last executing test programs: 3.069266205s ago: executing program 2 (id=1395): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) r1 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x22, &(0x7f0000000040), 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c4, 0x12, 0x8, 0x0, 0x0, {0x2, 0x81, 0x2, 0x1, {0x0, 0x4e24, [0x0, 0x0, 0x5e15], [0xfffffffb, 0x0, 0xbb23, 0x20000]}}, [@INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "d8812379144d723e6c7f50404cfd2b9e289bf6932df53e72eba03d9bf289d19eb2123a6c9943f96d4ef847cfd9d96fc743e64c4ce8103a07bbc08b855cba378baf758e026d44450309bbcee5d4d400b1712a1a7fdb733f22dd2c8b3995e0f758dfab4a3b6bebd22e82ea71646c171a40516b68a42a2cbd3d0106e686f5b830968c0f6ee9ff94cb823eabe643ded4b8c270689249233f19ae80f2bb782346a905748ae96d9d1bcaafbdd3ac045cdf5da95647d338d2aaa22e"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "ad19c3b661d94d9129cfca14bdba24f442573ed2bbd5619ad29765b650e6351a729981b22baf9a9509e16bf5922dd716811fc48c3c770046fc265b10eed86d2f4005a8a76b32d0fba535b0065d7321cd0667e35a71bec48f54acf7d0c94548415296d8fea552be7306c7df375f1393464151148919c4f889a45e7cef912c9e097cf5091dd71d1ddbb6d91ce344f9d9c9e7535a48a9416a155d103e7c91fd23d79888201bbf5da6fc44c5e1671baf64e0aa14bd5f8c5118"}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4008c85}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) (async) socket$netlink(0x10, 0x3, 0xa) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x22, &(0x7f0000000040), 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c4, 0x12, 0x8, 0x0, 0x0, {0x2, 0x81, 0x2, 0x1, {0x0, 0x4e24, [0x0, 0x0, 0x5e15], [0xfffffffb, 0x0, 0xbb23, 0x20000]}}, [@INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "d8812379144d723e6c7f50404cfd2b9e289bf6932df53e72eba03d9bf289d19eb2123a6c9943f96d4ef847cfd9d96fc743e64c4ce8103a07bbc08b855cba378baf758e026d44450309bbcee5d4d400b1712a1a7fdb733f22dd2c8b3995e0f758dfab4a3b6bebd22e82ea71646c171a40516b68a42a2cbd3d0106e686f5b830968c0f6ee9ff94cb823eabe643ded4b8c270689249233f19ae80f2bb782346a905748ae96d9d1bcaafbdd3ac045cdf5da95647d338d2aaa22e"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "ad19c3b661d94d9129cfca14bdba24f442573ed2bbd5619ad29765b650e6351a729981b22baf9a9509e16bf5922dd716811fc48c3c770046fc265b10eed86d2f4005a8a76b32d0fba535b0065d7321cd0667e35a71bec48f54acf7d0c94548415296d8fea552be7306c7df375f1393464151148919c4f889a45e7cef912c9e097cf5091dd71d1ddbb6d91ce344f9d9c9e7535a48a9416a155d103e7c91fd23d79888201bbf5da6fc44c5e1671baf64e0aa14bd5f8c5118"}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4008c85}, 0x0) (async) 2.924840937s ago: executing program 2 (id=1400): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x9}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa9cbf21dc0db0667bd0d24a5934fb0baaaaaaaab3d8f316e06cc35e6876cd9fa9bb86dd60ff00f500140600fe80000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES64=r0], 0x0) 2.782199477s ago: executing program 1 (id=1403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10000000]}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x11, 0x28, &(0x7f0000000080)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x1, 0x500}, 0x48) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.750714057s ago: executing program 2 (id=1404): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) r4 = socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000300)=""/176, &(0x7f0000000080)=0xb0) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1396f7d9901c361b26933659141c9941ce4d4bce04c1d039047bc5797579f1841f3bd2763ceeec8d85dfc9bd24b1fc6961c0afa1c4fa23d2ebc365f03b406a5f4604d1fce902993f6a2c3c303f9f875520cdde41a874ee2db4270585fe9c1c8ca3f7eb25cd87a06f6c60472dee", @ANYRESDEC=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002005148026703cf35011004f835bd1e915dedd78dbc7fc8245019b159b9d5f53a146a9c23ae98eedddb55911b76a7b333c92ef56e36f99b6a3dbc8f2abed0b979e9a52bad3146faffdc4a60cbb372900c9e4be64a27f8fff8d99c200d1934aad8c19727786ad39a3254d1d3a05da611f559df6e4a3c47685f9fb9a825e1117c0489125e2dab4d44413079c490c9aea14bc6f6773f19a499ad5cd08a2cb4ba49d684e88ce347c566a0b9b561742e0c8d1f9a16d2f8b1a19a479fd74a331299d169a2b698507640ee01cd6486130143a4439df6b5772cfdcbce2c455ef0d3", @ANYRES16=r6, @ANYRESDEC=r1], 0x44}, 0x1, 0x0, 0x0, 0x20080000}, 0x2000440) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 2.534221897s ago: executing program 2 (id=1410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r1, 0x800, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf4, 0x16}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x200400c5) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r5, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x20040800) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet6(r8, 0x0, 0x0) listen(r8, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x2000000) sendmsg$NFT_BATCH(r10, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00x\x00', 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x14, 0x10, 0xa388, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x8}, @timestamp={0x8, 0xa, 0x7, 0x3dd}, @nop, @md5sig={0x13, 0x12, "14d51f0e23cf14a7c727661343761b41"}, @eol, @nop, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x3}, @mptcp=@syn={0x1e, 0xc, 0x8, 0x1, 0x3, 0xffffff01, 0x8}]}}}}}}}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000420000000e0001006e3078f2bf657464657673696df900000f0002006e657464457673696d3000000d0087006c325f64726f70730000000005008700"], 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) close(r5) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r12) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) 2.49861788s ago: executing program 3 (id=1411): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r4], 0x20}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0x100000001}) socket(0x1d, 0x5, 0x7) sendto$inet(r6, &(0x7f0000000140)="c7f50374d45d81546b86b86dde66439ea41ec790d535930cbf52daa3a71295b79a5a838e6fcd0164ff4023b7dcc5127ed1aadf48423276260581f9dda0f99cdc859284df89b35e44eaf5ad420f88d420bbd0156fc3a0ac383fbde597ed6b22b23cc97a91181fc846eb059064ae8f9f7840aebce51578a1562b883aa5b4e568a1cd32a367a766d9306a49c74e01c4ecfab98ed198", 0x94, 0x20040054, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={r1, 0xfffffff9}, &(0x7f0000000240)=0x8) 2.472981829s ago: executing program 0 (id=1412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x828949ab3fe143d7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000000)="317e2c6d2feac68c567a8a4cf35d80b86e1a2ac5d9b690ffac88f95b7b3bbf14c7a85852d26e5c13866aaea3ebc0915063ea275d5dbd0b7c3fef6c14f563e442b23cfbe9761bf8c73713fbfb466e137b122b51afcb58f7acecdb44fbb7176911aab2ebfdfb8557b5", &(0x7f0000000180)=""/110, 0x4}, 0x20) getsockopt$rose(r3, 0x104, 0x5, 0x0, &(0x7f00000000c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="80010000170001000000000000000000fc000000000000000000000000000000000000000000f0fffd8000000000000000000000000000bbac1414bb000000000000000000400000fc000000000000000000000000a100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0015000000000037000000"], 0x180}}, 0x0) 2.374473391s ago: executing program 1 (id=1413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4", 0x14}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x800, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x83, 0x0, &(0x7f0000000080)=0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='f2fs_shrink_extent_tree\x00', r8}, 0x18) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x8000000, 0x2000001}, 0x8) close(r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) 2.333605419s ago: executing program 0 (id=1414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x2c, {0x2, 0x0, @empty}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) 2.308751922s ago: executing program 3 (id=1415): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000010000000001400000014000000030000000000000001000006040000000100"/47], 0x0, 0x2f, 0x0, 0xb}, 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') (async) unshare(0x6a040000) (async) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) socket(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000000)={'lo\x00', 0x1}) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 2.19464s ago: executing program 4 (id=1417): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf59e}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r1}]}, 0x40}}, 0x40040d0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000040)={@rc={0x1f, @none, 0x8}, {&(0x7f0000000640)=""/4096, 0x1000}, &(0x7f0000000000), 0x38}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0xff85}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.163955894s ago: executing program 3 (id=1418): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb5, &(0x7f0000000200)=""/181, 0x0, 0x12, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.142231065s ago: executing program 4 (id=1419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x4000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600801, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 2.08664952s ago: executing program 0 (id=1420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) 2.08129835s ago: executing program 3 (id=1421): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x88890) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x60000000}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) socket$kcm(0x2, 0xa, 0x73) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r5], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r7, &(0x7f0000000040), 0x37) close(r7) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 2.021289406s ago: executing program 0 (id=1422): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept$unix(r1, &(0x7f00000004c0), &(0x7f0000000540)=0x6e) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=@newqdisc={0x209, 0x24, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0xfff2}, {0xffff, 0x6}, {0x8}}, [@q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd63a}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x23}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x18}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000001}, 0x24048000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000000c0)) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) 1.540592444s ago: executing program 2 (id=1423): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631149000000000085100000020000008500000005000000950000000000000095e9600500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="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"/314], 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x54, &(0x7f0000000640)=r3, 0x4) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5244c000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004800}, 0x24044890) 695.489519ms ago: executing program 0 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "5bf6ad242712a12236ec1625ac06613fc5f12f67"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0xfc, 0x0, 0x0, 0x0, "2d2fd7ac2612dea2"}, 0x1}}]}, 0x154}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x200, 0xd8, 0x48}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r4, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/pid_for_children\x00') r9 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', r6}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "5bf6ad242712a12236ec1625ac06613fc5f12f67"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0xfc, 0x0, 0x0, 0x0, "2d2fd7ac2612dea2"}, 0x1}}]}, 0x154}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x200, 0xd8, 0x48}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r4, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/pid_for_children\x00') (async) gettid() (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', r6}, 0x18) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) (async) 673.782459ms ago: executing program 4 (id=1425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x50, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x50}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1d, 0x9, 0xffff, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x700, 0x8000, 0x3}}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@empty, 0x4e21, 0x8001, 0x4e22, 0x41, 0x2, 0x0, 0xa0, 0x11, r2, r4}, {0x7, 0x5, 0xa99, 0x0, 0x4f2, 0x80000001, 0x2, 0x100000000}, {0x3, 0x6, 0xfffffffffffffffd, 0x4}, 0x9, 0x6e6bbc, 0x1, 0x1, 0x2, 0x1}, {{@in=@loopback, 0x4d2, 0x32}, 0xa, @in=@broadcast, 0x3506, 0x3, 0x2, 0xa, 0x800, 0xd9, 0x7}}, 0xe8) 596.316024ms ago: executing program 3 (id=1426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x100}, 0x1, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="e973abc7ac22bbbbbbbbbbbb08004500002c0000e0000311907800000000000000000000faffffffffffffff00"/58], 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="e973abc7ac22bbbbbbbbbbbb08004500002c0000e0000311907800000000000000000000faffffffffffffff00"/58], 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000800000000000000907800000000000000000000000700109078220600010000e9c6d579b8ad648adef3660c4f5adde27386cec1994c466d52e65eb76e70c1612801ef56b89098832f06293c616842eb2f7037acc1439536f080c54a3eb1ad99b57e058b6db1d769fd20b1b979df89795dd6c18cb39e8e583cb0a565a8f714e9811cc1fa2240d706db2aa0afdb3ed605bcfdd9e1ac304cb97a9c776a593c82bd0123e09d2019c5bdd6011e4b164bf9b389f694b2"], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000800000000000000907800000000000000000000000700109078220600010000e9c6d579b8ad648adef3660c4f5adde27386cec1994c466d52e65eb76e70c1612801ef56b89098832f06293c616842eb2f7037acc1439536f080c54a3eb1ad99b57e058b6db1d769fd20b1b979df89795dd6c18cb39e8e583cb0a565a8f714e9811cc1fa2240d706db2aa0afdb3ed605bcfdd9e1ac304cb97a9c776a593c82bd0123e09d2019c5bdd6011e4b164bf9b389f694b2"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB="0a0001"], 0x48}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB="0a0001"], 0x48}}, 0x0) 594.558263ms ago: executing program 2 (id=1427): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x2898}, 0x8) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x8) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x0, 0x7, 