 0x3c) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x8d9, 0x28213598, 0x0, 0x1, 0x9, 0x3, 0x0, {0x0, @in={{0x2, 0x4e22, @remote}}, 0x1000, 0x5, 0x2, 0x8}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x2, 0x9, 0x8, 0x40, 0x1}, &(0x7f0000000280)=0x98) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x8, &(0x7f00000002c0)=0x2, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0xb, 0x5c, &(0x7f0000000440)=""/92, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x5, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1], &(0x7f0000000580)=[{0x1, 0x4, 0x5}, {0x5, 0x2, 0xe, 0x9}, {0x1, 0x0, 0x3, 0x9}, {0x3, 0x4, 0xd, 0xa}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000300)='writeback_bdi_register\x00', r6, 0x0, 0x2}, 0x18) sendmsg$rds(r2, &(0x7f0000001d80)={&(0x7f00000006c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/48, 0x30}, {&(0x7f0000000880)=""/79, 0x4f}, {&(0x7f0000000900)=""/180, 0xb4}, {&(0x7f00000009c0)=""/11, 0xb}, {&(0x7f0000000a00)=""/198, 0xc6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/171, 0xab}, {&(0x7f0000001bc0)=""/193, 0xc1}], 0xa}, 0x8814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002080)={r6, 0x0, 0xdc, 0x67, &(0x7f0000001dc0)="a315bbba8c7038e9a45226c6571f4944366a353e014c77a4196f63b1f56c664074011fb9fd6534691b37e66c0227788e93047376e2c0377cabd93fe828ccef0239d0f96dc4494b4e9e575a5c50fd7633a986cf9cfd78af3015f950922b1b78d1eca0910b07e57d387d48bb6d10a9193b2204cb3023f82b0b24e6832306d3bf356f5ddfd620935263ef5efd7c5f1bc3065f50cd8911dcf79d6898429a8bfe34b7882ff30a6feeeffc6f239ac394e22c7103a4d025101138955e86675c8f9ce63ff5c652180313549538e3196cb98e6d06392ef120fdbb0c289a610c7f", &(0x7f0000001ec0)=""/103, 0x73, 0x0, 0x12, 0xfe, &(0x7f0000001f40)="61f014f15c07e4a1dce94d32009744e2452a", &(0x7f0000001f80)="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", 0x4, 0x0, 0x401}, 0x50) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002140), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, r7, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002240)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000002280)=0xfffffffffffffbff, 0x12) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000022c0)={r3, 0x6, 0x744, 0x9, 0xfff, 0x10, 0x1, 0x8, {r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xffff, 0x80000000, 0x7, 0x1, 0x80000}}, &(0x7f0000002380)=0xb0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000023c0)={0xf02, 0x7, 0x4, 0x0, 0x0, [{{r6}, 0x7}, {{r8}, 0xff}, {{r5}, 0xff80000000000000}, {{r2}, 0x5a9}]}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000002480)={{r0}, "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"}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000003580)={'syztnl2\x00', &(0x7f0000003480)={'sit0\x00', 0x0, 0x20, 0x8, 0x0, 0xd689, {{0x29, 0x4, 0x1, 0x3, 0xa4, 0x64, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x85, 0x3, 0xf, [{@empty, 0x800}, {@remote, 0x1}, {@local, 0x8dd}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}]}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x0, 0x2}, {0x7, 0x6, "5c74d096"}, {0x5, 0xe, "74a5f37b62f9319d2b72daf9"}, {0x4, 0x4, 'Z@'}]}, @timestamp_addr={0x44, 0x34, 0x63, 0x1, 0x5, [{@local, 0x8}, {@private=0xa010102, 0x6}, {@multicast2, 0x8}, {@local, 0x4}, {@local}, {@multicast1, 0x4}]}, @lsrr={0x83, 0x7, 0x89, [@private=0xa010101]}, @end, @lsrr={0x83, 0x7, 0x75, [@broadcast]}]}}}}}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000035c0)={r9, @remote, @rand_addr=0x64010102}, 0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003640), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x14, r10, 0x229, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x30048010) r11 = accept$inet(r5, &(0x7f0000003740)={0x2, 0x0, @loopback}, &(0x7f0000003780)=0x10) setsockopt$inet_mtu(r11, 0x0, 0xa, &(0x7f00000037c0)=0x4, 0x4) recvmsg$unix(r2, &(0x7f0000004b40)={&(0x7f0000003800)=@abs, 0x6e, &(0x7f0000004ac0)=[{&(0x7f0000003880)=""/129, 0x81}, {&(0x7f0000003940)=""/100, 0x64}, {&(0x7f00000039c0)=""/253, 0xfd}, {&(0x7f0000003ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000004b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004b80)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x4, '\x00', r9, r13, 0x2, 0x2, 0x3}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000004c40)={0x0, 'virt_wifi0\x00', {0x1}, 0xe1}) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000004c80)) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r13, &(0x7f0000004dc0)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d40)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x8880) 1.250546601s ago: executing program 1 (id=1770): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x801}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1200f00c4c08e0ffdffedb"], 0x14}, 0x1, 0x0, 0x0, 0x40094}, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x1e8, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x956}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x892}, {0x5}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0xfffffffe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xfa5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe5a}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x8}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24008084}, 0x48010) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x1e8, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x956}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x892}, {0x5}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0xfffffffe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xfa5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe5a}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x8}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24008084}, 0x48010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000580)) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x7, 0x1, 0x1, 0x0, 0x5fffffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x7, 0x1, 0x1, 0x0, 0x5fffffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f9b7b5acfe1e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44011}, 0x4000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x220, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x889}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x220, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x889}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 1.175816963s ago: executing program 2 (id=1771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4b1}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5bb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r3, @ANYRES64=r4, @ANYRES16=r4], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r6}, 0x20) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 1.006147029s ago: executing program 3 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x15, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000020000000000000001000080185200000a00000000000000000000008520000004000000623e8000058000009500000000000000b7080000000000007b8af8ff00000000b7080000800000007b8af0ff00000000bfa100000000000007010000f8ffdfa2bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xb7, 0xfc, &(0x7f0000000600)=""/252, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x6, 0x6, 0x7fffffff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x8, 0x2, 0xa, 0x4}, {0x1, 0x2, 0x10, 0x3}, {0x2, 0x4, 0xe, 0xa}, {0x5, 0x2, 0xe, 0x7}, {0x2, 0x1, 0xf, 0x9}, {0x1, 0x5, 0xd, 0x6}, {0x2, 0x1, 0x1, 0x9}], 0x10, 0x400}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xc, 0x7}, 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000003, 0x13, r0, 0x7ca8e000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) close(0x3) r10 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000940800034001000000080004400000000f0800014000000000180005800e000100696d6d656469617465000000040002800900010073797a30000000000900020073797a3200"], 0xa4}}, 0x4004010) 902.368802ms ago: executing program 1 (id=1773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000003bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x1002, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) 679.046499ms ago: executing program 1 (id=1774): socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r0 = socket$kcm(0x29, 0x7, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000280)=0x8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8a26}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x24000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000040)={0x80}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000001180)={0x1, @default, @bpq0, 0x3f, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x0) accept4(r5, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xc}, {0x1, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xc1, 0x3, 0x9, 0x1, 0x0, 0xfff, 0x9}}, {0x16, 0x2, [0x0, 0x4, 0x8, 0xdf6, 0x3ff, 0xb605, 0x8, 0x8, 0x8]}}]}]}, 0x6c}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x230, 0x1, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xb6, 0x6, "533f73967aae16c147befdd41914f697564594d2eb2ac564e039eb25893e38d42a13864c06ba2ecd4d41c5716281519e4b476547e5e8e93078890a58b10c9cc90f6dcbb7f7c3d149978ffff190ac43934d50dc8c1bff42dd7d8780ac23870e6fe1a8f862d7292c5f8012e30a1dbb3c7e4dea01b1dca3a009c8fd10dacc5d63a817276fd663c34a8e91fa941f6f6f49a4a17ecee53b119da6260481e5875c091bda82a96412b79d13220ba21c37debbdea476"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x32, 0x6, "39fb938ee5c2329a9be12ca5618f6ea1c50d184a2b2b1b11a814d60c9b842d8696db3ad12ca1dea715c4881abe97"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xec, 0x6, "0a2afc7218355eb90e0f472445ac2afde1e9cae154d4a292fc0a169a0962cede3e1de1e0c7655862115b5e1bac428b1ea801070ad1284d1bdefb3daf57079a7c64ffe2761e18d8714e095b8ac1127d5ca4e19d5e2a6c5296e29ddfb29d049217ca2d9657d24fe62d212c9aedf1678c067603b02d5e5d8ac8b293cc52b56673ce1bc7d9111514265cb5c1bc9973d17200bef0e7d99cf34b0f2ad2d0fdd6aacc3e15d3f7f2f51dba3b80518172568fa7f88c3666f6de2608b45fde864efd189e295c9de9d5e792e842d3045bbd661f1afc4274281fc22a96073b8dbf69023dd066a103a59e373e0f70"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x230}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x1070bd28, 0x35dfdbf7, {0x0, 0x0, 0x0, 0x0, {0xff0, 0x7}, {0x0, 0x10}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc8804) 669.537626ms ago: executing program 3 (id=1775): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"6911d42cbf1de1c93fb8bf2802df38f6", 0x0, 0x0, {0x6, 0x80000001}, {0x196}, 0xa, [0x9, 0x0, 0x1, 0x10000, 0x3, 0x1, 0x8, 0x8c, 0x4f9, 0xff, 0x8f, 0x1, 0x9, 0x1, 0x5, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"3187872e403b56ce7fcf1c1d0b952cd6", r1, r2, {0xfffffffffffffefc, 0x3}, {0x80000000, 0x2e}, 0xfffffffffffffff8, [0x3, 0x361, 0x3, 0x80000001, 0xe1e, 0x80, 0xfffffffffffffffb, 0x5, 0x6, 0x4, 0x0, 0xb0, 0xdac, 0x1, 0x1, 0x5]}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000280)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) r5 = socket(0x27, 0x806, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0x21, 0x5, {{0x12, 0x4, 0x2, 0x3d, 0x48, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @local, {[@generic={0x82, 0x7, "99800907b6"}, @timestamp_prespec={0x44, 0x24, 0x42, 0x3, 0xe, [{@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0xe}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x80000000}]}, @end, @timestamp={0x44, 0x8, 0xd5, 0x0, 0x9, [0x7]}]}}}}}) sendmsg$nl_xfrm(r5, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=@flushsa={0x240, 0x1c, 0x10, 0x70bd28, 0x25dfdbfb, {0x33}, [@lifetime_val={0x24, 0x9, {0xd00, 0x8, 0x1, 0x7fffffffffffffff}}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa, 0x8, 0x2}}, @offload={0xc, 0x1c, {r6, 0x2}}, @lifetime_val={0x24, 0x9, {0x80, 0x800, 0x2}}, @policy_type={0xa, 0x10, {0x1}}, @algo_comp={0x91, 0x3, {{'lzjh\x00'}, 0x248, "f6114375892cbc59952a34f2ebd37a339f5810fb05e0b3ea5ef34940c5414b333126aa949e927e29263233d86623bcfa74787458413636e8df1458a279a886e38d89d7811f30a1902b"}}, @algo_comp={0xe4, 0x3, {{'lzs\x00'}, 0x4e0, "dec6decab0f608446889a80d5a0af296f715cc3c2475b1783b59c904993870a42b7b686a7428f0933d32b4ebbe29e69b4e73fa66d5c9d889f3fdab18e1fd2127a9e86d8f885fe4b1f84b238ac1cef69e139fa73e31e0aeb57f11eb04b7eb855767854204637aa81fad5dd436f188df8b71c2b6e03bb90cf26f3c6471329ee00d70e9940b150bdb8383529cccca721064bbeb88fda5ce8b6ee9f75029"}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2a, 0x70bd27, 0x70bd2b, 0x70bd2b, 0x1924, [0xc572, 0x9]}}, @extra_flags={0x8, 0x18, 0xfff}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008084) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000680)={@loopback, @mcast1}) (async) bind$packet(r5, &(0x7f00000006c0)={0x11, 0x1c, r6, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000700)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001700)={r7, 0x0, "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", "f0750f4e5ddc77b11e2238120c4d4243debd4fbc84c4413818889115b071a5919780bbaa9b48ff12593b4cae65fa70aff8bb7c92053e22622e919973e49c68d21a722771a57de70add098683400a00d26775533830ae1a78adb007efda99921a1e2f68c7c3ded8ff0338101008c93b7174a208734c3299e4523887b29008ea36ecdd7aa9ec2401cb93af4af5348c967ff3e6c8f302eb0b2a8ef1d38222ddadaf82035bf2421967ae45a72e86d031f64b7c627eb1bad718db05ec6064b9e4bac2b6b865c660ce7423d6a05289f372e32d339f14e3d70d1c6f329545cbec23894704f7a00fc99a91067db304b90250935d24faeaca01ba97a502b36e5e207807c79876297bbb681c663472012ae2a2d7a527be6d2845b0eef038870dc687f3313bc403dd1b5b20edd5b9b3b1fe11ff8b7935b74d80bfc2f4b6dc75248a315b25dec2d4301dc05e59ad08f0b8c9580a422b42cf7504e785eb931eff1f015d0b922ff6a8c732d12c49e845b9a977bf4b324f7ab77ba3c514644ec442dd0dca8f9f5b93d55957f8161c8b2a496e5aa033d0b8422d1f20f7cc9a1e68f20457a1cbe7b1bbbf84a32e6dc3a593b8bda16a1c5c89aca856b233bdf170e251595d2b357a3a8719787d0848200ae6550b883abd64da61759593774a9eb1d3be92133aac2d16c357d23ed63705639efd1dd036b7486166fdf8581410bf50b3217d7352fb9abc8c3fde90bcff157eacfb681353b1f05d2f7b4ecfc9066908e1d71fb40019d78645f23ad823da1b8d54cc92595603b79a7291c35b9339354125b8ebe2b34797bdcb3a5c175c7e3b2edecf4ef3b8787e300a11ceaaabd2a6b50e23be7c277e5233a0511ed2e05f360ab657122b4e9f4e71ec46654bf612646170d7ce59e864dcc9cf356116ebc427bd8a11f143083a3f981610675e961b784b1cc4bd52f60805ea2b6a9fc59ddfd67827ef764562a19d4e270ff8b45148e570569ba8973bfd367bb8146f19900cbcf5a9f361622667a6efdc8f8cc5b0a12c73426e079c9024f451b7db1f81b8791532601db3c69fd12b20fc8b4bd429e1619355717f3faee366cb64c1f03b727cbe05f7e1a84ea54847161e0af09967d5db1b6b0d5f22f80e74a7159442af9e3e2a40a834611227e4470a2559d612e63f494d2399977e7ddf4bbb9212a08df5253fb3f52971ee3247a4bcb8b5055dd1f3243de14c2d6f6bbf3f16a7338c8a13c739db280f4ea11ffe247af10e7a6482ce506f92c41d9a1e80da1275ca62c06be3e71d1522d5e05874de12811db620d9df7b0333ae9b239f2d18016d462e27bdefc8803bd48e155d383448b9a06f874a8973f47747f1d350f4d193f6ee41c9e09a302b29ff1268e26d4cb13234b8342ef45a803886002bf1c6c23ac435e784dbcc2c57bdb1c8a8cf61dd377ed7fc164d52977e25647455928783e7e0802f7a42ec87f54c1213e95c0b6d1373ba7424f864eda156513ed4831f83cf309788f8e288dfc17077959adf5ce8d61caa27b9f93deffdfe3b479bbe54fa0a61f798ac49eba3e84a4069ce36c640b1b98a6bb49db475f2d5729dc3e9cd0330fb9745c25de772d1384a6080215b1c6f92f50356917ccf1ab347c34fbaf6846a6d2ce69d3f9d5ca43c251e739dd61b4da43825f5faa1250dd601048927f031a94cdd34129f140e59d382a1539c1d5d22123bf1d9fa64a5d7a4fa51b594b06cd49ad7734fe68193294c8a7240739e66bdda5c3a38db44fca102f859faccbf371be6934aa3f855b2e49129ca0965315fd84a2c947da05417491c7a03bfb1d54b08a11e9c9af523cabf6e9baad7f72fd5aaf7d83480c2285ddd90f5aa4ee693862627e3d30430b4599694b7b3653b290f5f5fbc5d399a0efb2230781326bfd3ada0b13c2be0330f704f1ab202e76dea75f696adccc28eaa7ff85aca8017b29d91a473a9c6dd305bb96dd47ec0420c31e3223bec31ad973802dede986c588e95033103d4a4a294bbbd784e1459ea340101a9c4443eccdd89eb7f3ed4a39b53e991ad5f44c61b1a39541a3747ef37d0cbacea5f513a0506c452efa600f20d12dc3404569fc604a13340cde6f39b70b3b92a5de2143bf51e37f026ee692491c14db1db883c1ca61bc36212c3d7d8b26eaad1b8389cb424837359e6932d4d69367e32cc1f7853526d68d4531daa9060f8e51d04a811a5e623681842065f6efaccc8c3cc9938a1151af35387dda25d8dbc3244b95ae01702f98b35921c95e3a52cfe63d49546413806c766b9d3f920e2879c0a2c77ae527832cb8e95b48f08946ef0d25577c5270eaf16a0cc0b6eb4dd231fb0055ee7cebe421dfd10be135344628f0014bac4e5133577fa735573334bb5776b20dc2b8e9ee084b8bcb496b0183f2e0c63a15cf087b8807135c0a7a2da61939a4b38cbf963cf902c2a8dd50bd904d4fca881a51397ec78958b39078113692f4bc7fa5af55781714ef315aa43566737239789c9b17a937bdb2c4b0cdcc267dc9b5514ad31164741d03813c761ffa3a0541e966caf543991cd2c683480e98794a1450810524eb6123f794e6f5f251064b9b7dc1b608b67b79264cc79a0e19932859e28d4707d591794567f369d2a4cf34e2a4da5841058ac70c7bbe79e49d68bd6ae002ac3e18d1e108233d6b8d2b7d2a4ac4a1348479cfd8bfc305e66ffc4439ac92eab46e9370cf430c1b5bc9a70a945d8e832ecff739cb391c772788e6d71ef60d017fd7f21319a2beb689af21f63171d5c070bc2ae50d4d36fb67d1d03b525a3106e1e7f323779cb0041bf5477f3380ef5ffa929bf89fd00a84e17180be8f73894b252abd0ef567324a65f10a96c614e9b9ffc8a123ee99d076f95775768e1e7dbc8968f037efa1901efa830abf98afa9adac84c509c5c088003fe32cb4f8bb46fd072b5188b81742d5a4193c5bc99f7e5ce15f382f6e0266ce9df13de3bc19ccb18117fc258dd80cef00a612f4b0e0eda457a8c40bc29582d57e90cd51eac87c702c90784b19203f40851d5c80958f526537c304a61712e2dc437b1b7d5d74cbdf0fa6cb0b53f915c9f5933c788103402cfc061dd8a93d1d31f4279cdb463a0b80035e58aa82ed027ab18a58cd04685a61250044788ea6d240c4b218e2a8f8eccae803d8d3ce58963774bec0dd50b9c68377dcd95d2048439b41ee27427f997f6c3bdeb47bc99bc14fb937aa80cfcb2fc79c58722ca62ace757f21487158c3d792a3ddc0fcbfb9e33b887d5a564cc8344cc4f4e1075b4bbc1a3c90ac34644c2c6933e98dc7cc7eadd8cdd0306c8f80c5983685f2ead16bb7bae6eabc210839452db259664d0eaf5d1b040474a02d34b657d93a4fa9e85298dabb2713dcaa023bb0c5cc2cd11f53d208f578cad293d42f47656039951defa3875f2d96a694f600679a233438adbc09d8de94815718cb3681e7c6124431a0b0afc80f2664d263908724d1a7872e0130871498f6d1cdfb0453c108e91fa70eab8c6f5ef30637e46af69f3dd22580b1d44ddde02f433d6daa215f61d3a183916e7ca760f2fa89f3948af21b4da8903c639f64f8e8cba00e1cae3c23188fb4d612e8c8a00ec976ccccafaf9e7b8bcf54e14814a11779f32e84584ecec2ce39e6a54b1d58b8acb07dcf1624c81868940b4fc81f840fdfc5439c26fbdfd22da7d6f38f5a4e8ebfe008cbfab2e394f85213a61dbbe1717245e1f334e6538d54e6df164662798b02ce9ae13fb0d9623f5b8861835db5d6ac7c53bfe8458ac5f2a1975401fc123dc38ddad13662b6f8e1bc60b557a08b7950461342e1c6c242923b148a97da0c783d70d58cc799d3fba02c3e8fc155db03e745b007e83ff8dd7a1ca0e6af17d1eae19a3a7b20f44943f24fe64f3099bbdf98959a59a2c9a3e3f948638e27c8e96d7cb8094cb9c81a6d279aa95b541fd3e9740dda1090910ff3f6d5bd6e57c6f1d43ef5ab8e100c84ddab6cc750d463217d1321d12de1afe4070a32a1a5b5fa3d93c072eff96c5c27a28126c01e1a09de360956870136f30e2548a0d7a691b636d68f6944bfc7f5a04b9bb96916bcc6f4cf4e7b0fc0585335103b231089253f0462ca361d849712a7403d0eca1aaec3ccdfc7caf2d7b634a1d0cd8b07a2ae13f9fa3af8a8bce3c1d35292614f7021d22c7ebd44537307bc65a1ca5d642b9c325cbc71998b31054b2d1f4141982f8e9c5ebca562273d65f1e97dd3f2b5193ae869a7ade98170dda46cd9fccdeea9dc27d2b48eb5b971d0912dde61e1e36dae5e3052648e9601e3c5fddc81a5424c6cbc4a307647fe8b247fea6e9ed85b5923634638bbe79e61456248871208063472e0cdd3923a0a0f5f28e5a474aa1843b0235637a5078cd7cd2f821987cc06ef83a62970c13e2d0148de3fd92622954cb58afcd8b00ceb11f35240a6b57514670b8aaf02768d85f2ebfb1e300071dc41ef5cc5ce460b37af7ff6dec0ef900468adc6568e65f8ca75d355d5758a13b41527f77c6990458a190c8e5d0a64c8dadfb22223d9bf8e84cfb8b3a3f10a7964deca7050dc6ec6004e25fb415df3ee0371d78db3cf02638cb02758c882062057ee91f827517b305366ee3f6428c96c644876f0cf1624019969c6687a5f7b9421f095ee55a6326986ffe4978a1f9ac2974b0e29c780a887d187c8b6089017962fea26693487b15bc4b625086b8a8add581cbefe672d7e7bff76a13e4fb2a3c2eeb54c54cbaf6ddca53af3986ce7e46af948ed7bf2eecd4f612f9161038b51fb4a3eb86d03a628ca7ad6d9634b5773df8df96c897470d69a1d7ba30346378c62e36c3e0d6eee08221ba5ff70c8b99cc7d2a0b500c9e8e02729295f63fde8f39135ca52db5a16f145f236d1faf866ac5a31ce1ef62d85b01746c11c1aa395bb3c6f6c85f908a343044e5cc5690f4faa63901195bf3f9f477e9668a16b1b8c71046728b0dbf08e051fe813c2cea8f580d04b06b25ec7ef1c7e18199b800021a3d10f025c70eb0a1edcbe8d3b99bb1cc0bb0443c2b26d12ea85dc9eac5a49546cfefe337d5ae6492a23b8d6c2e5d559d1bfc5be867525d9f9d8893aa80e863f8d4ff6930518a615170feccd2b0e083c70926ccaed2f095a65275e85cc2176dec9d7c897a71dce677d534154f59f4d95309447b6eaf2ad89ee2755af46c3c1ea3fcf38a15ca2b2205864fb52edfb8a583f92a7664cfbd0f11802216aced5154d63b50b82c41b487ee07cfef658e17d85a50a80b9608c4c2b452e573b0501c42e893196e7591bdeed82ab394a135cc1590acfa37af734fb7f20d8f72a57d3990fc186b58f6e5b7d85aa8f2e065f802c0b1c856d14ff175a5686cf85bb799844331934e562fe3eb8582496972497e89a74ea7ea0b134704aaa98939c7730ef8ab5962589ceb4239edbd8fad3f"}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002b00)={r8, 0xffffffffffffffff, 0x7}) (async) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000002f00)={0x29, @rand_addr=0x64010100, 0x4e24, 0x3, 'sh\x00', 0x8, 0x5, 0x40}, 0x2c) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) r9 = socket(0xb, 0xa, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x44, 0x0, 0xa04, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x20048050) (async, rerun: 64) socket$isdn_base(0x22, 0x3, 0x0) (rerun: 64) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r10, 0x8934, &(0x7f0000003080)={'nicvf0\x00', 0x6}) (async, rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r10, 0x8010661b, &(0x7f00000030c0)) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000003100)) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000003180), r9) sendmsg$SMC_PNETID_GET(r11, &(0x7f0000003240)={&(0x7f0000003140), 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x3c, r12, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x48001) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003440)={&(0x7f0000003300)={0x134, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x400, @rand_addr=' \x01\x00', 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7f, @mcast2, 0x6}}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x20008001) 459.768067ms ago: executing program 0 (id=1776): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c90000000001010400f900000000000003000000410001802c00018014000300fe8000000000000000000000000000aa1400040622ff236eb569000114000180080001000a0101000802802c000180000001000000000000000200ac1414aa0c00028005000100000000000804001700000000000000d76600000000000000"], 0xa8}}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x0, 0xe4b5}}, 0xe8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0503020000000000500012800e0001006970366772657461700000003c000280060018000200000005000b0002000000080014000900000006000f00ff01000008000c000e00000008000d000700000008000400ff"], 0x78}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x19, 0x0, 0x1, [@nested={0x4, 0x1d}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0000000001010400000000000000000a0000001800018006000340000200000c0002800500010000000000240002801400018008000100ac1414aa08000200640101020c000280050001000000000008000740000000002400068014000400200100000000000000000000000000000c0803800600010000000000"], 0x7c}}, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="06000000000000000a004e2000000003fc000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000060000000a004e210000000f00000000000000000000000000000001ba320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000001fe8000000000000000000000000000bb16cc0000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000007fe80000000000000000000000000001306000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000007fe8000000000000000000000000000aa0000001000000000000000000000000000000000000000000000000000000000000000000000fe4705af2f02077c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000008fe88000000000000000000000000010107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e230000000afc0000000000000000000000000000000800"/920], 0x390) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xf}, 0x90) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000226bd7000ffdbdf2505000000050035000500000064507d0a9aad68f837f31860a3485d62f825182f7c807a0c0d4ea122fecaa3f503e09df3e3c91d54587f12c57c291959c04a29a5b3c147a46b9168d3a75da4c9ae95dd8ec9ff2bf7cdf0d3550fc8c4a294b4423a9f3693cc5ecd346c1597f1624122d54d69a50d6724adf8ebfe7073fce82d9f3d33454b1e7f82183af92fe72ebe5ee894"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x81) (async) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) socket$nl_rdma(0x10, 0x3, 0x14) 367.6838ms ago: executing program 1 (id=1777): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000ac485ef41000c000b8008000a00b512080004000880040004800800020001"], 0x48}}, 0x3000c000) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x40080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000005c0)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xc}], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 349.816931ms ago: executing program 3 (id=1778): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x48, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7}}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x10}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) 147.065734ms ago: executing program 2 (id=1779): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xff9, &(0x7f0000000a80)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x21) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001"], 0x54}}, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xdfd7e7eaa9a66e4e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0xa77af97ff7c1f516) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="00001c2449f8000000000013add4639ea7922cdfd3afb7aca577ea00000000002000000000000000254e427b16f8f5a963be213e04fdb7de7b95a25d62ce6710ef284844c4bdee04f6dc04a43514eab5304f29f7251dcc19fb21899d1d0b01882947d36e2471027506ff957aed1cebc9248d047a4cab79d996b6844299d44059e972e127d9f1c1844eaaa33811de300bd3b94670975dce6c1775426789224fa1179b8ef20a49c294dce54d16c145d2b2d628", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)={0x14, 0x803d, 0x107, 0x8000, 0x8, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0xc000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) sendmsg$rds(r10, &(0x7f0000001bc0)={&(0x7f0000000780)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)=""/204, 0xcc}], 0x1, &(0x7f0000001b40)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xa3d7}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x8}, {&(0x7f00000009c0)=""/167, 0xa7}, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/74, 0x4a}], 0x1, 0x63, 0xc97}}], 0x60, 0x80}, 0x40) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x1c, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}]}, 0x1c}}, 0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, r11, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044010}, 0x40010) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r5, &(0x7f0000002580)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r12) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.962983ms ago: executing program 2 (id=1780): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000200)={{0x0}, 0x0, 0x60}, 0x20) r2 = socket(0x25, 0x5, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x4000040) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000050}, 0x4085) 7.38821ms ago: executing program 3 (id=1781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) (async) writev(r2, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000ffffffff000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r9, 0x0) (async) splice(r9, 0x0, r8, 0x0, 0x400000107ffff000, 0x0) (async) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r7, 0x25, 0x14, @val=@iter={&(0x7f0000000100)=@cgroup={0x1, r8, 0x6}, 0x10}}, 0x20) close(r10) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000004005790e8804655", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = socket(0x2a, 0x2, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) writev(r13, &(0x7f0000000400)=[{&(0x7f00000002c0)="2e9b5b0007e03dd65193dfb6c575963f88a86067", 0x14}, {&(0x7f00000006c0)="cb4c", 0x2}], 0x1000000000000155) bind$bt_l2cap(r12, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x9, 0x0, r11}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8, r14, 0x0, 0x700}, 0x38) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) socketpair(0x25, 0x1, 0x1fea, &(0x7f0000000180)) 0s ago: executing program 1 (id=1782): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x6, @multicast2, 0x0, 0x0, 'dh\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) connect$pppl2tp(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'ip6gre0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="24e5b400", @ANYRES16=0x0, @ANYBLOB="0100000000000200fcffff1d00ffffffa7a54d0435ca71a88aadb5ef1f498c61e48a35d5179ff263f3f2b4efa903ba3518570845b32bb98e41f35cf0542aa2c01ffb5a6359cf15110c0525d79051c71bc5fbc630be92283c818977c0ae37a1f935fa908c5222c83fe40648a75e9d7fb5929dc111bf15fc"], 0x24}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eef9dd82895700"/120], 0x78) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r11, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r7}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r11, @ANYRES8=r14, @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r13, @ANYBLOB="0c00018008000100", @ANYRES32=r14, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="1500000000000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="10000a002f2e242d2b5b3a403a405628"], 0x94}, 0x1, 0x0, 0x0, 0x20044001}, 0x11) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r6, @ANYRES32=r7], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="3800000040001901feffffff00000000017c0000140042800f000a002e2425d42a7b2b2e4e2e00000c0001800600060065310000040008"], 0x38}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r16, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r16, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x10, 0x3779, 0x100}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r16, 0x84, 0x78, &(0x7f00000000c0)=r17, 0x4) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0xfe0f, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): - 0 [ 82.456865][ T994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.485027][ T994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.551608][ T5973] netlink: 'syz.2.10': attribute type 5 has an invalid length. [ 82.619958][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.622454][ T5975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 82.650204][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.766279][ T5977] vlan2: entered allmulticast mode [ 82.780511][ T5977] dummy0: entered allmulticast mode [ 82.883696][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.894883][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.906355][ T5981] tipc: Started in network mode [ 82.911927][ T5981] tipc: Node identity 5e6ef9c353ae, cluster identity 4711 [ 82.926144][ T5981] tipc: Enabled bearer , priority 0 [ 82.956659][ T5981] syzkaller0: entered promiscuous mode [ 82.963487][ T5981] syzkaller0: entered allmulticast mode [ 83.004801][ T5981] ip6t_REJECT: ECHOREPLY is not supported [ 83.065904][ T5985] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13'. [ 83.220451][ T5993] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.263553][ T5980] tipc: Resetting bearer [ 83.271380][ T5148] Bluetooth: hci0: command tx timeout [ 83.276825][ T5148] Bluetooth: hci2: command tx timeout [ 83.282328][ T5834] Bluetooth: hci1: command tx timeout [ 83.287871][ T5829] Bluetooth: hci3: command tx timeout [ 83.294140][ T5993] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 83.339360][ T5980] tipc: Disabling bearer [ 83.400345][ T5997] netlink: 'syz.2.18': attribute type 21 has an invalid length. [ 83.428504][ T5834] Bluetooth: hci4: command tx timeout [ 83.460329][ T6001] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18'. [ 83.466330][ T5997] netlink: 'syz.2.18': attribute type 6 has an invalid length. [ 83.480368][ T5997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18'. [ 83.825854][ T6016] x_tables: duplicate underflow at hook 3 [ 83.868698][ T6024] lo speed is unknown, defaulting to 1000 [ 83.875497][ T6024] lo speed is unknown, defaulting to 1000 [ 83.884396][ T6024] lo speed is unknown, defaulting to 1000 [ 83.897121][ T6024] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.949156][ T6024] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 84.083189][ T6024] lo speed is unknown, defaulting to 1000 [ 84.105960][ T6024] lo speed is unknown, defaulting to 1000 [ 84.124552][ T6024] lo speed is unknown, defaulting to 1000 [ 84.171889][ T6024] lo speed is unknown, defaulting to 1000 [ 84.201117][ T6024] lo speed is unknown, defaulting to 1000 [ 84.333651][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.897817][ T6067] tun0: tun_chr_ioctl cmd 1074025675 [ 84.929718][ T6067] tun0: persist enabled [ 84.956114][ T6067] tun0: tun_chr_ioctl cmd 1074025675 [ 84.965506][ T6067] tun0: persist enabled [ 85.010136][ T6070] Zero length message leads to an empty skb [ 85.035936][ T6074] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.507747][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 86.031284][ T6124] netlink: 'syz.1.47': attribute type 9 has an invalid length. [ 86.042199][ T6124] netlink: 'syz.1.47': attribute type 6 has an invalid length. [ 86.216412][ T6134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.224054][ T6134] IPv6: NLM_F_CREATE should be set when creating new route [ 86.231352][ T6134] IPv6: NLM_F_CREATE should be set when creating new route [ 86.243455][ T6134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.291719][ T1211] IPVS: starting estimator thread 0... [ 86.398627][ T6139] IPVS: using max 24 ests per chain, 57600 per kthread [ 86.434720][ T6142] openvswitch: netlink: Duplicate key (type 21). [ 86.613664][ T6151] netlink: 'syz.0.55': attribute type 2 has an invalid length. [ 86.674797][ T6154] netlink: 'syz.0.55': attribute type 2 has an invalid length. [ 86.716050][ T6151] : entered promiscuous mode [ 86.794487][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.840477][ T115] cfg80211: failed to load regulatory.db [ 86.964028][ T6166] netlink: 'syz.4.61': attribute type 1 has an invalid length. [ 86.981116][ T6166] netlink: 224 bytes leftover after parsing attributes in process `syz.4.61'. [ 87.134006][ T6177] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.63'. [ 87.409002][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 87.428358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.470461][ T6191] warning: `syz.0.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.491889][ T6189] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.589231][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.740243][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 87.828152][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.885982][ T6208] netlink: 'syz.2.72': attribute type 8 has an invalid length. [ 87.927978][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 88.084268][ T6203] syz.0.71 (6203) used greatest stack depth: 17832 bytes left [ 88.094613][ T6208] bond0: entered promiscuous mode [ 88.103873][ T6208] bond_slave_0: entered promiscuous mode [ 88.125197][ T6208] bond_slave_1: entered promiscuous mode [ 88.133637][ T6208] gretap0: entered promiscuous mode [ 88.158731][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.170571][ T6208] veth0_to_batadv: entered promiscuous mode [ 88.186953][ T6208] hsr1: entered promiscuous mode [ 88.197279][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.211363][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.249839][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.259385][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.580527][ T6234] x_tables: duplicate underflow at hook 3 [ 88.692295][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 88.807281][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.816138][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.233495][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 89.445256][ T6274] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.90'. [ 90.319211][ T6308] dummy0: entered promiscuous mode [ 90.333566][ T6308] macsec1: entered promiscuous mode [ 90.348519][ T6308] macsec1: entered allmulticast mode [ 90.356034][ T6308] dummy0: entered allmulticast mode [ 90.380096][ T6309] netlink: 'syz.3.94': attribute type 11 has an invalid length. [ 90.410250][ T6309] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.94'. [ 90.448276][ T6308] dummy0: left allmulticast mode [ 90.464568][ T6308] dummy0: left promiscuous mode [ 90.878346][ T6330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.885653][ T6330] IPv6: NLM_F_CREATE should be set when creating new route [ 90.892977][ T6330] IPv6: NLM_F_CREATE should be set when creating new route [ 90.939810][ T6330] xt_hashlimit: max too large, truncated to 1048576 [ 91.196738][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 91.235765][ T6343] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 91.251949][ T6343] netlink: 'syz.2.103': attribute type 2 has an invalid length. [ 91.471020][ T6348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.510698][ T6348] bond0: (slave bond1): Enslaving as an active interface with an up link [ 91.630590][ T6357] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 91.809473][ T6369] netlink: 'syz.1.108': attribute type 23 has an invalid length. [ 91.994345][ T115] net_ratelimit: 58 callbacks suppressed [ 91.994363][ T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.494700][ T6387] bridge0: port 3(syz_tun) entered blocking state [ 92.516615][ T6387] bridge0: port 3(syz_tun) entered disabled state [ 92.552138][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.586778][ T6389] netlink: 'syz.4.112': attribute type 10 has an invalid length. [ 92.620783][ T6387] syz_tun: entered allmulticast mode [ 92.629843][ T6391] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 92.655910][ T6387] syz_tun: entered promiscuous mode [ 92.669767][ T6387] bridge0: port 3(syz_tun) entered blocking state [ 92.676565][ T6387] bridge0: port 3(syz_tun) entered forwarding state [ 92.749313][ T6389] bridge0: port 3(syz_tun) entered disabled state [ 92.756008][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.763873][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.794729][ T6397] Cannot find set identified by id 0 to match [ 92.813994][ T6387] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 92.867606][ T6389] bridge0: port 3(syz_tun) entered blocking state [ 92.874211][ T6389] bridge0: port 3(syz_tun) entered forwarding state [ 92.881295][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.888588][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.896106][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.903429][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.924849][ T6389] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 93.029127][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.190424][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.335932][ T6405] syzkaller1: entered allmulticast mode [ 93.537215][ T6429] x_tables: duplicate underflow at hook 1 [ 93.833641][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.070145][ T6450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.079012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.087746][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.287444][ T6454] netlink: 'syz.2.124': attribute type 12 has an invalid length. [ 94.503079][ T6463] __nla_validate_parse: 2 callbacks suppressed [ 94.503095][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 94.510248][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 94.554278][ T6465] bridge_slave_1: left allmulticast mode [ 94.561396][ T6465] bridge_slave_1: left promiscuous mode [ 94.568031][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.587050][ T6465] bridge_slave_0: left allmulticast mode [ 94.600259][ T6465] bridge_slave_0: left promiscuous mode [ 94.606606][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.085004][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'. [ 95.107840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.118818][ T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.619034][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 95.662760][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 95.747187][ T6521] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.139'. [ 96.058001][ T6536] netlink: 'syz.4.143': attribute type 23 has an invalid length. [ 96.133588][ T6543] syzkaller0: entered promiscuous mode [ 96.150127][ T6545] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 96.175316][ T6543] syzkaller0: entered allmulticast mode [ 96.211780][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 96.255564][ T6546] tipc: Failed to remove unknown binding: 66,1,1/0:2903409195/2903409197 [ 96.290081][ T6546] tipc: Failed to remove unknown binding: 66,1,1/0:2903409195/2903409197 [ 96.324943][ T6546] tipc: Failed to remove unknown binding: 66,1,1/0:2903409195/2903409197 [ 96.535764][ T6543] tipc: Started in network mode [ 96.541105][ T6543] tipc: Node identity 1a7b2d280d2a, cluster identity 4711 [ 96.570481][ T6543] tipc: Enabled bearer , priority 0 [ 96.700026][ T6534] tipc: Resetting bearer [ 96.800147][ T6534] tipc: Disabling bearer [ 96.953946][ T6574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.147'. [ 97.003950][ T6574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.147'. [ 97.149532][ T6570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.164831][ T6580] sctp: [Deprecated]: syz.1.148 (pid 6580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.164831][ T6580] Use struct sctp_sack_info instead [ 97.189519][ T5935] net_ratelimit: 2 callbacks suppressed [ 97.189536][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.226680][ T6574] ip6gretap0: entered promiscuous mode [ 97.244331][ T6574] syz_tun: entered promiscuous mode [ 97.258847][ T6579] netlink: 'syz.4.149': attribute type 10 has an invalid length. [ 97.442028][ T6583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.151'. [ 97.665835][ T6570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.707197][ T6595] Illegal XDP return value 4294967294 on prog (id 88) dev N/A, expect packet loss! [ 97.834611][ T6595] bond1: option arp_validate: invalid value (18446744073491447809) [ 97.859500][ T6595] bond1 (unregistering): Released all slaves [ 97.892150][ T6597] netlink: 'syz.4.154': attribute type 13 has an invalid length. [ 97.915859][ T6570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.019272][ T6597] bridge0: port 3(syz_tun) entered disabled state [ 98.046372][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.053800][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.155678][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.173128][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.243551][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.345442][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.394787][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.504335][ T6570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.570501][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.597874][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.633231][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.781875][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.820693][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.900197][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.924547][ T6633] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 98.926128][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.042047][ T6633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.268002][ T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.759056][ T6672] __nla_validate_parse: 3 callbacks suppressed [ 99.759075][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 99.953761][ T6679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.961087][ T6679] IPv6: NLM_F_CREATE should be set when creating new route [ 99.968381][ T6679] IPv6: NLM_F_CREATE should be set when creating new route [ 99.975608][ T6679] IPv6: NLM_F_CREATE should be set when creating new route [ 100.240692][ T6681] Bluetooth: MGMT ver 1.23 [ 100.309654][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.447793][ T6693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.178'. [ 100.473441][ T6696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.179'. [ 100.473764][ T6693] netlink: 560 bytes leftover after parsing attributes in process `syz.3.178'. [ 101.034582][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 101.292563][ T6723] netlink: 'syz.2.186': attribute type 13 has an invalid length. [ 101.307670][ T6723] netlink: 'syz.2.186': attribute type 17 has an invalid length. [ 101.351290][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.457770][ T6730] netlink: 'syz.0.187': attribute type 13 has an invalid length. [ 101.486301][ T6730] netlink: 'syz.0.187': attribute type 17 has an invalid length. [ 101.667891][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.900087][ T6723] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.907412][ T6723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.915085][ T6723] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.922331][ T6723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.011014][ T6723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.211974][ T6730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.391916][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.439156][ T6761] netlink: 'syz.1.192': attribute type 9 has an invalid length. [ 102.520976][ T6770] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 102.591278][ T6765] netlink: 84 bytes leftover after parsing attributes in process `syz.4.194'. [ 102.624897][ T6765] netlink: 175 bytes leftover after parsing attributes in process `syz.4.194'. [ 102.793371][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.850345][ T6779] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 102.918510][ T6779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.071299][ T6795] bond1: option resend_igmp: invalid value (2878) [ 103.092647][ T6795] bond1: option resend_igmp: allowed values 0 - 255 [ 103.114507][ T6804] xt_hashlimit: max too large, truncated to 1048576 [ 103.133998][ T6795] bond1 (unregistering): Released all slaves [ 103.340101][ T6809] netlink: 211920 bytes leftover after parsing attributes in process `syz.2.207'. [ 103.391534][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 103.409383][ T6817] netlink: 'syz.1.209': attribute type 5 has an invalid length. [ 103.419180][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 103.430169][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.440306][ T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.456158][ T6817] geneve2: entered promiscuous mode [ 103.465601][ T6817] geneve2: entered allmulticast mode [ 103.475457][ T2996] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 103.488140][ T2996] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 103.506952][ T2996] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 103.564741][ T2996] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 103.889428][ T6830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.919393][ T6841] openvswitch: netlink: Message has 8 unknown bytes. [ 103.926172][ T6835] ip6gre1: entered promiscuous mode [ 103.935447][ T6835] ip6gre1: entered allmulticast mode [ 103.943875][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.998663][ T6837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.053221][ T6830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.165181][ T6830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.184638][ T6850] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 104.230788][ T6853] : renamed from bond_slave_0 (while UP) [ 104.319211][ T6830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.407465][ T6858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.467924][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.526919][ T2996] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.560721][ T2996] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.582816][ T2996] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.604249][ T6868] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 104.624843][ T994] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.402249][ T6891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.511255][ T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.549595][ T6897] geneve2: entered promiscuous mode [ 105.575411][ T6897] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 105.643267][ T6901] __nla_validate_parse: 6 callbacks suppressed [ 105.643286][ T6901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.234'. [ 106.120109][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.239'. [ 106.182096][ T6921] netlink: 'syz.3.238': attribute type 13 has an invalid length. [ 106.603465][ T6941] netlink: 'syz.0.246': attribute type 2 has an invalid length. [ 106.622459][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 106.699069][ T6921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.932381][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 106.948642][ T5937] syz1: Port: 1 Link DOWN [ 106.955253][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 106.987855][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.014846][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.045074][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.224774][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.485832][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 107.496159][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 107.506253][ T6978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.254'. [ 107.528295][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.254'. [ 107.563592][ T6978] geneve2: entered promiscuous mode [ 107.576633][ T6978] geneve2: entered allmulticast mode [ 107.588118][ T115] net_ratelimit: 3 callbacks suppressed [ 107.588135][ T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.599026][ T994] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.647449][ T994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.770886][ T994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.807902][ T994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.909628][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.027379][ T6998] bridge0: port 3(hsr0) entered blocking state [ 108.060897][ T6998] bridge0: port 3(hsr0) entered disabled state [ 108.067463][ T6998] hsr0: entered allmulticast mode [ 108.074213][ T6998] hsr_slave_0: entered allmulticast mode [ 108.114071][ T6998] hsr_slave_1: entered allmulticast mode [ 108.160300][ T6998] hsr0: entered promiscuous mode [ 108.170864][ T6998] bridge0: port 3(hsr0) entered blocking state [ 108.177229][ T6998] bridge0: port 3(hsr0) entered forwarding state [ 108.276405][ T7008] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 108.606729][ T7013] bridge0: entered promiscuous mode [ 108.633084][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.774191][ T7013] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 109.000432][ T7027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 109.010992][ T7029] Cannot find add_set index 0 as target [ 109.190543][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.668806][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.722658][ T7059] netlink: 'syz.2.275': attribute type 9 has an invalid length. [ 109.828135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.000773][ T7076] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.020072][ T5937] IPVS: starting estimator thread 0... [ 110.035499][ T7066] can: request_module (can-proto-0) failed. [ 110.118681][ T7085] IPVS: using max 31 ests per chain, 74400 per kthread [ 110.297445][ T7098] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 110.473519][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.598681][ T7108] bridge0: port 3(syz_tun) entered blocking state [ 110.605278][ T7108] bridge0: port 3(syz_tun) entered forwarding state [ 110.631930][ T7108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.640968][ T7108] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.648780][ T7108] __nla_validate_parse: 21 callbacks suppressed [ 110.648797][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 110.667433][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 110.679584][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 110.689874][ T7108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.711852][ T7105] netlink: 'syz.2.288': attribute type 33 has an invalid length. [ 110.719859][ T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.768918][ T7112] veth1: entered promiscuous mode [ 110.774375][ T7112] vlan2: entered promiscuous mode [ 111.131594][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 111.160673][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.299'. [ 111.191517][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 111.291649][ T7135] bridge_slave_1: left allmulticast mode [ 111.297365][ T7135] bridge_slave_1: left promiscuous mode [ 111.415761][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.569535][ T7135] bridge_slave_0: left allmulticast mode [ 111.614811][ T7135] bridge_slave_0: left promiscuous mode [ 111.646274][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.892781][ T7148] batadv1: entered promiscuous mode [ 112.318227][ T30] audit: type=1800 audit(1763845096.035:2): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.312" name="memory.events" dev="tmpfs" ino=285 res=0 errno=0 [ 112.409326][ T30] audit: type=1800 audit(1763845096.045:3): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.312" name="memory.events" dev="tmpfs" ino=285 res=0 errno=0 [ 112.498576][ T30] audit: type=1800 audit(1763845096.045:4): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.312" name="memory.events" dev="tmpfs" ino=285 res=0 errno=0 [ 112.568237][ T7200] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20001 [ 112.586390][ T30] audit: type=1800 audit(1763845096.045:5): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.312" name="memory.events" dev="tmpfs" ino=285 res=0 errno=0 [ 112.648429][ T30] audit: type=1800 audit(1763845096.045:6): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.312" name="memory.events" dev="tmpfs" ino=285 res=0 errno=0 [ 112.669690][ T30] audit: type=1800 audit(1763845096.045:7): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.312" name="memory.events" dev="tmpfs" ino=285 res=0 errno=0 [ 112.692311][ T30] audit: type=1800 audit(1763845096.045:8): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.312" name="memory.events" dev="tmpfs" ino=285 res=0 errno=0 [ 112.718055][ T30] audit: type=1800 audit(1763845096.045:9): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.312" name="memory.events" dev="tmpfs" ino=285 res=0 errno=0 [ 112.789876][ T115] net_ratelimit: 3 callbacks suppressed [ 112.789892][ T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.183653][ T7247] netlink: 'syz.2.324': attribute type 21 has an invalid length. [ 113.200268][ T7247] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.222729][ T7247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.230098][ T7247] IPv6: NLM_F_CREATE should be set when creating new route [ 113.237423][ T7247] IPv6: NLM_F_CREATE should be set when creating new route [ 113.244719][ T7247] IPv6: NLM_F_CREATE should be set when creating new route [ 113.524843][ T7259] netlink: 216 bytes leftover after parsing attributes in process `syz.0.327'. [ 113.536761][ T7259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.327'. [ 113.550042][ T7259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.327'. [ 113.831451][ T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.845011][ T7279] syzkaller0: entered promiscuous mode [ 113.852070][ T7279] syzkaller0: entered allmulticast mode [ 113.994669][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.198953][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 