0x7]}, &(0x7f0000000080)=0x44) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x2, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x70}, 0x1, 0x7}, 0x0) 586.268692ms ago: executing program 1 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x1, 0x4) 532.291985ms ago: executing program 4 (id=1429): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x6}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x6}], 0x1c) sendto$inet6(r0, &(0x7f0000000140)='l', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000140)='l', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 400.810181ms ago: executing program 0 (id=1430): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, &(0x7f0000000400)="0bdc75ab552beb3c1c739ee2818a1eb181dfa8a1daa62003f2b50e4c59ab24d9baa7df087a1bf2f423af6655e002aaf0214d64cd026c2d2867ea986278827956b4ee37650aed9db64122625960a1398b8c0772ee7347aa7df9b5e216a312b3bd5bfa2109014da336ecf0ee9f079a5e82acb5517b9a7b95859b3a8cd96c104821b3875331d191554438c50d3b7742ce0fc5e9649e459aa6f013d937dd1e0b5ed32c529e0f1704c12bc876d375bbcd170137adcdc24455010ab52e349ea0e6b739a51afddbaff69c9cfdd57fddf422953539f477913838aff596349315652f85385ab238fabb85", &(0x7f0000000600)=""/214}, 0x20) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0xc000) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d30000000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x44044) recvmmsg(r9, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4092, 0xffc}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 400.60927ms ago: executing program 1 (id=1431): socket$igmp(0x2, 0x3, 0x2) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x2e) 328.3171ms ago: executing program 1 (id=1432): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940), 0x8040) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 209.872171ms ago: executing program 4 (id=1433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x1012, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x3, [0x1a3, 0x2bb, 0xfb0, 0x517]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x380, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x354, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x2ec, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2e0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CMP_DATA={0x2c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_CMP_DATA={0x290, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfa, 0x1, "f534e7dba0d6a26d8e1c352b8b10cd35921bfc01fd61e8cd787128ed66ef88920985bd9c0ba3922055eca40d8eb5bc75bdd6a762eeb7045258a28f95f3640c48c5fce0279e80bee8caf3427ca004d8408c582a0190a74dbd8c99ddb4666cfff6c317cf58880096916fdba163af27e3f637842a6e2bfbcb61c61b633a23365a93cb3ff56c7380badfbe180eb9bf58cf51a3ba843bdd5607d20f7676ca4351e214c2cb5a738c4a191e7ad484a85962b0d2d3be0f4c5c11cdac9ad3ef118d80c51b8b26b95c59a6eb8c4771adf8fba74f2dabb80c11b8b508fe9cf18028bc2ad8b2cca8c49bddca76cee97444113835070d19ae053899f2"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "958c3cec9cab4cc441d79f0d21f40a9683cb89946cc8bf500f45cc89e44f5bf1792680de1f686c5147e1228ab437c04cfcc47ee05edfa8d50b0bfcd32c05ad7a94bedea859d177c2eef24f23133559d9314acf279f994b2fb969c8b2a1ba0487d1cd54d1f911fef365f5a5b4b2dceda35a0157ff378226905712afdbe65f1b8ea309d103304acb99f767079540d611bde299cd33a0d7dc367ca02c9367b63f48caca1a044d3998e495510adb05d7da1ad1b5899341f5749a1894d9"}, @NFTA_DATA_VALUE={0x19, 0x1, "f7975d03d00d9d23409ad55a3cb3a7adad8b635f3f"}]}]}}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x3a8}}, 0x0) close(0x3) 82.338608ms ago: executing program 3 (id=1434): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r1, 0x1, 0x70bd2a, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 55.872593ms ago: executing program 1 (id=1435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r4) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf253400000008000300", @ANYRES32=r3, @ANYBLOB="040034001e00fd00000000001400550012d4d201f8f8ffffffffffffff000000b6630c7920390b4cd45dab5de9e6eb305dbc5c28e904635ba2509d8221bb92fab5"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) setsockopt$MRT_TABLE(r1, 0x0, 0x31, 0x0, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) (async, rerun: 64) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r8, 0x4) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 0s ago: executing program 4 (id=1436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4040, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x3, 0xe21f8db4c52bcb63, 0x7, 0x8, 0x4}, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@llc={0x4, {@snap={0xaa, 0x1, "c8", "80eab3", 0x88be, "1ff9f464df7c55d545bd60313c155b6e8997c6a4af63b0c3321dfa04a2df1f746ee9164e19e7a3ee3ba1d562cb8888f2c923c5b47c66e5a8943df9e85392c3a312b40c16803ca48059f4a533952c254b757b4fbd114a66b01e5651dbb249f1d77513cb87a7f2004e3a4b22b68ce60f51b9f6f7221e25c8d2420654c2"}}}}}}, 0x9c) close(0x3) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0)=0x1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 68.965552][ T5849] cgroup: Unknown subsys name 'net' [ 69.073450][ T5849] cgroup: Unknown subsys name 'cpuset' [ 69.082535][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.514849][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.393281][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.399733][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.986130][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.002851][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.004848][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.011395][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.018565][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.026644][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.033235][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.039423][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.047077][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.053868][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.061022][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.067882][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.074464][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.082381][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.089202][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.095449][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.110277][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.111880][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.117673][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.125597][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.138646][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.139116][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.154455][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.155897][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.176429][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.769196][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 73.865077][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 73.987973][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 74.007028][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 74.059403][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 74.157057][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.164393][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.172376][ T5859] bridge_slave_0: entered allmulticast mode [ 74.179387][ T5859] bridge_slave_0: entered promiscuous mode [ 74.214847][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.222249][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.229371][ T5859] bridge_slave_1: entered allmulticast mode [ 74.237355][ T5859] bridge_slave_1: entered promiscuous mode [ 74.332834][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.351864][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.361196][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.368316][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.377507][ T5871] bridge_slave_0: entered allmulticast mode [ 74.384657][ T5871] bridge_slave_0: entered promiscuous mode [ 74.394068][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.401339][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.409158][ T5871] bridge_slave_1: entered allmulticast mode [ 74.417259][ T5871] bridge_slave_1: entered promiscuous mode [ 74.486610][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.494397][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.501611][ T5869] bridge_slave_0: entered allmulticast mode [ 74.508572][ T5869] bridge_slave_0: entered promiscuous mode [ 74.516703][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.523960][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.531195][ T5869] bridge_slave_1: entered allmulticast mode [ 74.538090][ T5869] bridge_slave_1: entered promiscuous mode [ 74.571326][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.578477][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.586457][ T5867] bridge_slave_0: entered allmulticast mode [ 74.595105][ T5867] bridge_slave_0: entered promiscuous mode [ 74.617842][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.654106][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.661481][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.668604][ T5860] bridge_slave_0: entered allmulticast mode [ 74.675840][ T5860] bridge_slave_0: entered promiscuous mode [ 74.684561][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.691803][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.698945][ T5867] bridge_slave_1: entered allmulticast mode [ 74.706076][ T5867] bridge_slave_1: entered promiscuous mode [ 74.714669][ T5859] team0: Port device team_slave_0 added [ 74.723679][ T5859] team0: Port device team_slave_1 added [ 74.731510][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.769496][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.776756][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.784063][ T5860] bridge_slave_1: entered allmulticast mode [ 74.792061][ T5860] bridge_slave_1: entered promiscuous mode [ 74.845697][ T5871] team0: Port device team_slave_0 added [ 74.855109][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.894657][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.902452][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.928516][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.941497][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.948456][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.974423][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.987888][ T5871] team0: Port device team_slave_1 added [ 75.010317][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.036464][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.048082][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.119357][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.150746][ T5878] Bluetooth: hci2: command tx timeout [ 75.159153][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.166388][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.193060][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.206686][ T5869] team0: Port device team_slave_0 added [ 75.215476][ T5869] team0: Port device team_slave_1 added [ 75.223249][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.232422][ T5878] Bluetooth: hci3: command tx timeout [ 75.240173][ T5183] Bluetooth: hci4: command tx timeout [ 75.245886][ T5183] Bluetooth: hci1: command tx timeout [ 75.251673][ T5878] Bluetooth: hci0: command tx timeout [ 75.260955][ T5867] team0: Port device team_slave_0 added [ 75.273779][ T5859] hsr_slave_0: entered promiscuous mode [ 75.280453][ T5859] hsr_slave_1: entered promiscuous mode [ 75.287298][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.294591][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.320707][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.358466][ T5867] team0: Port device team_slave_1 added [ 75.410110][ T5860] team0: Port device team_slave_0 added [ 75.428122][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.435466][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.461819][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.475300][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.482351][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.508285][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.521416][ T5860] team0: Port device team_slave_1 added [ 75.527982][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.535004][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.561076][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.592121][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.599076][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.625148][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.714156][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.721808][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.748667][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.778367][ T5871] hsr_slave_0: entered promiscuous mode [ 75.784626][ T5871] hsr_slave_1: entered promiscuous mode [ 75.790999][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 75.796803][ T5871] Cannot create hsr debugfs directory [ 75.806750][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.813782][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.840157][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.951226][ T5867] hsr_slave_0: entered promiscuous mode [ 75.957481][ T5867] hsr_slave_1: entered promiscuous mode [ 75.964240][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 75.970015][ T5867] Cannot create hsr debugfs directory [ 75.995034][ T5869] hsr_slave_0: entered promiscuous mode [ 76.002041][ T5869] hsr_slave_1: entered promiscuous mode [ 76.008201][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 76.014087][ T5869] Cannot create hsr debugfs directory [ 76.078947][ T5860] hsr_slave_0: entered promiscuous mode [ 76.085580][ T5860] hsr_slave_1: entered promiscuous mode [ 76.092411][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 76.098138][ T5860] Cannot create hsr debugfs directory [ 