114.587338][ T7313] tipc: Enabled bearer , priority 0 [ 114.654266][ T7317] syzkaller0: entered promiscuous mode [ 114.674899][ T7317] syzkaller0: entered allmulticast mode [ 114.782834][ T7317] tipc: Resetting bearer [ 114.883791][ T7317] tipc: Disabling bearer [ 114.889915][ T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.051049][ T7340] netlink: 'syz.2.350': attribute type 21 has an invalid length. [ 115.121892][ T7343] tipc: Enabled bearer , priority 0 [ 115.129611][ T7343] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 115.137108][ T7343] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 115.500131][ T7356] netlink: 'syz.1.354': attribute type 9 has an invalid length. [ 115.758629][ T7375] __nla_validate_parse: 8 callbacks suppressed [ 115.758647][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.3.360'. [ 115.777687][ T7376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.786359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.795772][ T7376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.804189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.822190][ T7376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.830776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.862143][ T7379] netlink: 48 bytes leftover after parsing attributes in process `syz.1.359'. [ 115.915115][ T7379] syzkaller1: entered promiscuous mode [ 115.921519][ T7379] syzkaller1: entered allmulticast mode [ 116.148587][ T7396] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20004 [ 116.486128][ T115] tipc: Node number set to 391195944 [ 117.007052][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.373'. [ 117.200727][ T7442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.375'. [ 117.340666][ T7447] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 117.357659][ T7447] netlink: 264 bytes leftover after parsing attributes in process `syz.1.378'. [ 117.415584][ T7447] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 117.423395][ T7447] netlink: 264 bytes leftover after parsing attributes in process `syz.1.378'. [ 119.348440][ T5148] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 119.356314][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 119.488242][ T7469] netlink: 'syz.4.384': attribute type 11 has an invalid length. [ 119.496014][ T7469] netlink: 'syz.4.384': attribute type 11 has an invalid length. [ 119.527636][ T7469] netlink: 224 bytes leftover after parsing attributes in process `syz.4.384'. [ 119.761031][ T7489] netlink: 48 bytes leftover after parsing attributes in process `syz.3.386'. [ 120.021994][ T7502] netlink: 'syz.0.391': attribute type 3 has an invalid length. [ 120.093754][ T7512] syz_tun: entered allmulticast mode [ 120.260292][ T7512] net_ratelimit: 2045 callbacks suppressed [ 120.260304][ T7512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.362567][ T7500] syz_tun: left allmulticast mode [ 120.501522][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 120.580577][ T7530] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 120.601993][ T7530] netlink: 224 bytes leftover after parsing attributes in process `syz.2.397'. [ 120.745952][ T7539] netlink: 'syz.4.401': attribute type 9 has an invalid length. [ 120.906072][ T7551] __nla_validate_parse: 1 callbacks suppressed [ 120.906089][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 120.906641][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 121.204962][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 121.366655][ T7583] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 121.537454][ T7591] bond0: (slave bond_slave_0): Releasing backup interface [ 121.582668][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 121.594148][ T7595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.412'. [ 121.635684][ T7591] bond0: (slave bond_slave_1): Releasing backup interface [ 121.646107][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 121.666510][ T7591] team0: Failed to send options change via netlink (err -105) [ 121.674661][ T7591] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 121.685178][ T7591] team0: Port device team_slave_0 removed [ 121.699888][ T7591] team0: Failed to send options change via netlink (err -105) [ 121.709725][ T7591] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 121.722589][ T7591] team0: Port device team_slave_1 removed [ 121.730364][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.739564][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.748939][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.756634][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.770052][ T7591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.796454][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 122.407021][ T7619] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 122.763356][ T7633] syzkaller0: entered promiscuous mode [ 122.768985][ T7633] syzkaller0: entered allmulticast mode [ 122.787823][ T5834] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 122.794367][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 123.159336][ T7654] netlink: 52 bytes leftover after parsing attributes in process `syz.4.426'. [ 123.343345][ T7662] netlink: 'syz.4.428': attribute type 30 has an invalid length. [ 123.351739][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.428'. [ 123.412137][ T7662] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 123.426191][ T7662] bond1 (unregistering): Released all slaves [ 124.066801][ T7678] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.432'. [ 124.317695][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 125.277248][ T7685] syz_tun: entered allmulticast mode [ 125.739107][ T7707] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 126.100483][ T7717] block nbd0: server does not support multiple connections per device. [ 126.115599][ T7717] block nbd0: shutting down sockets [ 127.184472][ T7752] batman_adv: batadv0: Adding interface: vlan2 [ 127.224245][ T7752] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.297818][ T7752] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 127.358206][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 127.442813][ T7762] netlink: 'syz.4.455': attribute type 13 has an invalid length. [ 127.473769][ T7768] dvmrp1: entered allmulticast mode [ 127.479416][ T7762] netlink: 'syz.4.455': attribute type 27 has an invalid length. [ 127.547412][ T7770] netlink: 184 bytes leftover after parsing attributes in process `syz.3.457'. [ 128.494988][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 128.523602][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 128.922375][ T7813] xt_CT: No such helper "netbios-ns" [ 129.386699][ T7842] netlink: 'syz.4.476': attribute type 10 has an invalid length. [ 129.482017][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 129.527675][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 129.544860][ T7850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.479'. [ 129.756751][ T7858] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 129.865932][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 129.868433][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 129.920371][ T7858] bond1: entered promiscuous mode [ 129.926026][ T7858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.947445][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 129.952579][ T7869] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 130.431682][ T7898] tipc: Started in network mode [ 130.436786][ T7898] tipc: Node identity c2c5efdd662a, cluster identity 4711 [ 130.445081][ T7898] tipc: Enabled bearer , priority 0 [ 130.454344][ T7898] syzkaller0: entered promiscuous mode [ 130.476479][ T7898] syzkaller0: entered allmulticast mode [ 130.738680][ T7914] tipc: Enabled bearer , priority 0 [ 130.769007][ T7914] syzkaller0: entered promiscuous mode [ 130.788847][ T7914] syzkaller0: entered allmulticast mode [ 130.942743][ T7914] tipc: Resetting bearer [ 131.116615][ T7913] tipc: Resetting bearer [ 131.133690][ T7913] tipc: Disabling bearer [ 131.454683][ T1211] tipc: Node number set to 2767187933 [ 131.638594][ T7951] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 131.836782][ T7957] netlink: 'syz.2.504': attribute type 12 has an invalid length. [ 132.081317][ T7962] lo: Master is either lo or non-ether device [ 132.118375][ T7957] netlink: 'syz.2.504': attribute type 4 has an invalid length. [ 132.301836][ T7970] vlan0: entered promiscuous mode [ 132.876669][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884118][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.127124][ T7997] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 133.141274][ T7999] syz_tun: entered allmulticast mode [ 133.363336][ T8004] gretap1: entered allmulticast mode [ 133.382125][ T8004] bond2: (slave gretap1): making interface the new active one [ 133.392633][ T8004] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 133.594903][ T8013] __nla_validate_parse: 5 callbacks suppressed [ 133.594917][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 133.714108][ T8013] syzkaller1: entered promiscuous mode [ 133.719865][ T8013] syzkaller1: entered allmulticast mode [ 133.952048][ T8028] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 133.961043][ T8028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.974259][ T8028] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 134.024479][ T8008] infiniband !yz!: set active [ 134.045190][ T8008] infiniband !yz!: added team_slave_0 [ 134.085656][ T8008] !yz!: rxe_create_cq: returned err = -12 [ 134.104635][ T8008] infiniband !yz!: Couldn't create ib_mad CQ [ 134.123995][ T8008] infiniband !yz!: Couldn't open port 1 [ 134.212011][ T8008] RDS/IB: !yz!: added [ 134.229005][ T8008] smc: adding ib device !yz! with port count 1 [ 134.250609][ T8008] smc: ib device !yz! port 1 has no pnetid [ 135.166514][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 135.670068][ T8080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'. [ 135.752696][ T8088] netlink: 120 bytes leftover after parsing attributes in process `syz.1.538'. [ 135.782970][ T8088] netlink: 120 bytes leftover after parsing attributes in process `syz.1.538'. [ 135.957184][ T8096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'. [ 136.109805][ T8100] Set syz0 is full, maxelem 0 reached [ 136.453856][ T8116] geneve1: entered promiscuous mode [ 136.596505][ T8122] netlink: 'syz.4.551': attribute type 16 has an invalid length. [ 136.618644][ T8122] netlink: 'syz.4.551': attribute type 17 has an invalid length. [ 136.783476][ T8122] bridge0: port 3(syz_tun) entered disabled state [ 136.852709][ T8135] bond0: (slave bond_slave_0): Releasing backup interface [ 136.883219][ T8135] bond0: (slave bond_slave_1): Releasing backup interface [ 136.906236][ T8135] team0: Port device team_slave_0 removed [ 136.916424][ T8135] team0: Port device team_slave_1 removed [ 136.922897][ T8135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.931617][ T8135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.948999][ T8131] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 138.992792][ T8182] x_tables: duplicate underflow at hook 1 [ 139.008062][ T8181] x_tables: duplicate underflow at hook 1 [ 139.583873][ T8210] netlink: 'syz.3.570': attribute type 1 has an invalid length. [ 139.599292][ T8210] netlink: 240 bytes leftover after parsing attributes in process `syz.3.570'. [ 141.320678][ T8211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.335784][ T8211] bond0: (slave rose0): Enslaving as an active interface with an up link [ 141.354721][ T8229] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0 [ 141.773915][ T8233] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 141.817913][ T8233] netlink: 228 bytes leftover after parsing attributes in process `syz.1.577'. [ 142.463486][ T8277] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 142.586769][ T8288] delete_channel: no stack [ 142.595069][ T8288] delete_channel: no stack [ 142.620162][ T8277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.629513][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 142.653384][ T8286] bond2: (slave ip6erspan0): making interface the new active one [ 142.674318][ T8286] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 142.694013][ T8269] syzkaller1: entered promiscuous mode [ 142.700706][ T8269] syzkaller1: entered allmulticast mode [ 142.753431][ T8296] team1: entered promiscuous mode [ 142.759420][ T8296] team1: entered allmulticast mode [ 142.765512][ T8296] 8021q: adding VLAN 0 to HW filter on device team1 [ 142.891908][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.591'. [ 143.054378][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 143.066436][ T8319] netlink: 92 bytes leftover after parsing attributes in process `syz.2.595'. [ 143.382080][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 143.410245][ T8334] syzkaller0: entered promiscuous mode [ 143.420983][ T8334] syzkaller0: entered allmulticast mode [ 143.456724][ T8334] macsec1: entered promiscuous mode [ 143.778880][ T8348] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 143.831262][ T8353] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 143.845215][ T8354] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.604'. [ 143.928676][ T8360] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 143.965224][ T8361] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 144.055100][ T8360] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 144.462377][ T8394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.687370][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 144.707184][ T8405] nbd: must specify a size in bytes for the device [ 144.724942][ T8408] netlink: 'syz.4.615': attribute type 3 has an invalid length. [ 144.734157][ T8405] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 144.776386][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 144.810626][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 144.865227][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 144.880255][ T8411] veth5: entered promiscuous mode [ 144.892808][ T8409] block nbd1: Unsupported socket: should be TCP or UNIX. [ 145.236560][ T8435] veth0_macvtap: left promiscuous mode [ 145.317135][ T8438] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 145.317162][ T8439] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 145.404929][ T8447] netlink: 676 bytes leftover after parsing attributes in process `syz.3.622'. [ 145.437713][ T8447] netlink: 676 bytes leftover after parsing attributes in process `syz.3.622'. [ 145.523331][ T8438] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 145.524803][ T8439] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 146.070943][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 146.129482][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 146.966924][ T8510] unsupported nla_type 52263 [ 147.065161][ T8515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.638'. [ 147.129025][ T8509] veth5: entered promiscuous mode [ 147.261797][ T8527] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 147.360098][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 147.482000][ T8527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.558869][ T8527] netlink: 'syz.3.640': attribute type 4 has an invalid length. [ 148.794255][ T8592] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 148.803688][ T8592] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 149.250198][ T8607] syzkaller0: entered promiscuous mode [ 149.255833][ T8607] syzkaller0: entered allmulticast mode [ 149.392258][ T8609] can: request_module (can-proto-0) failed. [ 149.706085][ T8621] __nla_validate_parse: 19 callbacks suppressed [ 149.706105][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 149.723180][ T8629] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 149.738840][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 149.750948][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 149.774354][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 149.831762][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 149.858739][ T8640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 149.902346][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 149.979555][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 150.007821][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 150.043939][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 150.173597][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.181060][ T8621] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.317911][ T8621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.346017][ T8621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.508929][ T7202] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.518562][ T7202] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.535208][ T7202] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.592095][ T7202] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.921282][ T8676] syzkaller1: entered promiscuous mode [ 150.926827][ T8676] syzkaller1: entered allmulticast mode [ 151.198244][ T8686] can: request_module (can-proto-0) failed. [ 151.403246][ T8703] netlink: 'syz.1.681': attribute type 28 has an invalid length. [ 151.775821][ T8718] tipc: Started in network mode [ 151.788337][ T8718] tipc: Node identity 7e285c113b8d, cluster identity 4711 [ 151.795837][ T8718] tipc: Enabled bearer , priority 0 [ 151.818615][ T8718] syzkaller0: entered promiscuous mode [ 151.824240][ T8718] syzkaller0: entered allmulticast mode [ 151.870256][ T8718] tipc: Resetting bearer [ 151.905111][ T8716] tipc: Resetting bearer [ 151.939176][ T8716] tipc: Disabling bearer [ 152.352100][ T8740] syz.3.691 uses old SIOCAX25GETINFO [ 152.378281][ T8741] netlink: 'syz.1.692': attribute type 13 has an invalid length. [ 152.446070][ T7213] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.452830][ T8741] netlink: 'syz.1.692': attribute type 13 has an invalid length. [ 152.480819][ T7213] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.504310][ T7213] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.524261][ T7213] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.330697][ T8775] netlink: 'syz.1.703': attribute type 13 has an invalid length. [ 153.338571][ T8775] netlink: 'syz.1.703': attribute type 17 has an invalid length. [ 153.446309][ T8777] netlink: 'syz.4.704': attribute type 10 has an invalid length. [ 153.500208][ T8784] siw: device registration error -23 [ 153.522353][ T8784] netlink: 'syz.4.704': attribute type 4 has an invalid length. [ 153.593739][ T8775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.635221][ T8777] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.644613][ T8777] bond0: (slave team0): Enslaving as an active interface with an up link [ 154.877369][ T8849] netlink: 'syz.4.725': attribute type 6 has an invalid length. [ 154.889581][ T8849] netlink: 'syz.4.725': attribute type 7 has an invalid length. [ 154.902986][ T8849] netlink: 'syz.4.725': attribute type 8 has an invalid length. [ 155.179736][ T8855] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.660456][ T8868] __nla_validate_parse: 162 callbacks suppressed [ 155.660476][ T8868] netlink: 36 bytes leftover after parsing attributes in process `syz.4.730'. [ 155.706005][ T8865] tipc: Enabling of bearer rejected, already enabled [ 155.784250][ T8865] tipc: Resetting bearer [ 156.141804][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 156.239882][ T8888] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.735'. [ 156.250823][ T8888] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 156.266610][ T8881] geneve0: entered promiscuous mode [ 156.272915][ T8881] geneve0: entered allmulticast mode [ 156.387685][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 156.824736][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.738'. [ 156.835607][ T8895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.919123][ T8900] kthread_run failed with err -4 [ 157.079001][ T24] IPVS: starting estimator thread 0... [ 157.168024][ T8915] IPVS: using max 33 ests per chain, 79200 per kthread [ 157.277117][ T8927] netlink: 'syz.3.746': attribute type 13 has an invalid length. [ 157.308007][ T8927] netlink: 'syz.3.746': attribute type 17 has an invalid length. [ 157.500739][ T8927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.509699][ T8927] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.524585][ T8927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.641619][ T8936] bridge3: entered promiscuous mode [ 157.911043][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 157.942845][ T8948] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 157.967634][ T8947] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 158.140978][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 158.763823][ T8999] sctp: [Deprecated]: syz.3.761 (pid 8999) Use of int in maxseg socket option. [ 158.763823][ T8999] Use struct sctp_assoc_value instead [ 158.859943][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 158.920745][ T9007] netlink: 'syz.4.764': attribute type 39 has an invalid length. [ 159.220734][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'. [ 159.308081][ T9021] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 159.389129][ T9021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.401475][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 159.439706][ T9026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.446901][ T9026] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.458482][ T9026] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 159.507110][ T9021] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 159.515405][ T9021] bond3: (slave wlan0): Opening slave failed [ 159.579587][ T9028] netlink: 72 bytes leftover after parsing attributes in process `syz.4.770'. [ 159.600889][ T9025] syzkaller0: create flow: hash 790965431 index 1 [ 159.713796][ T9029] syzkaller0: delete flow: hash 790965431 index 1 [ 161.710929][ T9086] vti0: entered promiscuous mode [ 162.399907][ T9107] __nla_validate_parse: 2 callbacks suppressed [ 162.399946][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 162.428997][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 162.839788][ T9119] netlink: 'syz.0.791': attribute type 4 has an invalid length. [ 162.940947][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 162.997736][ T9130] netlink: 'syz.4.792': attribute type 30 has an invalid length. [ 163.212901][ T9146] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 163.274885][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.345447][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.370197][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.399805][ T9152] syzkaller1: entered promiscuous mode [ 163.405464][ T9152] syzkaller1: entered allmulticast mode [ 163.427413][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.427671][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 163.497578][ T9154] tipc: Enabled bearer , priority 0 [ 163.530940][ T9160] syzkaller0: entered promiscuous mode [ 163.542465][ T9160] syzkaller0: entered allmulticast mode [ 163.634847][ T9160] tipc: Resetting bearer [ 163.682169][ T9150] tipc: Resetting bearer [ 163.701046][ T9150] tipc: Disabling bearer [ 163.875530][ T9171] syzkaller0: entered promiscuous mode [ 163.883023][ T9171] syzkaller0: entered allmulticast mode [ 164.110634][ T9178] netlink: 88 bytes leftover after parsing attributes in process `syz.4.804'. [ 164.348977][ T9189] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 164.352951][ T9188] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 164.745250][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 164.773722][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 164.799508][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 164.830394][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 164.860970][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 165.337878][ T9232] xfrm1: entered allmulticast mode [ 165.467617][ T9237] vlan0: left promiscuous mode [ 165.480898][ T9237] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 165.496569][ T9237] ip6gre1: left promiscuous mode [ 165.503073][ T9237] ip6gre1: left allmulticast mode [ 165.518634][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 165.525590][ T9237] geneve2: left promiscuous mode [ 165.537397][ T9237] geneve2: left allmulticast mode [ 165.562973][ T9237] tipc: Resetting bearer [ 165.571736][ T9237] syzkaller0: left promiscuous mode [ 165.579490][ T9237] syzkaller0: left allmulticast mode [ 165.686906][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.716905][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.749332][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.773067][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.781044][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.817'. [ 166.000395][ T9257] tap0: tun_chr_ioctl cmd 3223385353 [ 166.035333][ T9258] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.680144][ T9281] netlink: 'syz.0.831': attribute type 13 has an invalid length. [ 167.276776][ T9300] tipc: Enabling of bearer rejected, already enabled [ 167.316079][ T7213] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.346959][ T7213] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.378791][ T7213] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.389250][ T7213] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.773534][ T9321] __nla_validate_parse: 2 callbacks suppressed [ 167.773554][ T9321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.838'. [ 167.843217][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 168.322836][ T9344] batman_adv: batadv0: Adding interface: vlan2 [ 168.397774][ T9344] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.428953][ T9344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.486418][ T9344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.608172][ T9344] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 168.736086][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 168.773950][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 168.802799][ T9366] netlink: 'syz.4.846': attribute type 10 has an invalid length. [ 168.823407][ T9361] netlink: 'syz.3.845': attribute type 1 has an invalid length. [ 168.856335][ T9366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.846'. [ 168.870016][ T9361] netlink: 10 bytes leftover after parsing attributes in process `syz.3.845'. [ 168.896057][ T9361] block nbd1: Unsupported socket: should be TCP or UNIX. [ 168.905112][ T9371] netlink: 'syz.2.847': attribute type 1 has an invalid length. [ 168.977977][ T9366] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 169.103389][ T9376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.110742][ T9376] IPv6: NLM_F_CREATE should be set when creating new route [ 169.117073][ T9371] bond2: entered promiscuous mode [ 169.118021][ T9376] IPv6: NLM_F_CREATE should be set when creating new route [ 169.119285][ T9376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.205473][ T9371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.256892][ T9385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.851'. [ 169.343370][ T9374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.356292][ T9374] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 169.368403][ T9374] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 169.388274][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.851'. [ 169.397084][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.851'. [ 169.439652][ T9374] bond2: (slave wireguard0): making interface the new active one [ 169.453196][ T9374] wireguard0: entered promiscuous mode [ 169.464656][ T9374] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 169.486626][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.852'. [ 169.496208][ T9402] openvswitch: netlink: Flow key attr not present in new flow. [ 169.522142][ T9402] netlink: 'syz.4.852': attribute type 39 has an invalid length. [ 170.158364][ T9425] xt_cgroup: path and classid specified [ 175.081662][ T9499] __nla_validate_parse: 1 callbacks suppressed [ 175.081680][ T9499] netlink: 64 bytes leftover after parsing attributes in process `syz.2.875'. [ 176.001462][ T9534] netlink: 'syz.4.880': attribute type 1 has an invalid length. [ 176.026406][ T9534] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.880'. [ 176.191476][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 176.237873][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 177.273588][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 177.420223][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 177.435286][ T9572] bond0: (slave sit0): Error: Device type is different from other slaves [ 177.470160][ T9583] bond4 (unregistering): Released all slaves [ 177.750889][ T9600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.926020][ T9604] x_tables: duplicate underflow at hook 3 [ 178.042918][ T9611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.899'. [ 178.065306][ T9612] netlink: 'syz.3.899': attribute type 33 has an invalid length. [ 178.143998][ T9615] netlink: 348 bytes leftover after parsing attributes in process `syz.4.901'. [ 178.162282][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'. [ 178.207707][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'. [ 178.294743][ T9622] netlink: 'syz.0.902': attribute type 8 has an invalid length. [ 179.577811][ T9663] netlink: 'syz.2.915': attribute type 1 has an invalid length. [ 179.679631][ T9663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.018157][ T9682] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 180.135855][ T9688] __nla_validate_parse: 4 callbacks suppressed [ 180.135874][ T9688] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.922'. [ 180.329176][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 180.348404][ T9695] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.372091][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 180.475907][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.928'. [ 180.728848][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 180.859341][ T9721] netlink: 88 bytes leftover after parsing attributes in process `syz.2.933'. [ 180.976751][ T9737] netlink: 64 bytes leftover after parsing attributes in process `syz.4.936'. [ 181.140940][ T5883] IPVS: starting estimator thread 0... [ 181.148545][ T9749] syzkaller1: entered promiscuous mode [ 181.154666][ T9749] syzkaller1: entered allmulticast mode [ 181.183285][ T9743] IPVS: Scheduler module ip_vs_sip not found [ 181.278296][ T9746] IPVS: using max 26 ests per chain, 62400 per kthread [ 181.299404][ T9743] IPVS: length: 141 != 8 [ 181.438516][ T9758] netlink: 'syz.0.941': attribute type 9 has an invalid length. [ 181.459339][ T9758] netlink: 'syz.0.941': attribute type 6 has an invalid length. [ 181.529787][ T9760] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.942'. [ 181.609962][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 181.902929][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 181.924827][ T9769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.938968][ T9769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.968074][ T9779] netlink: 'syz.3.948': attribute type 1 has an invalid length. [ 181.990158][ T9777] : entered promiscuous mode [ 182.081500][ T9779] bond4: entered promiscuous mode [ 182.100337][ T9779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.125016][ T9777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.132515][ T9777] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 182.142699][ T9777] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 182.152635][ T9777] bond4: (slave gre1): Opening slave failed [ 182.624295][ T9805] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 183.073161][ T9822] netlink: 'syz.0.957': attribute type 8 has an invalid length. [ 183.080934][ T9822] netlink: 'syz.0.957': attribute type 9 has an invalid length. [ 183.089737][ T9822] netlink: 'syz.0.957': attribute type 10 has an invalid length. [ 183.101519][ T9822] netlink: 'syz.0.957': attribute type 11 has an invalid length. [ 183.342315][ T9824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.362345][ T9824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.387356][ T9824] veth1_to_bond: entered allmulticast mode [ 183.485974][ T9824] bond0: (slave bond_slave_1): Releasing backup interface [ 183.632398][ T9824] veth1_to_bond (unregistering): left allmulticast mode [ 184.195220][ T9863] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 184.444409][ T9875] netlink: 'syz.2.972': attribute type 1 has an invalid length. [ 184.540212][ T9879] openvswitch: netlink: Flow key attr not present in new flow. [ 186.121405][ T9956] netlink: 'syz.3.995': attribute type 29 has an invalid length. [ 186.131115][ T9960] __nla_validate_parse: 11 callbacks suppressed [ 186.131134][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 187.280227][ T9997] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1007'. [ 187.290660][ T9991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1005'. [ 187.306734][ T9991] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1005'. [ 187.318841][ T9991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1005'. [ 187.676185][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1016'. [ 187.868562][T10036] syzkaller0: entered promiscuous mode [ 187.888792][T10036] syzkaller0: entered allmulticast mode [ 187.895943][T10031] tipc: Started in network mode [ 187.913980][T10031] tipc: Node identity 3a4b7d5f6c56, cluster identity 4711 [ 187.934487][T10031] tipc: Enabled bearer , priority 0 [ 188.064524][T10049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1022'. [ 188.098479][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 188.139319][T10031] tipc: Resetting bearer [ 188.172999][T10031] tipc: Disabling bearer [ 188.190416][T10051] hsr0: entered promiscuous mode [ 188.200224][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 188.220021][T10051] hsr_slave_0: left promiscuous mode [ 188.231056][T10051] hsr_slave_1: left promiscuous mode [ 188.282509][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 188.344591][T10051] hsr0 (unregistering): left promiscuous mode [ 188.725886][T10072] netlink: 'syz.4.1029': attribute type 1 has an invalid length. [ 188.776975][T10072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.793209][T10072] netlink: 'syz.4.1029': attribute type 12 has an invalid length. [ 188.927034][T10072] bond2: (slave veth5): Enslaving as an active interface with a down link [ 188.965487][T10076] bond2: entered allmulticast mode [ 188.993388][T10079] netlink: 'syz.0.1030': attribute type 8 has an invalid length. [ 189.619156][T10109] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 190.287362][T10147] lo speed is unknown, defaulting to 1000 [ 190.310583][T10147] lo speed is unknown, defaulting to 1000 [ 190.367961][T10147] lo speed is unknown, defaulting to 1000 [ 190.438767][T10147] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 190.556921][T10147] lo speed is unknown, defaulting to 1000 [ 190.565125][T10147] lo speed is unknown, defaulting to 1000 [ 190.573607][T10147] lo speed is unknown, defaulting to 1000 [ 190.584700][T10147] lo speed is unknown, defaulting to 1000 [ 190.598434][T10147] lo speed is unknown, defaulting to 1000 [ 190.715293][T10159] tipc: Enabled bearer , priority 0 [ 190.733672][T10159] syzkaller0: entered promiscuous mode [ 190.743306][T10159] syzkaller0: entered allmulticast mode [ 190.770732][T10150] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 190.803244][T10158] tipc: Resetting bearer [ 190.854460][T10158] tipc: Disabling bearer [ 191.212110][T10187] netlink: 'syz.3.1060': attribute type 6 has an invalid length. [ 191.336405][T10198] __nla_validate_parse: 14 callbacks suppressed [ 191.336425][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1063'. [ 191.459025][T10197] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1064'. [ 191.492536][T10201] netlink: 'syz.1.1066': attribute type 8 has an invalid length. [ 191.529397][T10201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.554552][T10213] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 191.661220][T10216] team0: Port device bridge4 added [ 191.669178][T10216] bridge0: port 3(team0) entered blocking state [ 191.675719][T10216] bridge0: port 3(team0) entered disabled state [ 191.683752][T10216] team0: entered allmulticast mode [ 191.690004][T10216] team_slave_0: entered allmulticast mode [ 191.695900][T10216] team_slave_1: entered allmulticast mode [ 191.702283][T10216] bridge4: entered allmulticast mode [ 191.710188][T10216] team0: entered promiscuous mode [ 191.715473][T10216] team_slave_0: entered promiscuous mode [ 191.722165][T10216] team_slave_1: entered promiscuous mode [ 191.728524][T10216] bridge4: entered promiscuous mode [ 191.849469][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1072'. [ 191.920054][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 191.929831][T10227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.059135][T10238] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 192.069008][T10238] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 192.114882][T10240] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20002 [ 192.533369][T10255] netlink: 'syz.0.1080': attribute type 23 has an invalid length. [ 193.159106][T10273] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 193.213902][T10273] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.563368][T10284] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 193.808480][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 193.830182][T10291] block nbd1: Unsupported socket: should be TCP or UNIX. [ 194.215429][T10303] vlan2: entered promiscuous mode [ 194.232162][T10303] vlan2: entered allmulticast mode [ 194.315072][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.321606][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.563037][T10314] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1101'. [ 195.270963][T10338] syzkaller0: entered promiscuous mode [ 195.276736][T10338] syzkaller0: entered allmulticast mode [ 195.610971][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 196.091141][T10370] netlink: 15926 bytes leftover after parsing attributes in process `syz.0.1119'. [ 196.271059][T10380] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1120'. [ 196.646475][T10387] netlink: 'syz.2.1125': attribute type 13 has an invalid length. [ 196.665354][T10387] netlink: 'syz.2.1125': attribute type 17 has an invalid length. [ 196.672522][T10391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1127'. [ 196.699284][T10391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.970415][T10387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.001001][T10387] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.032755][T10387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.084997][T10405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1128'. [ 197.359818][T10417] pim6reg1: entered promiscuous mode [ 197.370128][T10417] pim6reg1: entered allmulticast mode [ 197.626268][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1138'. [ 197.696313][T10433] lo: entered promiscuous mode [ 198.232483][T10445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1144'. [ 198.313336][T10450] Bluetooth: MGMT ver 1.23 [ 198.367845][T10450] geneve3: entered promiscuous mode [ 198.388616][ T9489] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.417665][ T9489] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.471772][ T9489] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.487939][ T9489] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.589760][T10455] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1147'. [ 198.629671][T10461] pim6reg1: entered promiscuous mode [ 198.635011][T10461] pim6reg1: entered allmulticast mode [ 199.121228][T10470] netlink: 'syz.2.1150': attribute type 6 has an invalid length. [ 199.325234][T10482] tap0: tun_chr_ioctl cmd 2148553947 [ 199.334254][T10482] tap0: tun_chr_ioctl cmd 2147767521 [ 199.346245][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 199.367394][T10482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.380473][T10483] netlink: 'syz.0.1152': attribute type 13 has an invalid length. [ 199.388596][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'. [ 199.421743][T10482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.474557][T10482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.483364][T10482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.526889][T10490] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 199.636851][T10490] bond3: entered promiscuous mode [ 199.660491][T10490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.707372][T10492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.715016][T10492] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 199.725336][T10492] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 199.738966][T10492] bond3: (slave gre1): making interface the new active one [ 199.746441][T10492] gre1: entered promiscuous mode [ 199.753609][T10492] bond3: (slave gre1): Enslaving as an active interface with an up link [ 199.774963][T10472] lo speed is unknown, defaulting to 1000 [ 200.177608][T10510] x_tables: duplicate underflow at hook 1 [ 200.382876][T10520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1163'. [ 200.517955][T10526] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 200.545818][ T30] audit: type=1800 audit(1763845184.265:10): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1165" name=CB dev="tmpfs" ino=1381 res=0 errno=0 [ 200.741197][T10532] syzkaller0: entered promiscuous mode [ 200.746791][T10532] syzkaller0: entered allmulticast mode [ 200.764298][T10534] netlink: 'syz.3.1168': attribute type 83 has an invalid length. [ 200.809911][T10536] batadv_slave_1: entered promiscuous mode [ 200.985926][T10547] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 201.192420][T10563] netlink: 'syz.1.1175': attribute type 5 has an invalid length. [ 201.508145][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 201.524215][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 201.526119][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 202.474521][T10536] batadv_slave_1: left promiscuous mode [ 202.507188][T10557] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 202.516950][T10560] veth1_to_bond: entered allmulticast mode [ 202.528535][T10567] veth1_to_bond: entered promiscuous mode [ 202.534792][T10567] veth1_to_bond: left promiscuous mode [ 202.547844][T10567] veth1_to_bond: left allmulticast mode [ 202.747200][T10583] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 202.815952][T10586] netlink: 'syz.1.1177': attribute type 15 has an invalid length. [ 202.865820][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 203.135950][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 203.162479][T10586] syzkaller1: entered promiscuous mode [ 203.179714][T10586] syzkaller1: entered allmulticast mode [ 203.328332][T10609] smc: net device bond0 applied user defined pnetid SYZ2 [ 203.357963][T10609] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1186'. [ 203.526635][T10619] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 203.598819][T10609] smc: removing net device bond0 with user defined pnetid SYZ2 [ 203.607167][T10609] bond0 (unregistering): left promiscuous mode [ 203.614393][T10609] bond_slave_0: left promiscuous mode [ 203.620937][T10609] bond_slave_1: left promiscuous mode [ 203.627956][T10609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.638909][T10609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.648360][T10609] bond0 (unregistering): Released all slaves [ 203.691552][T10619] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.762481][T10620] bond5: (slave geneve3): making interface the new active one [ 203.797864][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1189'. [ 203.826745][T10620] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 203.866550][ T9479] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.875451][T10625] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 203.904637][ T9479] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.940166][ T9479] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.958238][ T9479] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.102804][T10641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.131961][T10650] trusted_key: syz.3.1197 sent an empty control message without MSG_MORE. [ 204.402021][T10661] netlink: 'syz.3.1201': attribute type 10 has an invalid length. [ 204.425838][T10661] team0: Cannot enslave team device to itself [ 204.437416][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 204.641535][T10671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1204'. [ 204.991216][T10668] lo speed is unknown, defaulting to 1000 [ 205.419304][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 205.572018][T10701] syz_tun: left allmulticast mode [ 205.583699][T10701] syz_tun: left promiscuous mode [ 205.590159][T10701] bridge0: port 3(syz_tun) entered disabled state [ 205.699338][T10701] bridge_slave_1: left allmulticast mode [ 205.723760][T10701] bridge_slave_1: left promiscuous mode [ 205.739543][T10701] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.770890][T10701] bridge_slave_0: left allmulticast mode [ 205.776759][T10701] bridge_slave_0: left promiscuous mode [ 205.783755][T10701] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.805624][T10701] bond0: (slave bridge0): Releasing backup interface [ 205.863107][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'. [ 206.098286][T10734] IPv6: NLM_F_REPLACE set, but no existing node found! [ 206.202867][T10732] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.243921][T10739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1221'. [ 206.316274][T10732] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.360270][T10746] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 206.385455][T10732] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.427370][T10750] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 206.455274][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1222'. [ 206.546180][T10732] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.677291][ T9489] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.713098][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.776697][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.797647][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.923136][T10758] pimreg: entered allmulticast mode [ 206.934233][T10757] pimreg: left allmulticast mode [ 206.979705][T10765] tipc: Enabled bearer , priority 0 [ 206.988158][T10765] syzkaller0: entered promiscuous mode [ 206.994021][T10765] syzkaller0: entered allmulticast mode [ 207.042304][T10765] tipc: Resetting bearer [ 207.053188][T10763] tipc: Resetting bearer [ 207.095767][T10763] tipc: Disabling bearer [ 207.104878][T10777] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 207.122675][T10778] netlink: 'syz.3.1232': attribute type 2 has an invalid length. [ 207.266628][T10782] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 207.298419][T10783] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 207.311042][T10783] syzkaller1: linktype set to 768 [ 207.653403][T10799] netlink: 'syz.2.1235': attribute type 12 has an invalid length. [ 207.792644][T10803] validate_nla: 2 callbacks suppressed [ 207.792665][T10803] netlink: 'syz.3.1239': attribute type 1 has an invalid length. [ 208.031944][T10807] __nla_validate_parse: 1 callbacks suppressed [ 208.031963][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 208.409141][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 208.426162][T10817] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1244'. [ 208.430830][T10815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1243'. [ 208.485403][T10822] openvswitch: netlink: nsh attr 0 has unexpected len 16 expected 0 [ 208.495135][T10822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.531842][T10815] veth5: entered promiscuous mode [ 208.579680][T10823] erspan0: entered allmulticast mode [ 208.658818][T10802] lo speed is unknown, defaulting to 1000 [ 208.842651][T10831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1249'. [ 208.965146][T10835] macvtap1: entered promiscuous mode [ 208.976644][T10835] syz_tun: entered promiscuous mode [ 208.990885][T10835] syz_tun: left promiscuous mode [ 209.328237][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 209.740753][T10867] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.1258'. [ 209.865023][T10875] netlink: 4308 bytes leftover after parsing attributes in process `syz.4.1262'. [ 209.871632][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'. [ 210.005329][T10880] tipc: Enabling of bearer rejected, failed to enable media [ 210.041166][T10859] lo speed is unknown, defaulting to 1000 [ 210.307020][T10896] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1269'. [ 210.548992][T10908] netlink: 'syz.2.1273': attribute type 14 has an invalid length. [ 211.387196][T10940] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 211.402829][T10940] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 212.694473][T10919] lo speed is unknown, defaulting to 1000 [ 213.406774][T10978] __nla_validate_parse: 4 callbacks suppressed [ 213.406794][T10978] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1293'. [ 213.449344][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 213.469813][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 213.493649][T10981] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1293'. [ 213.505744][T10974] lo speed is unknown, defaulting to 1000 [ 213.789582][T10994] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1297'. [ 213.837744][T10994] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1297'. [ 213.847228][T10994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1297'. [ 214.197202][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 214.246533][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'. [ 214.328802][T11016] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 214.428292][T11008] syzkaller1: entered promiscuous mode [ 214.461040][T11008] syzkaller1: entered allmulticast mode [ 214.840223][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'. [ 214.889721][T11027] netlink: 'syz.2.1304': attribute type 1 has an invalid length. [ 215.065854][T11027] smc: adding net device bond0 with user defined pnetid SYZ2 [ 215.183677][T11032] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 215.226910][T11032] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 215.458633][T11006] lo speed is unknown, defaulting to 1000 [ 215.733416][T11060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.769483][T11062] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 215.814398][T11062] NCSI netlink: No device for ifindex 0 [ 216.091737][T11072] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 216.762801][T11066] lo speed is unknown, defaulting to 1000 [ 216.916968][T11056] lo speed is unknown, defaulting to 1000 [ 217.178820][T11095] netlink: 'syz.4.1317': attribute type 10 has an invalid length. [ 217.209395][T11095] siw: device registration error -23 [ 217.860862][T11106] ip6tnl2: entered allmulticast mode [ 218.610915][T11119] __nla_validate_parse: 14 callbacks suppressed [ 218.610935][T11119] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1325'. [ 218.965960][T11130] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1330'. [ 219.103003][T11135] Bluetooth: MGMT ver 1.23 [ 219.308285][T11143] netlink: 'syz.1.1333': attribute type 8 has an invalid length. [ 219.329354][T11143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.416429][T11150] sctp: [Deprecated]: syz.4.1336 (pid 11150) Use of int in maxseg socket option. [ 219.416429][T11150] Use struct sctp_assoc_value instead [ 219.436218][T11151] netlink: 'syz.2.1335': attribute type 30 has an invalid length. [ 219.441210][T11150] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1336'. [ 219.453974][T11150] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 219.478174][T11151] bond4: option arp_missed_max: invalid value (0) [ 219.485911][T11151] bond4: option arp_missed_max: allowed values 1 - 255 [ 219.498849][T11151] bond4 (unregistering): Released all slaves [ 219.717223][T11167] netlink: 'syz.3.1341': attribute type 8 has an invalid length. [ 220.159747][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 220.225862][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1344'. [ 220.256846][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1344'. [ 220.330125][T11163] lo speed is unknown, defaulting to 1000 [ 220.399967][T11194] netlink: 'syz.2.1346': attribute type 1 has an invalid length. [ 220.450392][T11197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1346'. [ 220.541500][T11197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.549028][T11178] delete_channel: no stack [ 220.599571][T11190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.632955][T11190] bond4: (slave geneve3): making interface the new active one [ 220.658361][T11190] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 220.698737][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 220.710011][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 220.719534][T11161] lo speed is unknown, defaulting to 1000 [ 220.742223][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 220.760892][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 221.357074][T11167] lo speed is unknown, defaulting to 1000 [ 221.466545][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'. [ 221.888974][T11223] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1353'. [ 222.073379][T11230] tipc: Enabling of bearer rejected, failed to enable media [ 222.128544][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 222.150828][ T9489] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.167532][ T9489] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.208133][ T9489] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.221330][ T9489] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.849540][T11261] xt_hashlimit: max too large, truncated to 1048576 [ 223.244510][T11258] lo speed is unknown, defaulting to 1000 [ 223.539675][ T8657] IPVS: starting estimator thread 0... [ 223.630827][T11288] IPVS: using max 33 ests per chain, 79200 per kthread [ 223.699475][T11294] netlink: 'syz.0.1377': attribute type 10 has an invalid length. [ 223.738531][T11295] siw: device registration error -23 [ 223.924579][T11310] __nla_validate_parse: 4 callbacks suppressed [ 223.924598][T11310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1381'. [ 223.940684][T11310] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1381'. [ 223.943047][T11300] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 223.974485][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 224.040715][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 224.541760][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1387'. [ 224.554581][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1387'. [ 224.566423][T11333] netlink: 'syz.4.1387': attribute type 10 has an invalid length. [ 224.574918][T11333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1387'. [ 224.584391][T11333] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 224.757509][ T5834] Bluetooth: hci4: link tx timeout [ 224.763079][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.885486][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 225.079800][T11360] netlink: 'syz.2.1397': attribute type 10 has an invalid length. [ 225.324204][T11376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1402'. [ 225.410773][T11381] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1403'. [ 