76.572274][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.607136][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.644422][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.671155][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.735402][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.760462][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.779275][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.791234][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.869422][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.887301][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.904918][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.934047][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.003240][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.019470][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.044186][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.075764][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.108286][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.184272][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.206759][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.216308][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.230313][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.230541][ T5878] Bluetooth: hci2: command tx timeout [ 77.247287][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.262922][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.308751][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.316022][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.320653][ T5878] Bluetooth: hci4: command tx timeout [ 77.325201][ T5183] Bluetooth: hci0: command tx timeout [ 77.328916][ T5868] Bluetooth: hci3: command tx timeout [ 77.341825][ T5865] Bluetooth: hci1: command tx timeout [ 77.354934][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.392861][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.400004][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.428943][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.436218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.485954][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.493138][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.540891][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.663711][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.686671][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.736856][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.743973][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.808201][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.815413][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.848925][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.925596][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.935280][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.942446][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.952693][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.959902][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.044211][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.144478][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.168909][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.176163][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.206548][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.213749][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.325408][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.414699][ T5859] veth0_vlan: entered promiscuous mode [ 78.483267][ T5859] veth1_vlan: entered promiscuous mode [ 78.527798][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.592451][ T5871] veth0_vlan: entered promiscuous mode [ 78.612288][ T5859] veth0_macvtap: entered promiscuous mode [ 78.645697][ T5859] veth1_macvtap: entered promiscuous mode [ 78.690266][ T5871] veth1_vlan: entered promiscuous mode [ 78.725915][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.751627][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.761748][ T5869] veth0_vlan: entered promiscuous mode [ 78.836773][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.863561][ T5871] veth0_macvtap: entered promiscuous mode [ 78.896754][ T5871] veth1_macvtap: entered promiscuous mode [ 78.918719][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.954534][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.965993][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.983881][ T5869] veth1_vlan: entered promiscuous mode [ 79.016017][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.108620][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.160519][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.192329][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.237666][ T5869] veth0_macvtap: entered promiscuous mode [ 79.245653][ T997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.255521][ T997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.264777][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.277146][ T5952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.287243][ T5952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.305593][ T5869] veth1_macvtap: entered promiscuous mode [ 79.311752][ T5878] Bluetooth: hci2: command tx timeout [ 79.318820][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.392283][ T5868] Bluetooth: hci3: command tx timeout [ 79.397738][ T5868] Bluetooth: hci1: command tx timeout [ 79.398892][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.403648][ T5865] Bluetooth: hci0: command tx timeout [ 79.416032][ T5878] Bluetooth: hci4: command tx timeout [ 79.429316][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.442648][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.465487][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.515881][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.525655][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.559222][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.575949][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.585936][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.605118][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.618237][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.666465][ T5860] veth0_vlan: entered promiscuous mode [ 79.686122][ T5867] veth0_vlan: entered promiscuous mode [ 79.730122][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.736316][ T5860] veth1_vlan: entered promiscuous mode [ 79.749785][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.757082][ T5867] veth1_vlan: entered promiscuous mode [ 79.902341][ T5867] veth0_macvtap: entered promiscuous mode [ 79.916304][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.932201][ T5867] veth1_macvtap: entered promiscuous mode [ 79.940946][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.046778][ T5860] veth0_macvtap: entered promiscuous mode [ 80.073638][ T5860] veth1_macvtap: entered promiscuous mode [ 80.105340][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.131750][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.138651][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.139592][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.198287][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.246851][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.294005][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.328184][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.350438][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.409977][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.437639][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10'. [ 80.440916][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.469171][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.512884][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.522948][ T6011] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.555406][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.631249][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.864378][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.866870][ T6031] Bluetooth: MGMT ver 1.23 [ 80.898971][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.057387][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 81.067515][ T6027] tipc: Enabling of bearer rejected, failed to enable media [ 81.081076][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 81.098687][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.125872][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.203962][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.245368][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.295738][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.330408][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.409729][ T5865] Bluetooth: hci2: command tx timeout [ 81.470532][ T5865] Bluetooth: hci0: command tx timeout [ 81.472387][ T5878] Bluetooth: hci4: command tx timeout [ 81.476073][ T5868] Bluetooth: hci1: command tx timeout [ 81.481499][ T5183] Bluetooth: hci3: command tx timeout [ 81.642172][ T6045] Illegal XDP return value 334917968 on prog (id 6) dev N/A, expect packet loss! [ 81.864990][ T6057] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.880914][ T6058] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 82.188077][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 82.259287][ T6066] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 82.298431][ T6066] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 82.310051][ T6066] gretap1: entered promiscuous mode [ 82.315901][ T6066] gretap1: entered allmulticast mode [ 82.946475][ T6101] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.27'. [ 83.324508][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055fd1400: rx timeout, send abort [ 83.333887][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055fd1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.348551][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055fd1c00: rx timeout, send abort [ 83.360115][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055fd1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.568421][ T6125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36'. [ 83.670261][ T6128] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.979390][ T6147] netlink: 72 bytes leftover after parsing attributes in process `syz.2.44'. [ 84.495412][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.978744][ T6203] netlink: 'syz.3.60': attribute type 11 has an invalid length. [ 84.996124][ T6205] netlink: 104 bytes leftover after parsing attributes in process `syz.2.62'. [ 85.253202][ T6216] netlink: 'syz.1.63': attribute type 17 has an invalid length. [ 85.334855][ T6216] ip6gretap0: entered promiscuous mode [ 85.354256][ T6216] syz_tun: entered promiscuous mode [ 85.368295][ T6217] tipc: Started in network mode [ 85.375610][ T6217] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 85.385736][ T6217] tipc: Enabled bearer , priority 12 [ 85.660109][ T6235] __nla_validate_parse: 2 callbacks suppressed [ 85.660129][ T6235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.69'. [ 85.678614][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 85.765650][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 85.788267][ T6237] syz.3.71 uses old SIOCAX25GETINFO [ 85.916871][ T6245] syz.4.72 uses obsolete (PF_INET,SOCK_PACKET) [ 85.961707][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 85.971453][ T6250] netlink: 5 bytes leftover after parsing attributes in process `syz.0.75'. [ 86.107808][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 86.117856][ T6259] can: request_module (can-proto-0) failed. [ 86.463383][ T6234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.496283][ T6281] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 86.529917][ T5926] tipc: Node number set to 10070698 [ 86.608531][ T6277] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 86.647358][ T6284] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 86.679297][ T6277] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 86.696092][ T5919] IPVS: starting estimator thread 0... [ 86.715649][ T6286] warning: `syz.3.