225.620544][T11394] sctp: [Deprecated]: syz.0.1404 (pid 11394) Use of int in maxseg socket option. [ 225.620544][T11394] Use struct sctp_assoc_value instead [ 225.692341][ T30] audit: type=1804 audit(1763845209.415:11): pid=11391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1405" name="/newroot/329/cgroup.controllers" dev="tmpfs" ino=1712 res=1 errno=0 [ 225.774237][ T30] audit: type=1800 audit(1763845209.435:12): pid=11391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1405" name="cgroup.controllers" dev="tmpfs" ino=1712 res=0 errno=0 [ 225.833377][ T30] audit: type=1800 audit(1763845209.435:13): pid=11391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1405" name="cgroup.controllers" dev="tmpfs" ino=1712 res=0 errno=0 [ 226.021456][T11407] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 226.537726][T11429] nbd0: detected capacity change from 0 to 63 [ 226.560931][T11433] block nbd0: NBD_DISCONNECT [ 226.583050][T11433] block nbd0: Disconnected due to user request. [ 226.596647][T11437] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 226.615098][T11433] block nbd0: shutting down sockets [ 226.617771][T11437] bridge5: entered allmulticast mode [ 226.788323][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 227.087995][T11425] lo speed is unknown, defaulting to 1000 [ 227.700647][T11465] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.091908][T11465] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.170275][T11465] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.262286][T11465] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.426786][ T7213] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.477649][ T7213] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.512043][ T7213] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.545168][ T9485] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.675371][T11501] Bluetooth: MGMT ver 1.23 [ 228.682074][T11501] netlink: 'syz.4.1432': attribute type 21 has an invalid length. [ 228.690275][T11501] netlink: 'syz.4.1432': attribute type 5 has an invalid length. [ 228.705356][T11501] netlink: 'syz.4.1432': attribute type 6 has an invalid length. [ 228.753618][T11466] lo speed is unknown, defaulting to 1000 [ 228.959603][T11509] netlink: 'syz.4.1435': attribute type 21 has an invalid length. [ 228.968622][T11509] __nla_validate_parse: 8 callbacks suppressed [ 228.968639][T11509] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1435'. [ 228.985568][T11509] netlink: 'syz.4.1435': attribute type 5 has an invalid length. [ 229.014786][T11509] netlink: 'syz.4.1435': attribute type 6 has an invalid length. [ 229.037563][T11509] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1435'. [ 229.403847][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 229.494690][T11527] pim6reg99999999: entered allmulticast mode [ 229.822148][T11538] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.910514][T11538] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.966426][T11538] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.052081][T11538] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.200000][T11533] lo speed is unknown, defaulting to 1000 [ 230.385127][ T9485] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.494458][ T9485] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.586875][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.651239][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.824785][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1451'. [ 231.020525][T11593] syzkaller0: entered promiscuous mode [ 231.047682][T11593] syzkaller0: entered allmulticast mode [ 231.277768][T11602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1457'. [ 231.463372][T11561] lo speed is unknown, defaulting to 1000 [ 232.040211][T11631] bridge3: entered allmulticast mode [ 232.579970][T11639] netlink: 'syz.0.1471': attribute type 1 has an invalid length. [ 232.682366][T11639] bond6 (unregistering): Released all slaves [ 232.789095][T11641] batman_adv: batadv0: Removing interface: vlan2 [ 232.812992][T11647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1473'. [ 233.119506][T11659] raw_sendmsg: syz.4.1475 forgot to set AF_INET. Fix it! [ 233.143513][T11650] syzkaller1: entered promiscuous mode [ 233.149241][T11650] syzkaller1: entered allmulticast mode [ 233.276327][T11662] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1479'. [ 233.308167][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 233.575487][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 233.736259][T11672] netlink: 'syz.0.1482': attribute type 11 has an invalid length. [ 233.876430][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 234.024434][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 234.035040][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 234.173226][T11684] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.181647][T11684] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 234.281166][T11693] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1487'. [ 234.355252][T11693] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1487'. [ 234.400300][T11699] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 234.743963][T11715] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1493'. [ 234.965150][T11724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1497'. [ 235.005098][T11727] batadv1: entered promiscuous mode [ 235.132225][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 235.716003][T11734] lo speed is unknown, defaulting to 1000 [ 236.091914][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 236.213610][T11760] bridge4: port 1(veth9) entered blocking state [ 236.228105][T11760] bridge4: port 1(veth9) entered disabled state [ 236.263175][T11760] veth9: entered allmulticast mode [ 236.283977][T11760] veth9: entered promiscuous mode [ 236.305066][T11767] bridge4: port 2(veth0_to_bond) entered blocking state [ 236.314338][T11767] bridge4: port 2(veth0_to_bond) entered disabled state [ 236.339625][T11767] veth0_to_bond: entered allmulticast mode [ 236.366149][T11767] veth0_to_bond: entered promiscuous mode [ 236.426239][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 236.534168][T11769] bridge4: port 3(veth11) entered blocking state [ 236.554324][T11769] bridge4: port 3(veth11) entered disabled state [ 236.583037][T11769] veth11: entered allmulticast mode [ 236.626656][T11769] veth11: entered promiscuous mode [ 236.645110][T11763] tap0: tun_chr_ioctl cmd 1074025677 [ 236.710842][T11763] tap0: linktype set to 776 [ 236.726075][T11773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1510'. [ 237.310313][T11788] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 237.504005][T11788] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.605753][T11791] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.633399][T11791] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 237.702207][T11791] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 237.763823][T11793] veth13: entered promiscuous mode [ 237.781694][T11801] netlink: 'syz.2.1518': attribute type 30 has an invalid length. [ 237.792535][T11793] bond7: (slave veth13): Enslaving as an active interface with a down link [ 238.135683][T11814] tipc: Enabled bearer , priority 0 [ 238.137764][T11813] x_tables: duplicate underflow at hook 1 [ 238.301690][T11629] Set syz1 is full, maxelem 65536 reached [ 238.311271][T11814] syzkaller0: entered promiscuous mode [ 238.328944][T11814] syzkaller0: entered allmulticast mode [ 238.337911][T11787] lo speed is unknown, defaulting to 1000 [ 238.360266][T11815] tipc: Resetting bearer [ 240.166590][T11815] tipc: Disabling bearer [ 240.202089][T11828] syz.2.1524: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 240.220920][T11828] CPU: 1 UID: 0 PID: 11828 Comm: syz.2.1524 Not tainted syzkaller #0 PREEMPT(full) [ 240.220948][T11828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.220968][T11828] Call Trace: [ 240.220977][T11828] [ 240.220985][T11828] dump_stack_lvl+0x189/0x250 [ 240.221032][T11828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.221062][T11828] ? __pfx__printk+0x10/0x10 [ 240.221084][T11828] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 240.221114][T11828] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 240.221144][T11828] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 240.221176][T11828] warn_alloc+0x214/0x310 [ 240.221214][T11828] ? __pfx_warn_alloc+0x10/0x10 [ 240.221255][T11828] ? __get_vm_area_node+0x28f/0x300 [ 240.221285][T11828] ? xp_create_and_assign_umem+0x197/0xd10 [ 240.221313][T11828] __vmalloc_node_range_noprof+0x690/0x12d0 [ 240.221375][T11828] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.221402][T11828] ? xp_create_and_assign_umem+0x197/0xd10 [ 240.221428][T11828] ? rcu_is_watching+0x15/0xb0 [ 240.221452][T11828] ? xp_create_and_assign_umem+0x197/0xd10 [ 240.221475][T11828] __kvmalloc_node_noprof+0x674/0x910 [ 240.221505][T11828] ? xp_create_and_assign_umem+0x197/0xd10 [ 240.221528][T11828] ? xp_create_and_assign_umem+0xa9/0xd10 [ 240.221558][T11828] xp_create_and_assign_umem+0x197/0xd10 [ 240.221592][T11828] ? dev_get_by_index+0x22/0x2e0 [ 240.221618][T11828] ? dev_get_by_index+0x22/0x2e0 [ 240.221653][T11828] xsk_bind+0x42d/0xf90 [ 240.221682][T11828] ? apparmor_socket_bind+0xff/0x1e0 [ 240.221718][T11828] __sys_bind+0x2c6/0x3e0 [ 240.221741][T11828] ? __pfx___sys_bind+0x10/0x10 [ 240.221779][T11828] ? rcu_is_watching+0x15/0xb0 [ 240.221813][T11828] __x64_sys_bind+0x7a/0x90 [ 240.221834][T11828] do_syscall_64+0xfa/0xfa0 [ 240.221854][T11828] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.221876][T11828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.221896][T11828] ? clear_bhb_loop+0x60/0xb0 [ 240.221922][T11828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.221942][T11828] RIP: 0033:0x7f0f3638f749 [ 240.221968][T11828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.221986][T11828] RSP: 002b:00007f0f371eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 240.222009][T11828] RAX: ffffffffffffffda RBX: 00007f0f365e6090 RCX: 00007f0f3638f749 [ 240.222025][T11828] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 240.222039][T11828] RBP: 00007f0f36413f91 R08: 0000000000000000 R09: 0000000000000000 [ 240.222052][T11828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.222065][T11828] R13: 00007f0f365e6128 R14: 00007f0f365e6090 R15: 00007fff849f1188 [ 240.222100][T11828] [ 240.222112][T11828] Mem-Info: [ 240.395416][T11847] __nla_validate_parse: 3 callbacks suppressed [ 240.395490][T11847] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1531'. [ 240.400409][T11828] active_anon:5950 inactive_anon:0 isolated_anon:0 [ 240.400409][T11828] active_file:3338 inactive_file:39948 isolated_file:0 [ 240.400409][T11828] unevictable:768 dirty:73 writeback:0 [ 240.400409][T11828] slab_reclaimable:12117 slab_unreclaimable:234060 [ 240.400409][T11828] mapped:30277 shmem:1361 pagetables:1262 [ 240.400409][T11828] sec_pagetables:0 bounce:0 [ 240.400409][T11828] kernel_misc_reclaimable:0 [ 240.400409][T11828] free:1179828 free_pcp:17727 free_cma:0 [ 240.559713][T11828] Node 0 active_anon:23800kB inactive_anon:0kB active_file:13352kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121108kB dirty:292kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13928kB pagetables:4828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.591822][T11828] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.622211][T11828] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.652704][T11828] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 240.658759][T11828] Node 0 DMA32 free:814656kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23800kB inactive_anon:0kB active_file:13352kB inactive_file:159592kB unevictable:1536kB writepending:292kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:52248kB local_pcp:27012kB free_cma:0kB [ 240.692429][T11828] lowmem_reserve[]: 0 0 0 0 0 [ 240.697202][T11828] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.726729][T11828] lowmem_reserve[]: 0 0 0 0 0 [ 240.731712][T11828] Node 1 Normal free:3889296kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18992kB local_pcp:8772kB free_cma:0kB [ 240.764253][T11828] lowmem_reserve[]: 0 0 0 0 0 [ 240.769296][T11828] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.782234][T11828] Node 0 DMA32: 152*4kB (UM) 368*8kB (UM) 210*16kB (UM) 150*32kB (UME) 104*64kB (UME) 63*128kB (UM) 29*256kB (ME) 13*512kB (UM) 8*1024kB (UME) 4*2048kB (UME) 185*4096kB (UM) = 814656kB [ 240.801071][T11828] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 240.813736][T11828] Node 1 Normal: 188*4kB (UE) 50*8kB (UME) 43*16kB (UME) 63*32kB (UME) 20*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3889296kB [ 240.831987][T11828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.841752][T11828] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.851099][T11828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.860866][T11828] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.870317][T11828] 44645 total pagecache pages [ 240.875006][T11828] 0 pages in swap cache [ 240.879314][T11828] Free swap = 124996kB [ 240.883475][T11828] Total swap = 124996kB [ 240.887682][T11828] 2097051 pages RAM [ 240.891489][T11828] 0 pages HighMem/MovableOnly [ 240.896152][T11828] 424134 pages reserved [ 240.901214][T11828] 0 pages cma reserved [ 240.936147][ T24] tipc: Node number set to 1168464913 [ 241.175299][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1534'. [ 241.583350][T11878] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1538'. [ 241.603972][T11861] lo speed is unknown, defaulting to 1000 [ 242.170886][T11903] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1546'. [ 242.262813][T11907] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1547'. [ 242.294960][T11907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1547'. [ 242.317670][T11909] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1549'. [ 242.335878][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1547'. [ 242.406964][T11907] openvswitch: netlink: IP tunnel dst address not specified [ 243.062670][T11940] netlink: 'syz.2.1558': attribute type 54 has an invalid length. [ 243.409590][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 243.480749][T11946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1561'. [ 243.522034][T11954] batadv0: entered promiscuous mode [ 243.529267][T11954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.566306][T11954] batadv0: left promiscuous mode [ 244.036375][T11984] gre0: mtu less than device minimum [ 244.183086][T11956] lo speed is unknown, defaulting to 1000 [ 244.235225][T11991] netlink: 'syz.2.1576': attribute type 6 has an invalid length. [ 244.640638][T12007] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 244.686315][T12006] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 244.698877][T12006] bond6 (unregistering): Released all slaves [ 244.710851][T12015] netlink: 'syz.1.1580': attribute type 16 has an invalid length. [ 244.748894][T12007] bond6 (unregistering): (slave geneve4): Releasing backup interface [ 244.774668][T12007] bond6 (unregistering): Released all slaves [ 245.527833][T12011] lo speed is unknown, defaulting to 1000 [ 245.669991][T12045] __nla_validate_parse: 8 callbacks suppressed [ 245.670011][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'. [ 245.766122][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'. [ 245.783216][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 246.038040][T12056] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1589'. [ 246.057829][T12056] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1589'. [ 246.123688][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 246.217252][T12043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1586'. [ 246.458709][T12077] netlink: 'syz.0.1595': attribute type 83 has an invalid length. [ 246.611002][T12079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1596'. [ 246.627763][T12079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1596'. [ 246.636757][T12079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1596'. [ 247.217369][T12112] bridge0: entered promiscuous mode [ 247.224941][T12112] bridge0: port 4(macvtap1) entered blocking state [ 247.231973][T12112] bridge0: port 4(macvtap1) entered disabled state [ 247.240011][T12112] macvtap1: entered allmulticast mode [ 247.246276][T12112] bridge0: entered allmulticast mode [ 247.259140][T12112] macvtap1: left allmulticast mode [ 247.264774][T12112] bridge0: left allmulticast mode [ 247.274071][T12112] bridge0: left promiscuous mode [ 248.127600][T12143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.214687][T12150] openvswitch: netlink: Message has 75 unknown bytes. [ 248.290122][T12153] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 248.352961][T12154] bridge5: entered promiscuous mode [ 248.359300][ T9487] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 248.392508][ T9487] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 248.437847][ T9487] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 248.446165][ T9487] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 248.489347][T12165] netlink: 'syz.1.1623': attribute type 2 has an invalid length. [ 248.504977][T12165] netlink: 'syz.1.1623': attribute type 5 has an invalid length. [ 248.829054][T12184] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 248.868830][T12184] 8021q: adding VLAN 0 to HW filter on device bond9 [ 248.898756][T12184] 8021q: adding VLAN 0 to HW filter on device bond9 [ 248.908210][T12184] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 248.920801][T12184] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 248.967293][T12190] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 249.154287][T12192] veth15: entered promiscuous mode [ 249.179119][T12192] bond9: (slave veth15): Enslaving as an active interface with a down link [ 249.399176][T12204] netlink: 'syz.4.1634': attribute type 26 has an invalid length. [ 249.445445][T12204] --map-set only usable from mangle table [ 249.559991][T12188] lo speed is unknown, defaulting to 1000 [ 249.858157][T12226] netlink: 'syz.0.1639': attribute type 54 has an invalid length. [ 250.480817][T12251] x_tables: duplicate underflow at hook 2 [ 250.571439][T12257] pim6reg1: entered promiscuous mode [ 250.582315][T12257] pim6reg1: entered allmulticast mode [ 250.642653][T12266] netlink: 'syz.4.1651': attribute type 54 has an invalid length. [ 250.744401][T12256] delete_channel: no stack [ 250.767307][T12256] delete_channel: no stack [ 250.988268][T12278] __nla_validate_parse: 146 callbacks