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.738704][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 86.772777][ T43] cfg80211: failed to load regulatory.db [ 86.789943][ T6289] IPVS: using max 29 ests per chain, 69600 per kthread [ 86.808816][ T6291] team0: Device gtp0 is of different type [ 86.893286][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.84'. [ 87.047636][ T6304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.86'. [ 87.255010][ T6316] netlink: 'syz.4.91': attribute type 1 has an invalid length. [ 87.746812][ T6344] tipc: Enabled bearer , priority 0 [ 87.763471][ T6344] syzkaller0: entered promiscuous mode [ 87.795120][ T6344] syzkaller0: entered allmulticast mode [ 87.903965][ T6341] tipc: Resetting bearer [ 87.963390][ T6341] tipc: Disabling bearer [ 88.008528][ T6357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 88.056016][ T6359] netlink: 'syz.3.104': attribute type 11 has an invalid length. [ 88.236814][ T6365] Zero length message leads to an empty skb [ 88.250682][ T6363] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 88.266126][ T6368] erspan0: entered promiscuous mode [ 88.298068][ T6368] erspan0: left promiscuous mode [ 88.567167][ T6384] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 88.688584][ T6388] netlink: 'syz.3.113': attribute type 4 has an invalid length. [ 88.885153][ T6398] geneve2: entered promiscuous mode [ 88.919913][ T6402] netlink: 'syz.2.119': attribute type 21 has an invalid length. [ 88.921487][ T6398] geneve2: entered allmulticast mode [ 88.938115][ T6402] netlink: 'syz.2.119': attribute type 22 has an invalid length. [ 88.956891][ T6400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.993559][ T6402] netlink: 'syz.2.119': attribute type 23 has an invalid length. [ 89.010338][ T6402] netlink: 'syz.2.119': attribute type 25 has an invalid length. [ 89.066629][ T6406] netlink: 'syz.1.121': attribute type 2 has an invalid length. [ 89.260096][ T6412] Bluetooth: MGMT ver 1.23 [ 89.332707][ T6416] trusted_key: syz.4.126 sent an empty control message without MSG_MORE. [ 89.858338][ T6450] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 90.272442][ T5183] Bluetooth: hci4: command 0x0405 tx timeout [ 90.288184][ T6475] netlink: 'syz.2.141': attribute type 7 has an invalid length. [ 90.302307][ T6475] netlink: 'syz.2.141': attribute type 8 has an invalid length. [ 90.327773][ T6475] geneve2: entered promiscuous mode [ 91.075339][ T6484] erspan0: entered promiscuous mode [ 91.086636][ T6487] __nla_validate_parse: 12 callbacks suppressed [ 91.086655][ T6487] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.145'. [ 91.119476][ T6484] vlan2: entered promiscuous mode [ 91.705960][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 91.750121][ T6519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.154'. [ 91.762771][ T6523] IPVS: length: 8 != 1152 [ 91.825743][ T2939] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.854496][ T5952] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.887057][ T5952] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.907170][ T5952] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.974845][ T6530] netlink: 136 bytes leftover after parsing attributes in process `syz.1.156'. [ 92.039419][ T6535] netlink: 132 bytes leftover after parsing attributes in process `syz.2.158'. [ 92.104375][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 92.139798][ T5952] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.148557][ T5952] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.209900][ T5952] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.218650][ T5952] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.241598][ T6546] netlink: 224 bytes leftover after parsing attributes in process `syz.4.159'. [ 92.263526][ T6546] block nbd1: not configured, cannot reconfigure [ 92.270101][ T5183] Bluetooth: hci0: command tx timeout [ 92.277556][ T6548] validate_nla: 9 callbacks suppressed [ 92.277573][ T6548] netlink: 'syz.3.162': attribute type 2 has an invalid length. [ 92.323518][ T6545] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 92.350530][ T5183] Bluetooth: hci4: command 0x0405 tx timeout [ 92.601254][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.166'. [ 94.283053][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 94.995714][ T6650] syzkaller1: entered promiscuous mode [ 95.016960][ T6650] syzkaller1: entered allmulticast mode [ 95.059567][ T6653] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 95.122812][ T6653] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 95.158705][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 95.333825][ T6669] vlan2: entered allmulticast mode [ 95.352268][ T6669] hsr0: entered allmulticast mode [ 95.370508][ T6669] hsr_slave_0: entered allmulticast mode [ 95.383435][ T6669] hsr_slave_1: entered allmulticast mode [ 96.193573][ T6727] __nla_validate_parse: 1 callbacks suppressed [ 96.193599][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 96.406966][ T6727] netlink: 'syz.0.205': attribute type 4 has an invalid length. [ 96.414889][ T6727] netlink: 17 bytes leftover after parsing attributes in process `syz.0.205'. [ 96.461677][ T6727] delete_channel: no stack [ 96.476118][ T6727] team_slave_0: entered promiscuous mode [ 96.481976][ T6727] team_slave_1: entered promiscuous mode [ 96.546358][ T6727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.092562][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 97.585883][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 97.743925][ T6770] bond0: option ad_select: unable to set because the bond device is up [ 97.796548][ T6783] netlink: 'syz.4.218': attribute type 1 has an invalid length. [ 97.805504][ T6783] netlink: 'syz.4.218': attribute type 2 has an invalid length. [ 98.034636][ T6785] veth1_macvtap: left promiscuous mode [ 98.043902][ T6785] macsec0: entered promiscuous mode [ 98.049226][ T6785] macsec0: entered allmulticast mode [ 98.062719][ T6789] veth1_macvtap: entered promiscuous mode [ 98.079119][ T6789] veth1_macvtap: entered allmulticast mode [ 98.099332][ T6789] macsec0: left promiscuous mode [ 98.115928][ T6789] macsec0: left allmulticast mode [ 98.141082][ T6789] veth1_macvtap: left allmulticast mode [ 98.248461][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 98.583013][ T6814] netlink: 96 bytes leftover after parsing attributes in process `syz.4.227'. [ 98.624260][ T6814] 8021q: VLANs not supported on ip_vti0 [ 98.751794][ T6823] tipc: Started in network mode [ 98.756764][ T6823] tipc: Node identity 2692997268bb, cluster identity 4711 [ 98.795537][ T6823] tipc: Enabled bearer , priority 0 [ 98.836036][ T6831] syzkaller0: entered promiscuous mode [ 98.845289][ T6831] syzkaller0: entered allmulticast mode [ 99.017965][ T6831] tipc: Resetting bearer [ 99.169290][ T6849] netlink: 72 bytes leftover after parsing attributes in process `syz.2.239'. [ 99.221901][ T6821] tipc: Resetting bearer [ 99.252715][ T6821] tipc: Disabling bearer [ 99.276881][ T6855] netlink: 96 bytes leftover after parsing attributes in process `syz.2.239'. [ 99.810433][ T6870] sctp: failed to load transform for md5: -2 [ 99.840686][ T6876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.243'. [ 99.885265][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.243'. [ 100.211892][ T6889] tipc: Started in network mode [ 100.216802][ T6889] tipc: Node identity 9e4cd661c6df, cluster identity 4711 [ 100.241305][ T6889] tipc: Enabled bearer , priority 0 [ 100.289340][ T6899] syzkaller0: entered promiscuous mode [ 100.305410][ T6899] syzkaller0: entered allmulticast mode [ 100.357530][ T6904] IPv6: addrconf: prefix option has invalid lifetime [ 100.503890][ T6889] tipc: Resetting bearer [ 100.556844][ T6889] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 100.722645][ T6888] tipc: Resetting bearer [ 100.751260][ T6888] tipc: Disabling bearer [ 100.768638][ T6921] netlink: 'syz.4.256': attribute type 10 has an invalid length. [ 101.055382][ T6921] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 101.254006][ T6938] __nla_validate_parse: 2 callbacks suppressed [ 101.254027][ T6938] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.262'. [ 101.379336][ T6934] syz.2.260 (6934) used greatest stack depth: 16088 bytes left [ 101.398533][ T6944] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.542853][ T6948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.613251][ T6949] netlink: 'syz.2.266': attribute type 2 has an invalid length. [ 101.644983][ T6948] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 101.678374][ T6951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.743089][ T6962] IPv6: sit1: Disabled Multicast RS [ 101.777608][ T6962] sit1: entered allmulticast mode [ 102.002941][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 102.083859][ T6976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'. [ 102.118307][ T6981] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 102.129067][ T6981] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.276'. [ 102.217458][ T6984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.262596][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 102.681287][ T7008] openvswitch: netlink: IP tunnel TTL not specified. [ 103.054337][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 103.088715][ T7030] netlink: 'syz.1.291': attribute type 1 has an invalid length. [ 103.210872][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 103.240213][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 103.246455][ T7030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.284727][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'. [ 103.408347][ T7030] bond1: (slave veth3): Enslaving as an active interface with a down link [ 103.459599][ T7038] bond1: (slave veth5): Enslaving as an active interface with a down link [ 103.547130][ T7041] vlan2: entered allmulticast mode [ 103.552869][ T7041] bond1: entered allmulticast mode [ 103.559222][ T7041] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 103.596015][ T7042] veth1_macvtap: left promiscuous mode [ 103.821864][ T7062] netlink: 56 bytes leftover after parsing attributes in process `syz.1.297'. [ 104.119022][ T7075] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 104.156255][ T7069] netlink: 'syz.1.299': attribute type 13 has an invalid length. [ 104.295042][ T7075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.339915][ T7079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.347349][ T7079] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.359861][ T7079] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 104.385360][ T7088] vlan3: entered allmulticast mode [ 104.390753][ T7088] bond2: entered allmulticast mode [ 104.416566][ T7090] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 (while UP) [ 104.581854][ T7097] lo: entered allmulticast mode [ 104.680981][ T7102] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 104.709239][ T7102] netlink: 'syz.0.309': attribute type 3 has an invalid length. [ 105.055227][ T7125] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 105.148248][ T7125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.249570][ T7130] veth3: entered promiscuous mode [ 105.984869][ T7128] infiniband syz1: set active [ 106.002750][ T7128] infiniband syz1: added bond0 [ 106.022926][ T7128] syz1: rxe_create_cq: returned err = -12 [ 106.040374][ T7128] infiniband syz1: Couldn't create ib_mad CQ [ 106.063397][ T7128] infiniband syz1: Couldn't open port 1 [ 106.136969][ T7167] netlink: 'syz.2.326': attribute type 29 has an invalid length. [ 106.170276][ T7167] netlink: 'syz.2.326': attribute type 29 has an invalid length. [ 106.187121][ T7128] RDS/IB: syz1: added [ 106.205952][ T7128] smc: adding ib device syz1 with port count 1 [ 106.214183][ T7128] smc: ib device syz1 port 1 has pnetid [ 106.593018][ T7181] __nla_validate_parse: 12 callbacks suppressed [ 106.593036][ T7181] netlink: 64 bytes leftover after parsing attributes in process `syz.0.332'. [ 106.632023][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 106.897776][ T7196] tipc: Enabling of bearer rejected, failed to enable media [ 106.946346][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 107.187552][ T7205] bond0: entered promiscuous mode [ 107.223449][ T7205] bond_slave_0: entered promiscuous mode [ 107.251284][ T7205] bond_slave_1: entered promiscuous mode [ 107.465597][ T7215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.344'. [ 107.705977][ T7230] netlink: 'syz.0.349': attribute type 16 has an invalid length. [ 107.736811][ T7230] netlink: 'syz.0.349': attribute type 3 has an invalid length. [ 107.740413][ T7225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.347'. [ 107.746167][ T7230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.349'. [ 107.975670][ T7240] netlink: 228 bytes leftover after parsing attributes in process `syz.2.350'. [ 108.018152][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 108.568360][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 108.591559][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 108.649300][ T7258] smc: net device erspan0 applied user defined pnetid SYZ0 [ 109.487214][ T7299] validate_nla: 1 callbacks suppressed [ 109.487233][ T7299] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 109.636186][ T7308] netlink: 'syz.0.371': attribute type 23 has an invalid length. [ 109.691339][ T7309] syzkaller0: entered allmulticast mode [ 109.721656][ T7306] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 109.815169][ T7311] netlink: 'syz.2.373': attribute type 5 has an invalid length. [ 110.744358][ T7370] syz.4.392: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 110.798620][ T7370] CPU: 0 UID: 0 PID: 7370 Comm: syz.4.392 Not tainted syzkaller #0 PREEMPT(full) [ 110.798647][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.798666][ T7370] Call Trace: [ 110.798674][ T7370] [ 110.798682][ T7370] dump_stack_lvl+0x189/0x250 [ 110.798715][ T7370] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 110.798744][ T7370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.798766][ T7370] ? __pfx__printk+0x10/0x10 [ 110.798794][ T7370] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 110.798818][ T7370] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 110.798849][ T7370] warn_alloc+0x214/0x310 [ 110.798881][ T7370] ? stack_depot_save_flags+0x40/0x860 [ 110.798912][ T7370] ? __pfx_warn_alloc+0x10/0x10 [ 110.798944][ T7370] ? kasan_save_track+0x4f/0x80 [ 110.798968][ T7370] ? xskq_create+0x56/0x170 [ 110.798987][ T7370] ? xsk_init_queue+0xb0/0x110 [ 110.799003][ T7370] ? xsk_setsockopt+0x4dc/0x8d0 [ 110.799029][ T7370] ? do_sock_setsockopt+0x179/0x1b0 [ 110.799051][ T7370] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 110.799073][ T7370] ? do_syscall_64+0xfa/0x3b0 [ 110.799093][ T7370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.799121][ T7370] __vmalloc_node_range_noprof+0x125/0x12f0 [ 110.799184][ T7370] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.799220][ T7370] ? __kasan_kmalloc+0x93/0xb0 [ 110.799249][ T7370] vmalloc_user_noprof+0xad/0xf0 [ 110.799277][ T7370] ? xskq_create+0xbf/0x170 [ 110.799297][ T7370] xskq_create+0xbf/0x170 [ 110.799320][ T7370] xsk_init_queue+0xb0/0x110 [ 110.799341][ T7370] xsk_setsockopt+0x4dc/0x8d0 [ 110.799371][ T7370] ? __pfx_xsk_setsockopt+0x10/0x10 [ 110.799398][ T7370] ? __pfx_aa_sk_perm+0x10/0x10 [ 110.799437][ T7370] ? aa_sock_opt_perm+0xff/0x1b0 [ 110.799458][ T7370] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 110.799479][ T7370] ? __pfx_xsk_setsockopt+0x10/0x10 [ 110.799508][ T7370] do_sock_setsockopt+0x179/0x1b0 [ 110.799535][ T7370] __x64_sys_setsockopt+0x13f/0x1b0 [ 110.799563][ T7370] do_syscall_64+0xfa/0x3b0 [ 110.799583][ T7370] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.799606][ T7370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.799623][ T7370] ? clear_bhb_loop+0x60/0xb0 [ 110.799644][ T7370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.799661][ T7370] RIP: 