suppressed [ 250.988288][T12278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1653'. [ 251.381169][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 251.398393][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 251.502239][T12305] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1659'. [ 251.627726][T12296] lo speed is unknown, defaulting to 1000 [ 251.724319][T12311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1661'. [ 251.740101][T12311] openvswitch: netlink: Flow key attr not present in new flow. [ 251.752534][T12311] tipc: Enabling of bearer rejected, failed to enable media [ 252.498930][T12349] netlink: 'syz.2.1671': attribute type 1 has an invalid length. [ 252.588444][T12349] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.672459][T12351] veth7: entered promiscuous mode [ 252.687262][T12351] bond7: (slave veth7): Enslaving as an active interface with a down link [ 252.700725][T12340] lo speed is unknown, defaulting to 1000 [ 253.298581][T12384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1682'. [ 253.425066][T12392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.581976][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1686'. [ 253.637010][T12397] bridge6: port 1(ip6gretap2) entered blocking state [ 253.644087][T12397] bridge6: port 1(ip6gretap2) entered disabled state [ 253.651694][T12397] ip6gretap2: entered allmulticast mode [ 253.659823][T12397] ip6gretap2: entered promiscuous mode [ 253.699488][T12397] bridge6: port 2(veth7) entered blocking state [ 253.705998][T12397] bridge6: port 2(veth7) entered disabled state [ 253.712807][T12397] veth7: entered allmulticast mode [ 253.720621][T12397] veth7: entered promiscuous mode [ 253.727049][T12397] bridge6: port 2(veth7) entered blocking state [ 253.734155][T12397] bridge6: port 2(veth7) entered forwarding state [ 253.764464][ T9485] bridge6: port 2(veth7) entered disabled state [ 254.108948][T12427] pim6reg1: entered allmulticast mode [ 254.194804][T12434] veth0_to_bond: left allmulticast mode [ 254.205655][T12434] veth0_to_bond: left promiscuous mode [ 254.221833][T12434] bridge4: port 2(veth0_to_bond) entered disabled state [ 254.257097][T12434] bond0: (slave bond1): Releasing backup interface [ 254.314417][T12434] veth9: left allmulticast mode [ 254.327712][T12434] veth9: left promiscuous mode [ 254.338395][T12434] bridge4: port 1(veth9) entered disabled state [ 254.360264][T12449] netlink: 'syz.4.1700': attribute type 9 has an invalid length. [ 254.360367][T12434] veth11: left allmulticast mode [ 254.389553][T12434] veth11: left promiscuous mode [ 254.396965][T12434] bridge4: port 3(veth11) entered disabled state [ 254.408730][T12434] bond7: (slave veth13): Releasing active interface [ 254.423053][T12434] bond8: (slave geneve4): Releasing backup interface [ 254.442265][T12434] bond9: (slave veth15): Releasing active interface [ 254.497721][ T2980] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.509639][ T2980] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.591210][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'. [ 254.665557][T12457] veth0: entered promiscuous mode [ 254.758452][T12457] veth0: left promiscuous mode [ 254.820287][ T2980] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.831814][ T2980] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.225460][T12485] team_slave_0: mtu less than device minimum [ 255.586363][T12464] lo speed is unknown, defaulting to 1000 [ 255.762752][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.884801][T12490] lo speed is unknown, defaulting to 1000 [ 256.417318][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'. [ 257.678237][T12549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1724'. [ 257.897783][T12539] lo speed is unknown, defaulting to 1000 [ 258.325685][T12559] ieee802154 phy1 wpan1: encryption failed: -90 [ 258.344714][T12561] tipc: Enabled bearer , priority 10 [ 258.648798][T12569] netlink: 'syz.4.1731': attribute type 2 has an invalid length. [ 259.587730][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'. [ 259.767319][T12594] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1738'. [ 259.825321][T12596] netlink: 'syz.0.1739': attribute type 54 has an invalid length. [ 260.375497][T12579] lo speed is unknown, defaulting to 1000 [ 260.679547][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 261.109195][T12636] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1750'. [ 261.288556][T12644] syzkaller1: entered promiscuous mode [ 261.295323][T12644] syzkaller1: entered allmulticast mode [ 261.419278][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'. [ 261.436197][T12648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1754'. [ 261.493080][T12648] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 261.508997][T12648] erspan1: entered allmulticast mode [ 261.659754][T12656] netlink: 'syz.0.1757': attribute type 21 has an invalid length. [ 261.668866][T12656] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1757'. [ 261.701427][T12654] Bluetooth: MGMT ver 1.23 [ 262.294952][T12668] netlink: 'syz.3.1760': attribute type 54 has an invalid length. [ 263.075489][T12681] lo speed is unknown, defaulting to 1000 [ 263.500581][T12696] sctp: [Deprecated]: syz.0.1767 (pid 12696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.500581][T12696] Use struct sctp_sack_info instead [ 263.668956][T12700] netlink: 'syz.1.1770': attribute type 15 has an invalid length. [ 263.676814][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 263.777186][T12705] netlink: 'syz.1.1770': attribute type 1 has an invalid length. [ 264.228506][T12716] batadv_slave_1: entered promiscuous mode [ 264.254924][T12716] veth6: entered allmulticast mode [ 264.350208][T12722] batadv_slave_1: left promiscuous mode [ 264.473679][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1777'. [ 264.567932][T12726] netlink: 'syz.1.1777': attribute type 7 has an invalid length. [ 264.606180][T12726] netlink: 'syz.1.1777': attribute type 8 has an invalid length. [ 264.617814][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 264.651109][T12729] bond6: entered promiscuous mode [ 264.660821][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 264.670499][T12733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.674219][T12729] bond6: entered allmulticast mode [ 264.697295][T12729] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.715903][T12726] bridge0: entered promiscuous mode [ 264.722945][T12726] ip6gretap0: entered promiscuous mode [ 264.730854][T12726] gretap0: entered promiscuous mode [ 264.737028][T12726] debugfs: 'hsr1' already exists in 'hsr' [ 264.743653][T12726] Cannot create hsr debugfs directory [ 264.775873][T12732] ip6gretap1: entered promiscuous mode [ 264.793511][T12732] ip6gretap1: entered allmulticast mode [ 264.857707][ C0] [ 264.860068][ C0] ============================================ [ 264.866212][ C0] WARNING: possible recursive locking detected [ 264.872359][ C0] syzkaller #0 Not tainted [ 264.876762][ C0] -------------------------------------------- [ 264.882909][ C0] syz.4.1756/12654 is trying to acquire lock: [ 264.888985][ C0] ffff888059a16f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 264.898050][ C0] [ 264.898050][ C0] but task is already holding lock: [ 264.905402][ C0] ffff88802932cf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 264.915674][ C0] [ 264.915674][ C0] other info that might help us debug this: [ 264.923719][ C0] Possible unsafe locking scenario: [ 264.923719][ C0] [ 264.931154][ C0] CPU0 [ 264.934423][ C0] ---- [ 264.937687][ C0] lock(&hsr->seqnr_lock); [ 264.942202][ C0] lock(&hsr->seqnr_lock); [ 264.946694][ C0] [ 264.946694][ C0] *** DEADLOCK *** [ 264.946694][ C0] [ 264.954824][ C0] May be due to missing lock nesting notation [ 264.954824][ C0] [ 264.963126][ C0] 8 locks held by syz.4.1756/12654: [ 264.968308][ C0] #0: ffffc90000007be0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 264.978313][ C0] #1: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x83/0x360 [ 264.987451][ C0] #2: ffff88802932cf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 264.998150][ C0] #3: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 265.007636][ C0] #4: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x284/0x3740 [ 265.017551][ C0] #5: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 265.026772][ C0] #6: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x284/0x3740 [ 265.036700][ C0] #7: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 265.045834][ C0] [ 265.045834][ C0] stack backtrace: [ 265.051714][ C0] CPU: 0 UID: 0 PID: 12654 Comm: syz.4.1756 Not tainted syzkaller #0 PREEMPT(full) [ 265.051733][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.051744][ C0] Call Trace: [ 265.051752][ C0] [ 265.051760][ C0] dump_stack_lvl+0x189/0x250 [ 265.051784][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.051804][ C0] ? __pfx__printk+0x10/0x10 [ 265.051824][ C0] print_deadlock_bug+0x28b/0x2a0 [ 265.051844][ C0] validate_chain+0x1a3f/0x2140 [ 265.051865][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 265.051885][ C0] ? __resched_curr+0x2d9/0x3e0 [ 265.051905][ C0] __lock_acquire+0xab9/0xd20 [ 265.051922][ C0] ? hsr_dev_xmit+0x237/0x360 [ 265.051941][ C0] lock_acquire+0x120/0x360 [ 265.051955][ C0] ? hsr_dev_xmit+0x237/0x360 [ 265.051979][ C0] ? hsr_dev_xmit+0x237/0x360 [ 265.052006][ C0] _raw_spin_lock_bh+0x36/0x50 [ 265.052030][ C0] ? hsr_dev_xmit+0x237/0x360 [ 265.052049][ C0] hsr_dev_xmit+0x237/0x360 [ 265.052068][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 265.052088][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 265.052114][ C0] __dev_queue_xmit+0x172a/0x3740 [ 265.052133][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 265.052158][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 265.052180][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 265.052197][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.052212][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 265.052231][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 265.052247][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 265.052266][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 265.052287][ C0] ? ebt_do_table+0x265b/0x2820 [ 265.052304][ C0] ? __lock_acquire+0xab9/0xd20 [ 265.052328][ C0] br_dev_queue_push_xmit+0x6c5/0x890 [ 265.052353][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 265.052375][ C0] ? NF_HOOK+0x9e/0x3c0 [ 265.052395][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 265.052415][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 265.052435][ C0] NF_HOOK+0x320/0x3c0 [ 265.052456][ C0] ? NF_HOOK+0x9e/0x3c0 [ 265.052475][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 265.052493][ C0] ? irqentry_exit+0x74/0x90 [ 265.052509][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 265.052534][ C0] br_forward_finish+0xd3/0x130 [ 265.052553][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 265.052574][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 265.052594][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 265.052613][ C0] NF_HOOK+0x320/0x3c0 [ 265.052634][ C0] ? NF_HOOK+0x9e/0x3c0 [ 265.052652][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 265.052672][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 265.052696][ C0] __br_forward+0x41e/0x600 [ 265.052715][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 265.052738][ C0] ? __pfx___br_forward+0x10/0x10 [ 265.052759][ C0] ? skb_clone+0x246/0x3a0 [ 265.052779][ C0] maybe_deliver+0xb5/0x160 [ 265.052800][ C0] br_flood+0x31a/0x6a0 [ 265.052823][ C0] ? br_dev_xmit+0x185/0x1840 [ 265.052838][ C0] br_dev_xmit+0x11b3/0x1840 [ 265.052853][ C0] ? br_dev_xmit+0x185/0x1840 [ 265.052871][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 265.052886][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 265.052901][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 265.052920][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 265.052936][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 265.052955][ C0] ? validate_xmit_skb+0xd78/0x1500 [ 265.052977][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 265.053006][ C0] __dev_queue_xmit+0x172a/0x3740 [ 265.053028][ C0] ? kasan_save_track+0x3e/0x80 [ 265.053053][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.053070][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 265.053089][ C0] ? __skb_datagram_iter+0xf8/0x990 [ 265.053109][ C0] ? skb_copy_datagram_iter+0xc5/0x230 [ 265.053127][ C0] ? sock_recvmsg_nosec+0x186/0x1c0 [ 265.053149][ C0] ? ____sys_recvmsg+0x3aa/0x460 [ 265.053166][ C0] ? ___sys_recvmsg+0x1b5/0x510 [ 265.053182][ C0] ? do_recvmmsg+0x307/0x770 [ 265.053199][ C0] ? __x64_sys_recvmmsg+0x190/0x240 [ 265.053217][ C0] ? do_syscall_64+0xfa/0xfa0 [ 265.053232][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.053249][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 265.053275][ C0] ? __copy_skb_header+0xa7/0x550 [ 265.053292][ C0] ? __asan_memcpy+0x40/0x70 [ 265.053316][ C0] ? hsr_addr_subst_dest+0x307/0xac0 [ 265.053337][ C0] ? skb_clone+0x246/0x3a0 [ 265.053356][ C0] hsr_forward_skb+0x158b/0x2860 [ 265.053374][ C0] ? hsr_forward_skb+0x9e/0x2860 [ 265.053388][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 265.053400][ C0] ? do_raw_spin_lock+0x121/0x290 [ 265.053422][ C0] ? __asan_memset+0x22/0x50 [ 265.053441][ C0] ? __skb_pad+0x405/0x610 [ 265.053459][ C0] ? hsr_is_node_in_db+0x12c/0x150 [ 265.053479][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 265.053506][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 265.053528][ C0] hsr_announce+0x1d5/0x360 [ 265.053548][ C0] ? hsr_announce+0x83/0x360 [ 265.053569][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 265.053592][ C0] call_timer_fn+0x17e/0x5f0 [ 265.053606][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 265.053626][ C0] ? call_timer_fn+0xbe/0x5f0 [ 265.053639][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 265.053657][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.053679][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.053693][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 265.053713][ C0] __run_timer_base+0x61a/0x860 [ 265.053739][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 265.053761][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 265.053786][ C0] run_timer_softirq+0xb7/0x180 [ 265.053808][ C0] handle_softirqs+0x286/0x870 [ 265.053826][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 265.053843][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 265.053863][ C0] __irq_exit_rcu+0xca/0x1f0 [ 265.053879][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 265.053898][ C0] irq_exit_rcu+0x9/0x30 [ 265.053912][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 265.053928][ C0] [ 265.053933][ C0] [ 265.053939][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.053955][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 265.053981][ C0] Code: 08 b0 6e 92 65 8b 15 58 ac ae 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 7c 16 00 00 00 74 2c 8b 91 58 16 00 00 <83> fa 02 75 21 48 8b 91 60 16 00 00 48 8b 32 48 8d 7e 01 8b 89 5c [ 265.054000][ C0] RSP: 0018:ffffc9000ea3f4d8 EFLAGS: 00000246 [ 265.054014][ C0] RAX: ffffffff84871c62 RBX: 0000000000000001 RCX: ffff888054050000 [ 265.054025][ C0] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000002 [ 265.054035][ C0] RBP: ffffc9000ea3f650 R08: 0000000000000000 R09: ffffffff8923cdf0 [ 265.054046][ C0] R10: dffffc0000000000 R11: fffffbfff1efa08f R12: dffffc0000000000 [ 265.054057][ C0] R13: 1ffff92001d47eb0 R14: ffffc9000ea3fcf0 R15: 1ffff92001d47f9e [ 265.054072][ C0] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 265.054091][ C0] ? _copy_to_iter+0xe2/0x1790 [ 265.054111][ C0] _copy_to_iter+0xe2/0x1790 [ 265.054129][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 265.054152][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.054167][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 265.054190][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 265.054213][ C0] ? __pfx__copy_to_iter+0x10/0x10 [ 265.054228][ C0] ? __skb_try_recv_from_queue+0x58f/0x730 [ 265.054251][ C0] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 265.054272][ C0] __skb_datagram_iter+0xf8/0x990 [ 265.054291][ C0] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 265.054314][ C0] skb_copy_datagram_iter+0xc5/0x230 [ 265.054335][ C0] hci_sock_recvmsg+0x33a/0x8f0 [ 265.054356][ C0] ? __pfx_hci_sock_recvmsg+0x10/0x10 [ 265.054377][ C0] ? __pfx_hci_sock_recvmsg+0x10/0x10 [ 265.054394][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 265.054418][ C0] ____sys_recvmsg+0x3aa/0x460 [ 265.054440][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 265.054463][ C0] ? import_iovec+0x74/0xa0 [ 265.054482][ C0] ___sys_recvmsg+0x1b5/0x510 [ 265.054499][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.054516][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 265.054545][ C0] ? __might_fault+0xb0/0x130 [ 265.054568][ C0] do_recvmmsg+0x307/0x770 [ 265.054589][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 265.054611][ C0] ? __pfx_do_futex+0x10/0x10 [ 265.054638][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 265.054658][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 265.054678][ C0] ? do_syscall_64+0xbe/0xfa0 [ 265.054694][ C0] do_syscall_64+0xfa/0xfa0 [ 265.054709][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.054723][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.054738][ C0] ? clear_bhb_loop+0x60/0xb0 [ 265.054755][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.054770][ C0] RIP: 0033:0x7fd5fa58f749 [ 265.054784][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.054797][ C0] RSP: 002b:00007fd5f87f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 265.054812][ C0] RAX: ffffffffffffffda RBX: 00007fd5fa7e5fa0 RCX: 00007fd5fa58f749 [ 265.054824][ C0] RDX: 00000000040001af RSI: 0000200000000a40 RDI: 0000000000000006 [ 265.054834][ C0] RBP: 00007fd5fa613f91 R08: 0000000000000000 R09: 0000000000000000 [ 265.054844][ C0] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000000 [ 265.054853][ C0] R13: 00007fd5fa7e6038 R14: 00007fd5fa7e5fa0 R15: 00007ffeae9025b8 [ 265.054871][ C0] [ 265.998986][T12746] caif:caif_disconnect_client(): nothing to disconnect [ 266.107559][T12749] nbd0: detected capacity change from 0 to 127 [ 266.114221][T12750] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1782'. [ 266.124156][T12749] netlink: 'syz.1.1782': attribute type 10 has an invalid length. [ 266.137261][T12749] vlan4: entered promiscuous mode [ 266.211174][ T5834] block nbd0: Receive control failed (result -32)