0033:0x7f3793b8eec9 [ 110.799683][ T7370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.799697][ T7370] RSP: 002b:00007f379496e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.799716][ T7370] RAX: ffffffffffffffda RBX: 00007f3793de6090 RCX: 00007f3793b8eec9 [ 110.799730][ T7370] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 110.799741][ T7370] RBP: 00007f3793c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 110.799753][ T7370] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.799764][ T7370] R13: 00007f3793de6128 R14: 00007f3793de6090 R15: 00007ffd46c94878 [ 110.799794][ T7370] [ 111.099691][ T7370] Mem-Info: [ 111.102854][ T7370] active_anon:4779 inactive_anon:0 isolated_anon:0 [ 111.102854][ T7370] active_file:2568 inactive_file:39887 isolated_file:0 [ 111.102854][ T7370] unevictable:768 dirty:37 writeback:0 [ 111.102854][ T7370] slab_reclaimable:10828 slab_unreclaimable:99863 [ 111.102854][ T7370] mapped:28934 shmem:1358 pagetables:1113 [ 111.102854][ T7370] sec_pagetables:0 bounce:0 [ 111.102854][ T7370] kernel_misc_reclaimable:0 [ 111.102854][ T7370] free:1330907 free_pcp:16126 free_cma:0 [ 111.155286][ T7370] Node 0 active_anon:19116kB inactive_anon:0kB active_file:10272kB inactive_file:159348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115736kB dirty:140kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12436kB pagetables:4332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.192815][ T7370] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.225106][ T7370] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.254719][ T7370] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 111.260982][ T7370] Node 0 DMA32 free:1421184kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18968kB inactive_anon:0kB active_file:10272kB inactive_file:157772kB unevictable:1536kB writepending:140kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:46604kB local_pcp:21200kB free_cma:0kB [ 111.295653][ T7370] lowmem_reserve[]: 0 0 1 1 1 [ 111.306979][ T7370] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 111.336933][ T7370] lowmem_reserve[]: 0 0 0 0 0 [ 111.342349][ T7370] Node 1 Normal free:3887372kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18720kB local_pcp:8704kB free_cma:0kB [ 111.382276][ T7370] lowmem_reserve[]: 0 0 0 0 0 [ 111.389556][ T7370] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 111.404762][ T7370] Node 0 DMA32: 1338*4kB (UME) 722*8kB (UME) 126*16kB (UME) 113*32kB (UME) 78*64kB (UM) 82*128kB (UME) 50*256kB (UM) 36*512kB (UME) 14*1024kB (UM) 4*2048kB (M) 326*4096kB (M) = 1421304kB [ 111.423765][ T7370] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 111.443336][ T7370] Node 1 Normal: 183*4kB (UME) 56*8kB (UME) 51*16kB (UME) 74*32kB (UME) 30*64kB (UME) 5*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3887372kB [ 111.480108][ T7370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.502109][ T7370] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.572756][ T7370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.587199][ T7370] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.613930][ T7370] 43809 total pagecache pages [ 111.624467][ T7370] 0 pages in swap cache [ 111.637044][ T7370] Free swap = 124996kB [ 111.643895][ T7370] Total swap = 124996kB [ 111.651792][ T7370] 2097051 pages RAM [ 111.660312][ T7370] 0 pages HighMem/MovableOnly [ 111.690530][ T7370] 425673 pages reserved [ 111.696164][ T7370] 0 pages cma reserved [ 111.787879][ T7404] __nla_validate_parse: 27 callbacks suppressed [ 111.787898][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 111.834619][ T7407] delete_channel: no stack [ 111.862357][ T7404] veth1_macvtap: left promiscuous mode [ 111.985129][ T7406] IPVS: Unknown mcast interface: dvmrp0 [ 112.429094][ T7450] netlink: 44 bytes leftover after parsing attributes in process `syz.2.416'. [ 112.443604][ T7452] netlink: 44 bytes leftover after parsing attributes in process `syz.2.416'. [ 112.450378][ T7451] netlink: 'syz.4.417': attribute type 2 has an invalid length. [ 112.503752][ T7454] netlink: 'syz.1.415': attribute type 83 has an invalid length. [ 112.593398][ T7458] openvswitch: netlink: Duplicate or invalid key (type 0). [ 112.609302][ T7458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.660486][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'. [ 113.036910][ T7485] netlink: 256 bytes leftover after parsing attributes in process `syz.1.426'. [ 113.135352][ T30] audit: type=1800 audit(1759231227.378:2): pid=7495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.429" name="memory.events" dev="tmpfs" ino=474 res=0 errno=0 [ 113.171081][ T30] audit: type=1804 audit(1759231227.388:3): pid=7495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.429" name="/newroot/90/memory.events" dev="tmpfs" ino=474 res=1 errno=0 [ 113.254126][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 113.266911][ T7505] netlink: 'syz.3.430': attribute type 64 has an invalid length. [ 113.273756][ T7501] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 113.285129][ T7505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.430'. [ 113.300555][ T7501] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 113.308224][ T7501] netlink: 216 bytes leftover after parsing attributes in process `syz.2.432'. [ 113.402156][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.434'. [ 113.786989][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 114.484359][ T7594] netlink: 'syz.2.456': attribute type 11 has an invalid length. [ 114.732189][ T7612] netlink: zone id is out of range [ 114.784409][ T7612] netlink: zone id is out of range [ 114.809495][ T7612] netlink: zone id is out of range [ 114.818526][ T7612] netlink: zone id is out of range [ 114.827831][ T7612] netlink: zone id is out of range [ 114.835528][ T7618] netlink: 'syz.4.465': attribute type 1 has an invalid length. [ 114.856965][ T7616] pim6reg527: entered allmulticast mode [ 114.870268][ T7612] netlink: zone id is out of range [ 114.887773][ T7612] netlink: zone id is out of range [ 114.897860][ T7612] netlink: zone id is out of range [ 115.169638][ T7638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 115.206035][ T7638] netlink: 'syz.3.472': attribute type 33 has an invalid length. [ 115.217346][ T7638] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 115.391818][ T7652] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 115.467928][ T7652] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.565431][ T7660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.576797][ T7660] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 115.591527][ T7660] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 115.606963][ T7668] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 115.725166][ T7652] veth3: entered promiscuous mode [ 115.758567][ T7652] bond3: (slave veth3): Enslaving as an active interface with a down link [ 115.817937][ T7668] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.843885][ T5952] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.040440][ T7695] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 116.086619][ T7698] bridge_slave_0: invalid flags given to default FDB implementation [ 116.650014][ T7731] nbd0: detected capacity change from 0 to 127 [ 116.786689][ T5878] block nbd0: Receive control failed (result -32) [ 116.869146][ T7753] __nla_validate_parse: 12 callbacks suppressed [ 116.869162][ T7753] netlink: 52 bytes leftover after parsing attributes in process `syz.2.504'. [ 116.986345][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 117.399558][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'. [ 117.407493][ T7791] veth1_to_hsr: entered promiscuous mode [ 117.496042][ T7792] netlink: 'syz.2.514': attribute type 4 has an invalid length. [ 117.651702][ T7803] pim6reg1: entered promiscuous mode [ 117.660331][ T7803] pim6reg1: entered allmulticast mode [ 117.852377][ T5946] IPVS: starting estimator thread 0... [ 117.867695][ T7814] net_ratelimit: 7 callbacks suppressed [ 117.867714][ T7814] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 117.874235][ T7819] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 118.001790][ T7821] IPVS: using max 32 ests per chain, 76800 per kthread [ 118.010042][ T7833] netlink: 'syz.1.523': attribute type 16 has an invalid length. [ 118.018150][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.524'. [ 118.035170][ T7833] netlink: 'syz.1.523': attribute type 17 has an invalid length. [ 118.046826][ T7835] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 118.083398][ T7836] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 118.102728][ T7833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.715808][ T7861] openvswitch: netlink: Unknown key attributes 2 [ 118.787891][ T7865] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.050302][ T7875] netlink: 44 bytes leftover after parsing attributes in process `syz.1.535'. [ 119.154944][ T7893] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 119.287354][ T7911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.537'. [ 119.298620][ T7893] bond4: entered promiscuous mode [ 119.305731][ T7893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 119.330746][ T7911] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 119.338826][ T7911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.537'. [ 119.418887][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 119.469937][ T30] audit: type=1800 audit(1759231233.708:4): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.540" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=616 res=0 errno=0 [ 119.526293][ T7907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.884188][ T7946] netlink: 80 bytes leftover after parsing attributes in process `syz.3.545'. [ 119.912490][ T7946] netlink: 80 bytes leftover after parsing attributes in process `syz.3.545'. [ 120.085670][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.093441][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.121845][ T7949] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 120.376474][ T7965] hsr_slave_0 (unregistering): left promiscuous mode [ 120.531184][ T7978] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 120.620848][ T7985] netlink: 'syz.1.560': attribute type 39 has an invalid length. [ 121.026641][ T8011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.051118][ T8018] gtp1: entered promiscuous mode [ 121.056214][ T8018] gtp1: entered allmulticast mode [ 121.088015][ T8015] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.101203][ T8015] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.124815][ T8015] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 121.229547][ T8027] tipc: Cannot configure node identity twice [ 121.261714][ T8027] netlink: 'syz.2.574': attribute type 11 has an invalid length. [ 121.447941][ T8046] netlink: 'syz.3.575': attribute type 1 has an invalid length. [ 121.459510][ T8046] netlink: 'syz.3.575': attribute type 1 has an invalid length. [ 121.470121][ T8047] team0: Cannot enslave team device to itself [ 121.777954][ T8065] xt_l2tp: v2 tid > 0xffff: 1114244 [ 122.205099][ T8087] __nla_validate_parse: 9 callbacks suppressed [ 122.205119][ T8087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 122.226160][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 122.480664][ T8110] tipc: Resetting bearer [ 122.524224][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 122.805642][ T8110] tipc: Disabling bearer [ 122.842987][ T8112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.851376][ T8112] bridge0: port 3(bond2) entered blocking state [ 122.858304][ T8112] bridge0: port 3(bond2) entered disabled state [ 122.865073][ T8112] bond2: entered allmulticast mode [ 122.877643][ T8112] bond2: entered promiscuous mode [ 122.884105][ T8112] bridge0: port 3(bond2) entered blocking state [ 122.891425][ T8112] bridge0: port 3(bond2) entered forwarding state [ 122.924605][ T5952] bridge0: port 3(bond2) entered disabled state [ 123.037939][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 123.084619][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 123.116885][ T8145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.606'. [ 123.264434][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.608'. [ 123.288346][ T8151] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 123.317133][ T8153] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20001 [ 123.329574][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 123.338754][ T8155] bridge_slave_1: left allmulticast mode [ 123.345524][ T8155] bridge_slave_1: left promiscuous mode [ 123.361582][ T8153] IPVS: sh: FWM 3 0x00000003 - no destination available [ 123.367238][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.392168][ T8155] bridge_slave_0: left allmulticast mode [ 123.399039][ T8155] bridge_slave_0: left promiscuous mode [ 123.412033][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.444639][ T8161] netlink: 44 bytes leftover after parsing attributes in process `syz.4.610'. [ 123.533266][ T8165] sctp: [Deprecated]: syz.3.613 (pid 8165) Use of int in maxseg socket option. [ 123.533266][ T8165] Use struct sctp_assoc_value instead [ 123.737946][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.616'. [ 124.023170][ T8202] tipc: Started in network mode [ 124.037009][ T8202] tipc: Node identity 5e5ec0a1c548, cluster identity 4711 [ 124.066153][ T8202] tipc: Enabled bearer , priority 0 [ 124.076912][ T8204] netlink: 'syz.4.624': attribute type 11 has an invalid length. [ 124.095635][ T8202] syzkaller0: entered promiscuous mode [ 124.125704][ T8202] syzkaller0: entered allmulticast mode [ 124.163609][ T8202] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 124.163723][ T8209] netlink: 'syz.2.625': attribute type 3 has an invalid length. [ 124.223306][ T8202] tipc: Resetting bearer [ 124.242325][ T8201] tipc: Resetting bearer [ 124.306295][ T8201] tipc: Disabling bearer [ 124.435925][ T8221] tipc: Enabled bearer , priority 10 [ 124.518427][ T8225] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 124.526306][ T8225] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 124.724343][ T8237] vlan1: entered promiscuous mode [ 124.735108][ T8237] bridge0: entered promiscuous mode [ 124.824840][ T8240] sctp: [Deprecated]: syz.4.635 (pid 8240) Use of int in max_burst socket option. [ 124.824840][ T8240] Use struct sctp_assoc_value instead [ 125.433697][ T8266] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 125.473621][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.481989][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.559980][ T5947] tipc: Node number set to 1311349106 [ 126.609942][ T8345] netlink: 'syz.3.662': attribute type 24 has an invalid length. [ 126.703968][ T8343] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 127.067077][ T8372] syzkaller0: entered promiscuous mode [ 127.076400][ T8372] syzkaller0: entered allmulticast mode [ 127.623851][ T8394] netlink: 'syz.0.677': attribute type 29 has an invalid length. [ 127.655342][ T8398] netlink: 'syz.0.677': attribute type 29 has an invalid length. [ 127.689249][ T8404] __nla_validate_parse: 15 callbacks suppressed [ 127.689271][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.679'. [ 127.846867][ T8412] ip6gre1: entered allmulticast mode [ 128.106945][ T8428] netlink: 'syz.0.685': attribute type 1 has an invalid length. [ 128.125952][ T8428] netlink: 'syz.0.685': attribute type 1 has an invalid length. [ 128.160333][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.687'. [ 128.171260][ T8431] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 128.189165][ T8431] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 128.334976][ T8445] netlink: 'syz.4.693': attribute type 1 has an invalid length. [ 128.371795][ T8445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.446140][ T8445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.470391][ T8445] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.528434][ T8445] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 128.536980][ T8461] netlink: 100 bytes leftover after parsing attributes in process `syz.1.695'. [ 128.590905][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 128.598282][ T8453] veth5: entered promiscuous mode [ 128.605822][ T8460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.612516][ T8453] bond2: (slave veth5): Enslaving as an active interface with a down link [ 128.620469][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 128.964468][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 129.178193][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.709'. [ 129.252374][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.710'. [ 129.291999][ T8505] team0: Device ip6gre1 is of different type [ 129.364453][ T8514] netlink: 'syz.0.711': attribute type 2 has an invalid length. [ 129.394298][ T8514] netlink: 'syz.0.711': attribute type 10 has an invalid length. [ 129.443310][ T8514] veth1_macvtap: entered promiscuous mode [ 129.461708][ T8514] team0: Port device veth1_macvtap added [ 129.516950][ T8525] netlink: 'syz.2.713': attribute type 27 has an invalid length. [ 129.866775][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.722'. [ 129.905667][ T8559] openvswitch: netlink: IPv4 tun info is not correct [ 129.914629][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 130.112524][ T8566] netlink: 5 bytes leftover after parsing attributes in process `syz.1.726'. [ 130.134508][ T8566] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 130.154121][ T8566] 0ªî{X¹¦: entered allmulticast mode [ 130.168907][ T8566] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 130.211025][ T8568] sctp: [Deprecated]: syz.4.727 (pid 8568) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.211025][ T8568] Use struct sctp_sack_info instead [ 130.482485][ T8586] team0: Device gtp2 is of different type [ 130.607105][ T8587] team0: Device gtp2 is of different type [ 130.636069][ T8603] x_tables: ip_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 96 [ 130.693219][ T8601] 8021q: VLANs not supported on gre0 [ 131.100246][ T8645] unsupported nlmsg_type 40 [ 131.140751][ T8644] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 131.411086][ T8661] 0ªî{X¹¦: entered promiscuous mode [ 131.424151][ T8661] vlan2: entered promiscuous mode [ 131.456965][ T8665] 8021q: VLANs not supported on ip6_vti0 [ 131.464924][ T8667] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 131.506586][ T8667] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.555129][ T8661] vlan2: entered promiscuous mode [ 131.684640][ T8661] vlan2: entered promiscuous mode [ 131.789389][ T8661] vlan2: entered promiscuous mode [ 131.942192][ T8689] syz1: rxe_newlink: already configured on bond0 [ 131.984106][ T8692] validate_nla: 3 callbacks suppressed [ 131.984123][ T8692] netlink: 'syz.3.761': attribute type 13 has an invalid length. [ 132.020639][ T8661] vlan2: entered promiscuous mode [ 132.034217][ T8690] netlink: 'syz.3.761': attribute type 13 has an invalid length. [ 132.110377][ T8692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.157320][ T8690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.263088][ T8661] vlan2: entered promiscuous mode [ 132.836499][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.845792][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.235680][ T8768] __nla_validate_parse: 6 callbacks suppressed [ 133.235699][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 133.344318][ T8770] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.782'. [ 133.602106][ T8784] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.784'. [ 133.698526][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 133.816199][ T8795] netlink: 'syz.2.789': attribute type 3 has an invalid length. [ 133.824528][ T8795] netlink: 666 bytes leftover after parsing attributes in process `syz.2.789'. [ 133.996171][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.791'. [ 134.393605][ T8816] netlink: 'syz.1.797': attribute type 1 has an invalid length. [ 134.443551][ T8816] bond3: entered promiscuous mode [ 134.452534][ T8816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.487667][ T8816] bond3: (slave bridge6): making interface the new active one [ 134.498887][ T8816] bridge6: entered promiscuous mode [ 134.507862][ T8816] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 135.473346][ T8869] netlink: 48 bytes leftover after parsing attributes in process `syz.1.811'. [ 135.486971][ T8866] 8021q: VLANs not supported on wg2 [ 135.527345][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 135.573544][ T8869] bridge_slave_1: left allmulticast mode [ 135.602001][ T8869] bridge_slave_1: left promiscuous mode [ 135.631123][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.642723][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 135.653824][ T8869] bridge_slave_0: left allmulticast mode [ 135.663894][ T8869] bridge_slave_0: left promiscuous mode [ 135.670878][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.853300][ T8880] bond0: (slave bond_slave_0): Releasing backup interface [ 135.882735][ T8880] bond0: (slave bond_slave_1): Releasing backup interface [ 135.891594][ T8893] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 135.915751][ T8896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.818'. [ 135.936492][ T8880] team0: Port device team_slave_0 removed [ 135.955399][ T8893] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 135.976037][ T8897] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 135.993459][ T8880] team0: Port device team_slave_1 removed [ 136.002812][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.005447][ T8893] netlink: 'syz.0.816': attribute type 2 has an invalid length. [ 136.032094][ T5926] IPVS: starting estimator thread 0... [ 136.032158][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.051829][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.070134][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.087179][ T8880] bond0: (slave wlan1): Releasing backup interface [ 136.110684][ T8880] bond2: (slave veth5): Releasing active interface [ 136.131472][ T8902] IPVS: using max 34 ests per chain, 81600 per kthread [ 136.487899][ T8926] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 (while UP) [ 136.897575][ T8949] netlink: 'syz.2.835': attribute type 5 has an invalid length. [ 137.418825][ T8976] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 137.447454][ T8976] netlink: 'syz.2.844': attribute type 2 has an invalid length. [ 137.450193][ T8979] netlink: 'syz.4.845': attribute type 24 has an invalid length. [ 137.475543][ T8984] netlink: 'syz.2.844': attribute type 4 has an invalid length. [ 137.476135][ T8975] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 137.500578][ T8980] openvswitch: netlink: Unknown nsh attribute 0 [ 137.506887][ T8980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.537804][ T8975] netlink: 'syz.2.844': attribute type 2 has an invalid length. [ 137.568483][ T8984] `: renamed from bond0 (while UP) [ 137.707224][ T8996] netlink: 'syz.1.852': attribute type 1 has an invalid length. [ 138.822191][ T9044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.860283][ T9044] openvswitch: netlink: Flow actions attr not present in new flow. [ 139.024598][ T9058] __nla_validate_parse: 13 callbacks suppressed [ 139.024617][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 139.040818][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 139.152814][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 139.387382][ T9075] netlink: 52 bytes leftover after parsing attributes in process `syz.3.877'. [ 139.397200][ T9075] netlink: 52 bytes leftover after parsing attributes in process `syz.3.877'. [ 139.811605][ T9097] tipc: Enabled bearer , priority 0 [ 139.836000][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 139.896945][ T9097] syzkaller0: entered promiscuous mode [ 139.903032][ T9097] syzkaller0: entered allmulticast mode [ 139.915122][ T9107] netlink: 830 bytes leftover after parsing attributes in process `syz.3.888'. [ 139.941324][ T9108] netlink: 830 bytes leftover after parsing attributes in process `syz.3.888'. [ 139.964390][ T9104] tipc: Resetting bearer [ 140.113050][ T9122] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 140.187297][ T9123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.194781][ T9123] IPv6: NLM_F_CREATE should be set when creating new route [ 140.811769][ T43] tipc: Node number set to 2601959585 [ 141.145573][ T9104] tipc: Disabling bearer [ 141.163170][ T9115] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 141.308842][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 141.352495][ T9137] smc: net device erspan0 erased user defined pnetid SYZ0 [ 141.375575][ T9137] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 141.508132][ T9147] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 141.539594][ T9135] bridge_slave_1: left allmulticast mode [ 141.546118][ T9135] bridge_slave_1: left promiscuous mode [ 141.553122][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.569303][ T9135] bridge_slave_0: left allmulticast mode [ 141.585103][ T9135] bridge_slave_0: left promiscuous mode [ 141.594306][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.918933][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'. [ 142.110445][ T5878] Bluetooth: hci1: command tx timeout [ 142.269219][ T9189] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 142.729288][ T9209] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 142.768700][ T9209] bond3: entered promiscuous mode [ 142.774337][ T9209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.794321][ T9211] bond3: (slave bridge2): making interface the new active one [ 142.802243][ T9211] bridge2: entered promiscuous mode [ 142.808420][ T9211] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 143.133750][ T9228] netlink: 'syz.0.924': attribute type 39 has an invalid length. [ 143.572285][ T9240] sctp: [Deprecated]: syz.1.928 (pid 9240) Use of int in max_burst socket option. [ 143.572285][ T9240] Use struct sctp_assoc_value instead [ 143.591640][ T9241] syzkaller1: entered promiscuous mode [ 143.597142][ T9241] syzkaller1: entered allmulticast mode [ 143.666867][ T9250] Bluetooth: MGMT ver 1.23 [ 143.686840][ T9252] netlink: 'syz.2.929': attribute type 1 has an invalid length. [ 143.790385][ T9251] netem: unknown loss type 8 [ 143.796946][ T9251] netem: change failed [ 144.053420][ T9271] ip6gretap0: entered allmulticast mode [ 144.186485][ T9268] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 144.198261][ T9268] __nla_validate_parse: 6 callbacks suppressed [ 144.198279][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 144.365211][ T9271] raw_sendmsg: syz.0.933 forgot to set AF_INET. Fix it! [ 144.391396][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.938'. [ 144.440373][ T9285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.938'. [ 144.631048][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 144.644666][ T9296] bond0: entered promiscuous mode [ 144.670956][ T9296] bond0: entered allmulticast mode [ 144.676668][ T9296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.745862][ T9306] veth0: entered promiscuous mode [ 144.839135][ T9311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.948'. [ 144.874810][ T9311] openvswitch: netlink: IPv4 tunnel dst address is zero [ 145.132212][ T9323] netlink: 'syz.4.949': attribute type 21 has an invalid length. [ 145.272746][ T9323] netlink: 156 bytes leftover after parsing attributes in process `syz.4.949'. [ 145.290268][ T9306] netlink: 176 bytes leftover after parsing attributes in process `syz.1.944'. [ 145.317666][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 145.503684][ T9331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.953'. [ 145.505034][ T9333] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 145.519985][ T9331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.953'. [ 145.542698][ T9303] veth0: left promiscuous mode [ 145.563964][ T9334] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 145.595162][ T9337] tipc: Enabling of bearer rejected, already enabled [ 145.915461][ T9337] team0 (unregistering): Port device team_slave_0 removed [ 145.926752][ T9337] team0 (unregistering): Port device team_slave_1 removed [ 146.152095][ T9360] gretap1: entered promiscuous mode [ 146.187828][ T9360] gretap1: entered allmulticast mode [ 146.240370][ T9365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.519794][ T9379] netlink: 'syz.4.969': attribute type 13 has an invalid length. [ 146.542674][ T9380] netlink: 'syz.4.969': attribute type 13 has an invalid length. [ 146.572536][ T9379] veth0_macvtap: left promiscuous mode [ 146.685636][ T9379] macvtap0: entered allmulticast mode [ 146.713192][ T9379] macvtap0: refused to change device tx_queue_len [ 146.758125][ T9380] macvtap0: refused to change device tx_queue_len [ 147.076562][ T9413] 8021q: VLANs not supported on gre0 [ 147.357007][ T9436] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 147.491147][ T9444] 8021q: adding VLAN 0 to HW filter on device bond7 [ 147.608410][ T9444] bond7: (slave veth0_to_bond): making interface the new active one [ 147.644757][ T9444] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 147.884803][ T9472] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 148.155535][ T9489] sctp: [Deprecated]: syz.3.1005 (pid 9489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.155535][ T9489] Use struct sctp_sack_info instead [ 148.377193][ T9510] validate_nla: 2 callbacks suppressed [ 148.377213][ T9510] netlink: 'syz.2.1007': attribute type 1 has an invalid length. [ 148.666261][ T9523] netlink: 'syz.1.1013': attribute type 21 has an invalid length. [ 148.864832][ T9531] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 148.883873][ T9531] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 149.193766][ T9552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.202890][ T6710] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.228356][ T6046] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.306983][ T6046] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.342722][ T6046] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.784910][ T9598] __nla_validate_parse: 23 callbacks suppressed [ 149.784930][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1036'. [ 150.002676][ T9609] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 150.206368][ T9609] gretap0: entered promiscuous mode [ 150.211994][ T9609] gretap0: entered allmulticast mode [ 150.248046][ T9624] xt_socket: unknown flags 0xe4 [ 150.300570][ T9623] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1044'. [ 150.392559][ T9624] IPVS: persistence engine module ip_vs_pe_À not found [ 150.678308][ T9649] netlink: 'syz.0.1048': attribute type 10 has an invalid length. [ 150.773586][ T9657] netlink: 'syz.3.1051': attribute type 1 has an invalid length. [ 150.785056][ T9649] mac80211_hwsim hwsim3 ÿ: entered promiscuous mode [ 150.790835][ T9658] netlink: 'syz.3.1051': attribute type 1 has an invalid length. [ 150.799672][ T9658] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1051'. [ 150.822349][ T9649] bond0: (slave ÿ): Enslaving as an active interface with an up link [ 150.837519][ T9657] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1051'. [ 150.850757][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 151.360993][ T9688] IPVS: Error joining to the multicast group [ 151.398144][ T9693] netlink: 'syz.1.1059': attribute type 24 has an invalid length. [ 151.468975][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 151.485842][ T9693] macvlan0: entered promiscuous mode [ 151.508561][ T9693] batadv_slave_0: entered promiscuous mode [ 151.518613][ T9700] netlink: 'syz.4.1063': attribute type 4 has an invalid length. [ 151.856507][ T9723] syzkaller0: create flow: hash 1126602015 index 1 [ 152.074800][ T9718] syzkaller0: delete flow: hash 1126602015 index 1 [ 152.154144][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 153.229014][ T9750] tipc: Enabled bearer , priority 0 [ 153.367892][ T9760] IPVS: Error connecting to the multicast addr [ 153.385116][ T9761] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1077'. [ 153.402731][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 153.412184][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 153.584855][ T9778] tipc: Enabling of bearer rejected, already enabled [ 153.702183][ T9792] tipc: Enabled bearer , priority 0 [ 153.710584][ T9792] syzkaller0: entered promiscuous mode [ 153.716075][ T9792] syzkaller0: entered allmulticast mode [ 153.723159][ T9794] netlink: 'syz.0.1086': attribute type 8 has an invalid length. [ 153.796522][ T9791] tipc: Resetting bearer [ 153.856695][ T9791] tipc: Disabling bearer [ 154.148339][ T30] audit: type=1107 audit(1759231268.398:5): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 154.295501][ T9837] netlink: 'syz.4.1101': attribute type 29 has an invalid length. [ 154.411915][ T9837] netlink: 'syz.4.1101': attribute type 29 has an invalid length. [ 154.624741][ T9855] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003 [ 154.840836][ T9864] __nla_validate_parse: 7 callbacks suppressed [ 154.840855][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1109'. [ 155.102277][ T9888] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1117'. [ 155.199198][ T9892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'. [ 155.265535][ T9896] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 155.289473][ T9896] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.1118'. [ 155.363003][ T9899] syzkaller0: entered allmulticast mode [ 155.430769][ T9912] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1123'. [ 155.431090][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 155.518615][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 155.568597][ T9920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.973740][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1133'. [ 156.298475][ T9957] tipc: Started in network mode [ 156.304038][ T9957] tipc: Node identity b2a5e544b42c, cluster identity 4711 [ 156.322115][ T9957] tipc: Enabled bearer , priority 0 [ 156.413732][ T9957] syzkaller0: entered promiscuous mode [ 156.419245][ T9957] syzkaller0: entered allmulticast mode [ 156.440390][ T9957] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 156.470255][ T9963] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 156.478018][ T9963] netlink: 'syz.4.1142': attribute type 2 has an invalid length. [ 156.488508][ T9957] tipc: Resetting bearer [ 156.506418][ T9956] tipc: Resetting bearer [ 156.525853][ T9963] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 156.559009][ T9963] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.1142'. [ 156.574762][ T9956] tipc: Disabling bearer [ 156.649928][ T9968] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1143'. [ 156.716486][ T9973] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 156.745208][ T9973] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 156.797697][ T9973] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.015787][ T9998] sctp: [Deprecated]: syz.3.1149 (pid 9998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.015787][ T9998] Use struct sctp_sack_info instead [ 157.246570][T10011] netlink: 'syz.2.1152': attribute type 4 has an invalid length. [ 157.542398][T10033] netlink: 'syz.2.1157': attribute type 1 has an invalid length. [ 157.568467][ T5947] IPVS: starting estimator thread 0... [ 157.591544][T10034] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 157.702495][T10036] IPVS: using max 32 ests per chain, 76800 per kthread [ 157.933040][T10059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.792129][T10122] netlink: 'syz.0.1187': attribute type 15 has an invalid length. [ 159.294810][T10155] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 159.332605][T10155] 8021q: adding VLAN 0 to HW filter on device bond8 [ 159.919546][T10189] __nla_validate_parse: 10 callbacks suppressed [ 159.919564][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 160.243679][T10199] netlink: 'syz.2.1203': attribute type 27 has an invalid length. [ 160.256688][T10203] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.287000][T10203] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.576671][T10217] netlink: 'syz.0.1209': attribute type 3 has an invalid length. [ 160.627617][T10221] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1211'. [ 160.656086][T10227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.696501][T10221] vlan0: entered allmulticast mode [ 160.703716][T10221] erspan0: entered allmulticast mode [ 160.748666][T10232] pimreg: entered allmulticast mode [ 160.832635][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'. [ 160.844506][T10237] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 160.862285][T10238] tipc: Enabled bearer , priority 10 [ 161.895992][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.974450][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.998688][T10277] tipc: Node number set to 1486083681 [ 162.033790][T10261] veth1_to_hsr: left promiscuous mode [ 162.254493][T10261] gretap1: left promiscuous mode [ 162.260167][T10261] gretap1: left allmulticast mode [ 162.275601][T10261] veth3: left promiscuous mode [ 162.286000][T10261] gtp1: left promiscuous mode [ 162.291019][T10261] gtp1: left allmulticast mode [ 162.345280][T10261] bond0: left promiscuous mode [ 162.352808][T10261] bond0: left allmulticast mode [ 162.469805][ T6706] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.480932][ T6706] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.551770][ T6706] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.625193][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 162.683177][T10295] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1228'. [ 162.743360][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 162.874710][T10305] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 162.924782][T10306] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 162.947678][T10306] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1231'. [ 162.964448][T10312] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1233'. [ 162.983455][T10314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1234'. [ 163.017571][T10312] openvswitch: netlink: Duplicate or invalid key (type 0). [ 163.026498][T10312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.066962][T10312] netlink: 'syz.4.1233': attribute type 10 has an invalid length. [ 163.075754][T10312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1233'. [ 163.104020][T10312] team0: Port device geneve0 added [ 163.635034][T10354] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 163.702263][T10359] netlink: 'syz.4.1248': attribute type 11 has an invalid length. [ 163.715535][T10361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.443517][T10390] syzkaller0: entered promiscuous mode [ 164.449093][T10390] syzkaller0: entered allmulticast mode [ 164.858086][T10415] netlink: 'syz.4.1261': attribute type 3 has an invalid length. [ 166.358346][T10448] __nla_validate_parse: 4 callbacks suppressed [ 166.358365][T10448] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1270'. [ 166.423884][T10448] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1270'. [ 166.438606][T10452] tipc: Enabled bearer , priority 0 [ 166.447413][T10452] syzkaller0: entered promiscuous mode [ 166.452975][T10452] syzkaller0: entered allmulticast mode [ 166.463274][T10452] tipc: Resetting bearer [ 166.501859][T10447] tipc: Resetting bearer [ 166.541718][T10447] tipc: Disabling bearer [ 166.907069][T10491] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.091915][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 167.127366][T10500] macsec3: entered promiscuous mode [ 167.163049][T10500] bridge0: entered promiscuous mode [ 167.175302][T10500] macsec3: entered allmulticast mode [ 167.206809][T10500] bridge0: entered allmulticast mode [ 167.214656][T10500] bridge0: port 1(macsec3) entered blocking state [ 167.221774][T10500] bridge0: port 1(macsec3) entered disabled state [ 167.237542][T10500] bridge0: left allmulticast mode [ 167.247596][T10500] bridge0: left promiscuous mode [ 167.432885][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 168.085614][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1304'. [ 168.296955][T10563] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1309'. [ 168.325983][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1311'. [ 168.339997][T10563] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1309'. [ 168.360321][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1311'. [ 168.489160][ T6706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.512606][ T6706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.535734][T10574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.715212][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 168.727704][T10582] netlink: 'syz.4.1315': attribute type 6 has an invalid length. [ 169.483426][T10619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.544988][T10623] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 169.580973][T10623] bond9: entered promiscuous mode [ 169.586816][T10623] 8021q: adding VLAN 0 to HW filter on device bond9 [ 170.057695][T10652] netlink: 'syz.4.1342': attribute type 1 has an invalid length. [ 170.080920][T10653] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 170.096673][T10652] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.284859][T10652] bond4: (slave veth9): Enslaving as an active interface with a down link [ 170.396821][T10653] bond5: entered promiscuous mode [ 170.419386][T10653] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.467793][T10665] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 170.786596][T10693] bridge_slave_1: entered promiscuous mode [ 171.478866][T10733] __nla_validate_parse: 5 callbacks suppressed [ 171.478885][T10733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1360'. [ 171.533354][T10733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1360'. [ 171.639420][T10743] Unsupported ieee802154 address type: 0 [ 171.684382][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 171.709021][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1363'. [ 171.771231][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 171.811126][T10753] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 171.856744][T10753] bond5: entered promiscuous mode [ 171.867331][T10753] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.876852][T10756] netlink: 'syz.2.1367': attribute type 10 has an invalid length. [ 171.895219][T10753] bond5: (slave bridge4): making interface the new active one [ 171.903025][T10753] bridge4: entered promiscuous mode [ 171.912868][T10753] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 171.926041][T10756] team0: Port device dummy0 added [ 171.945947][T10750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.149399][T10774] netlink: 'syz.2.1369': attribute type 3 has an invalid length. [ 172.160821][T10774] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1369'. [ 172.218247][T10779] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 172.268378][T10779] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.299598][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ff8000: rx timeout, send abort [ 172.308207][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888145ff8000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.338821][T10781] bond6: (slave veth11): Enslaving as an active interface with a down link [ 172.382647][T10779] bond4: (slave veth0_to_bond): Releasing active interface [ 172.387283][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 172.403129][T10785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'. [ 172.418860][T10779] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 172.492240][T10781] bond6: (slave veth13): Enslaving as an active interface with a down link [ 172.531384][T10795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1376'. [ 172.608186][T10797] tipc: Enabled bearer , priority 0 [ 172.633628][T10797] syzkaller0: entered promiscuous mode [ 172.646316][T10797] syzkaller0: entered allmulticast mode [ 172.706484][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1378'. [ 172.726633][T10802] nbd: must specify a size in bytes for the device [ 172.742507][T10804] netlink: 'syz.0.1379': attribute type 4 has an invalid length. [ 172.748245][T10802] pim6reg527: entered allmulticast mode [ 172.835696][T10796] tipc: Resetting bearer [ 172.865337][T10796] tipc: Disabling bearer [ 172.966207][T10806] bond2: entered allmulticast mode [ 173.080560][T10770] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 173.178227][T10828] C: renamed from lo (while UP) [ 173.761826][ T6046] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.807936][ T6046] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.110627][ T5878] Bluetooth: hci0: command 0x0c20 tx timeout [ 174.238623][T10912] netlink: 'syz.3.1415': attribute type 1 has an invalid length. [ 174.421664][T10929] openvswitch: netlink: Multiple metadata blocks provided [ 175.707943][T10934] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 175.718533][T10934] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.728385][T10934] gretap1: entered promiscuous mode [ 175.733924][T10934] gretap1: entered allmulticast mode [ 175.772071][T10937] tipc: Enabled bearer , priority 10 [ 176.226188][T10966] syzkaller0: entered promiscuous mode [ 176.242186][T10966] syzkaller0: entered allmulticast mode [ 176.686326][T10985] [ 176.688678][T10985] ====================================================== [ 176.695760][T10985] WARNING: possible circular locking dependency detected [ 176.702803][T10985] syzkaller #0 Not tainted [ 176.707200][T10985] ------------------------------------------------------ [ 176.714206][T10985] syz.3.1434/10985 is trying to acquire lock: [ 176.720263][T10985] ffffffff8e21e8e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 176.729830][T10985] [ 176.729830][T10985] but task is already holding lock: [ 176.737181][T10985] ffff8881433b80a8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 176.747449][T10985] [ 176.747449][T10985] which lock already depends on the new lock. [ 176.747449][T10985] [ 176.757839][T10985] [ 176.757839][T10985] the existing dependency chain (in reverse order) is: [ 176.766834][T10985] [ 176.766834][T10985] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 176.775421][T10985] lock_acquire+0x120/0x360 [ 176.780547][T10985] blk_alloc_queue+0x538/0x620 [ 176.785877][T10985] __blk_mq_alloc_disk+0x15c/0x340 [ 176.791527][T10985] nbd_dev_add+0x46c/0xae0 [ 176.796460][T10985] nbd_init+0x168/0x1f0 [ 176.801128][T10985] do_one_initcall+0x233/0x820 [ 176.806582][T10985] do_initcall_level+0x104/0x190 [ 176.812032][T10985] do_initcalls+0x59/0xa0 [ 176.816868][T10985] kernel_init_freeable+0x334/0x4b0 [ 176.822601][T10985] kernel_init+0x1d/0x1d0 [ 176.827445][T10985] ret_from_fork+0x439/0x7d0 [ 176.832630][T10985] ret_from_fork_asm+0x1a/0x30 [ 176.837913][T10985] [ 176.837913][T10985] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 176.845141][T10985] lock_acquire+0x120/0x360 [ 176.850164][T10985] fs_reclaim_acquire+0x72/0x100 [ 176.855605][T10985] prepare_alloc_pages+0x153/0x610 [ 176.861219][T10985] __alloc_frozen_pages_noprof+0x123/0x370 [ 176.867527][T10985] __alloc_pages_noprof+0xa/0x30 [ 176.872967][T10985] pcpu_populate_chunk+0x182/0xb30 [ 176.878588][T10985] pcpu_alloc_noprof+0xcbf/0x1720 [ 176.884137][T10985] bpf_map_alloc_percpu+0xbc/0x1b0 [ 176.889844][T10985] prealloc_init+0x225/0x630 [ 176.894964][T10985] htab_map_alloc+0x6ce/0xc70 [ 176.900145][T10985] map_create+0xaa3/0x14d0 [ 176.905066][T10985] __sys_bpf+0x60f/0x870 [ 176.909827][T10985] __x64_sys_bpf+0x7c/0x90 [ 176.914745][T10985] do_syscall_64+0xfa/0x3b0 [ 176.919755][T10985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.926156][T10985] [ 176.926156][T10985] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 176.933869][T10985] validate_chain+0xb9b/0x2140 [ 176.939143][T10985] __lock_acquire+0xab9/0xd20 [ 176.944344][T10985] lock_acquire+0x120/0x360 [ 176.949358][T10985] __mutex_lock+0x187/0x1350 [ 176.954462][T10985] pcpu_alloc_noprof+0x286/0x1720 [ 176.959996][T10985] sbitmap_init_node+0x1e1/0x630 [ 176.965478][T10985] sbitmap_queue_init_node+0x3e/0x4d0 [ 176.971354][T10985] blk_mq_init_tags+0x110/0x280 [ 176.976714][T10985] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 176.982674][T10985] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 176.988987][T10985] nbd_start_device+0x17f/0xb10 [ 176.994344][T10985] nbd_genl_connect+0x135b/0x18f0 [ 176.999878][T10985] genl_family_rcv_msg_doit+0x212/0x300 [ 177.006018][T10985] genl_rcv_msg+0x60e/0x790 [ 177.011028][T10985] netlink_rcv_skb+0x208/0x470 [ 177.016293][T10985] genl_rcv+0x28/0x40 [ 177.020776][T10985] netlink_unicast+0x82f/0x9e0 [ 177.026051][T10985] netlink_sendmsg+0x805/0xb30 [ 177.031344][T10985] __sock_sendmsg+0x219/0x270 [ 177.036528][T10985] ____sys_sendmsg+0x505/0x830 [ 177.041798][T10985] ___sys_sendmsg+0x21f/0x2a0 [ 177.046982][T10985] __x64_sys_sendmsg+0x19b/0x260 [ 177.052437][T10985] do_syscall_64+0xfa/0x3b0 [ 177.057476][T10985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.063875][T10985] [ 177.063875][T10985] other info that might help us debug this: [ 177.063875][T10985] [ 177.074084][T10985] Chain exists of: [ 177.074084][T10985] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 177.074084][T10985] [ 177.087737][T10985] Possible unsafe locking scenario: [ 177.087737][T10985] [ 177.095178][T10985] CPU0 CPU1 [ 177.100531][T10985] ---- ---- [ 177.105873][T10985] lock(&q->q_usage_counter(io)#50); [ 177.111230][T10985] lock(fs_reclaim); [ 177.117711][T10985] lock(&q->q_usage_counter(io)#50); [ 177.125588][T10985] lock(pcpu_alloc_mutex); [ 177.130079][T10985] [ 177.130079][T10985] *** DEADLOCK *** [ 177.130079][T10985] [ 177.138202][T10985] 6 locks held by syz.3.1434/10985: [ 177.143379][T10985] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 177.151544][T10985] #1: ffffffff8f59f688 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 177.160513][T10985] #2: ffff888024bb5188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 177.171897][T10985] #3: ffff888024bb50d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 177.182845][T10985] #4: ffff8881433b80a8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 177.193536][T10985] #5: ffff8881433b80e0 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 177.204526][T10985] [ 177.204526][T10985] stack backtrace: [ 177.210403][T10985] CPU: 1 UID: 0 PID: 10985 Comm: syz.3.1434 Not tainted syzkaller #0 PREEMPT(full) [ 177.210423][T10985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.210430][T10985] Call Trace: [ 177.210437][T10985] [ 177.210442][T10985] dump_stack_lvl+0x189/0x250 [ 177.210459][T10985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.210471][T10985] ? __pfx__printk+0x10/0x10 [ 177.210485][T10985] ? print_lock_name+0xde/0x100 [ 177.210500][T10985] print_circular_bug+0x2ee/0x310 [ 177.210513][T10985] check_noncircular+0x134/0x160 [ 177.210525][T10985] validate_chain+0xb9b/0x2140 [ 177.210540][T10985] __lock_acquire+0xab9/0xd20 [ 177.210556][T10985] ? pcpu_alloc_noprof+0x286/0x1720 [ 177.210570][T10985] lock_acquire+0x120/0x360 [ 177.210584][T10985] ? pcpu_alloc_noprof+0x286/0x1720 [ 177.210601][T10985] __mutex_lock+0x187/0x1350 [ 177.210613][T10985] ? pcpu_alloc_noprof+0x286/0x1720 [ 177.210628][T10985] ? kasan_save_track+0x4f/0x80 [ 177.210640][T10985] ? kasan_save_track+0x3e/0x80 [ 177.210651][T10985] ? __kasan_kmalloc+0x93/0xb0 [ 177.210666][T10985] ? blk_mq_init_tags+0x85/0x280 [ 177.210679][T10985] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 177.210689][T10985] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 177.210700][T10985] ? pcpu_alloc_noprof+0x286/0x1720 [ 177.210714][T10985] ? nbd_genl_connect+0x135b/0x18f0 [ 177.210724][T10985] ? genl_family_rcv_msg_doit+0x212/0x300 [ 177.210738][T10985] ? genl_rcv_msg+0x60e/0x790 [ 177.210750][T10985] ? __pfx___mutex_lock+0x10/0x10 [ 177.210760][T10985] ? ____sys_sendmsg+0x505/0x830 [ 177.210773][T10985] ? do_syscall_64+0xfa/0x3b0 [ 177.210784][T10985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.210797][T10985] pcpu_alloc_noprof+0x286/0x1720 [ 177.210815][T10985] sbitmap_init_node+0x1e1/0x630 [ 177.210827][T10985] ? __kasan_kmalloc+0x93/0xb0 [ 177.210842][T10985] sbitmap_queue_init_node+0x3e/0x4d0 [ 177.210854][T10985] blk_mq_init_tags+0x110/0x280 [ 177.210868][T10985] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 177.210881][T10985] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 177.210892][T10985] ? kfree+0x18e/0x440 [ 177.210905][T10985] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 177.210921][T10985] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 177.210937][T10985] ? sysfs_add_file_mode_ns+0x259/0x300 [ 177.210954][T10985] nbd_start_device+0x17f/0xb10 [ 177.210966][T10985] ? device_create_file+0xf4/0x1c0 [ 177.210978][T10985] nbd_genl_connect+0x135b/0x18f0 [ 177.210990][T10985] ? __pfx_nbd_genl_connect+0x10/0x10 [ 177.211002][T10985] ? __nla_parse+0x40/0x60 [ 177.211013][T10985] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 177.211029][T10985] genl_family_rcv_msg_doit+0x212/0x300 [ 177.211044][T10985] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.211061][T10985] ? stack_trace_save+0x9c/0xe0 [ 177.211074][T10985] genl_rcv_msg+0x60e/0x790 [ 177.211088][T10985] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.211100][T10985] ? __pfx_nbd_genl_connect+0x10/0x10 [ 177.211113][T10985] netlink_rcv_skb+0x208/0x470 [ 177.211122][T10985] ? __lock_acquire+0xab9/0xd20 [ 177.211136][T10985] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.211149][T10985] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.211163][T10985] ? down_read+0x1ad/0x2e0 [ 177.211175][T10985] genl_rcv+0x28/0x40 [ 177.211187][T10985] netlink_unicast+0x82f/0x9e0 [ 177.211204][T10985] ? __pfx_netlink_unicast+0x10/0x10 [ 177.211219][T10985] ? netlink_sendmsg+0x642/0xb30 [ 177.211229][T10985] ? skb_put+0x11b/0x210 [ 177.211241][T10985] netlink_sendmsg+0x805/0xb30 [ 177.211253][T10985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.211264][T10985] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.211275][T10985] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.211286][T10985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.211296][T10985] __sock_sendmsg+0x219/0x270 [ 177.211311][T10985] ____sys_sendmsg+0x505/0x830 [ 177.211326][T10985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.211351][T10985] ? import_iovec+0x74/0xa0 [ 177.211375][T10985] ___sys_sendmsg+0x21f/0x2a0 [ 177.211399][T10985] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.211424][T10985] ? __fget_files+0x2a/0x420 [ 177.211433][T10985] ? __fget_files+0x3a0/0x420 [ 177.211444][T10985] __x64_sys_sendmsg+0x19b/0x260 [ 177.211457][T10985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.211471][T10985] ? rcu_is_watching+0x15/0xb0 [ 177.211482][T10985] ? do_syscall_64+0xbe/0x3b0 [ 177.211494][T10985] do_syscall_64+0xfa/0x3b0 [ 177.211504][T10985] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.211514][T10985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.211524][T10985] ? clear_bhb_loop+0x60/0xb0 [ 177.211534][T10985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.211544][T10985] RIP: 0033:0x7fa6b558eec9 [ 177.211555][T10985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.211563][T10985] RSP: 002b:00007fa6b649b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.211575][T10985] RAX: ffffffffffffffda RBX: 00007fa6b57e5fa0 RCX: 00007fa6b558eec9 [ 177.211583][T10985] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 177.211589][T10985] RBP: 00007fa6b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.211595][T10985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.211601][T10985] R13: 00007fa6b57e6038 R14: 00007fa6b57e5fa0 R15: 00007fffc6279718 [ 177.211612][T10985] [ 177.755948][ T5183] block nbd1: Receive control failed (result -32) [ 177.758731][ T5878] block nbd1: Receive control failed (result -32) [ 177.793137][T10985] nbd1: detected capacity change from 0 to 127